Do not proxy sites and services

Microsoft ISA 2006 and Web Proxy.

Hello,

I have a MS ISA 2006 server as a Web proxy server in my network.

How do I setup some of the traffic on my network to bypass the proxy server, or that some sites (like my intranet) traffic to not be proxied at all?

I use the private range for all my servers and workstations (192.168.0.0 255.255.0.0) and I have a couple of external services that I would like to bypass my ISA server. This traffic must not be proxied.

I'm trying to use the wpad.dat file solution, but I'm not having much luck there.  
Where do I set the settings in ISA to NOT proxy some traffic and to allow it to go directly?

Thanks.

Ampletrix

AmpletrixAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

spogsCommented:
This is setup on the client side.

Internet Options -> Connections -> Lan Settings -> Use Proxy Server Advanced -> At the bottom - Do not use Proxy server for addresses beginning with ...


Do you need to push this centrally?  Do you have an AD environment?
0
AmpletrixAuthor Commented:
Hello spogs,

Yes I have AD with on Windows Server 2003.

My biggest problem is to get some traffic to bypass the proxy. Some of these sites are not internal traffic, but still used for applications. My ISA server is only ISA std edition, and I have over 800 users.

So, I'd like to bypass the server as much as possible.
I already have the internet connection settings setup for all the users via group policy.

I'm thinking of using WPAD files for the traffic, but when I create it, it explicitly tellms me not to modify it.

For example - I have an application that usesses an external address of 147.89.213.45 - 147.89.213.50 and I don't want any of the traffic to go through my proxy.

Then I also need to keep notebook users in mind when they go off site.

Thanks.

Ampletrix.
0
spogsCommented:
So when you add the 147.89.213.45 - 147.89.213.50 range to the exclusions in the connection settings it doesn't work?

Anything in the do not use area would not go through your proxy.


I must be missing something.



When the notebook users go offsite they would have to turn the proxy off of course.
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

AmpletrixAuthor Commented:
Where exactly is the exclusions settings?
0
spogsCommented:
Here... see attached img.
screen-capture.png
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
AmpletrixAuthor Commented:
Thank you. The problem is that I still have some IE6 clients, and I have loads of applications in there already.
I was hoping there might be something in ISA server itself to allow traffic to go through without being proxied.

I have read a couple of articles about WPAD.Dat configurations, but I'm not entirely sure that is what I'm looking for.
So - Without the solution above, Is there anyway I can do get the configuration in ISA to allow traffic to bypass or to not be proxied?

Thanks.
0
spogsCommented:
Off the top of my head... not sure... But I thought that option is also available in IE6 and you may be able to push that via a GPO also so you don't have to touch the clients.
0
AmpletrixAuthor Commented:
Thanks - This sounds pretty much what I'd do then.
Just a couple of questions - Is there a limit of the number of entries that I can put into the "bypass" box?
Can I pipe entries in there - for example ip ranges instead of having to add individual entries?


If you know perhaps - Is there a diference between these entries in IE6 and in IE8 - I'm planning an upgrade.

Thanks again.
Ampletrix
0
spogsCommented:
Not sure about any of those factors.  A quick google might give you that answer.  Your going to need to reference google for the right GPO entry too since I dont know that off the top of my head either.

Good luck!

There should be no difference between IE6 and IE8
0
AmpletrixAuthor Commented:
Thanks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Forefront ISA Server

From novice to tech pro — start learning today.