{"id":281,"date":"2006-05-18T06:19:00","date_gmt":"2006-05-18T06:19:00","guid":{"rendered":"http:\/\/markwilson.me.uk\/blog\/2006\/05\/configuring-network-connections-for.htm"},"modified":"2007-03-09T13:57:49","modified_gmt":"2007-03-09T13:57:49","slug":"configuring-network-connections-for","status":"publish","type":"post","link":"https:\/\/www.markwilson.co.uk\/blog\/2006\/05\/configuring-network-connections-for.htm","title":{"rendered":"Configuring network connections for ISA Server 2000\/2004 (aka when proxy server migrations turn bad)"},"content":{"rendered":"<p><!--114796143110926287-->It was supposed to be so easy. The new server was already built, with the same IP addresses as the old one.  All I had to do was disconnect the NT 4.0 Proxy Server from the network and power on the new Windows Server 2003 R2 box with Internet Security and Acceleration (ISA) Server 2004 on it, then configure and test a few filter rules; but I had forgotten the first law of IT consultancy &#8211; nothing is ever straightforward &#8211; which is why I&#8217;m writing this post on the train to work after rolling back the migration and getting just 4 and a half hours sleep last night&#8230;<\/p>\n<p>Firstly, I decided that the ISA Server should be joined to the Active Directory.  My original plan had been that leaving it in a workgroup would be secure, but as I didn&#8217;t want to allow unrestricted anonymous (i.e. unmonitored) Internet access I&#8217;d be limited with my authentication options (either set up a RADIUS server to handle authentication or mirror the user accounts on the ISA Server).  I wasn&#8217;t confident that ISA Server would work well if it was joined a domain after installation so I uninstalled ISA Server, joined the computer to the domain, and reinstalled ISA Server, plus service pack 2 and other updates.<\/p>\n<p>It only took a few seconds to configure the cache and set up a firewall policy rule to allow all ports outbound access (just as a test, I could lock it down again later), add all the internal networks and enable the web proxy client, following which Internet access from the local network was restored.  The trouble was that none of the machines on remote sites could access the Internet.<\/p>\n<p>Suspecting a DNS issue, I began to investigate name resolution problems and (here was my mistake) questioning why no forwarders were configured on the internal DNS server (because <a href=\"http:\/\/technet2.microsoft.com\/WindowsServer\/en\/Library\/0bcd97e6-b75d-48ce-83ca-bf470573ebdc1033.mspx?pf=true\">DNS monitoring<\/a> showed that the simple queries were fine, but recursive lookups were failing).  If I&#8217;d been thinking clearly, I would have realised that the internal network doesn&#8217;t need to have a recursive DNS path to the ISP&#8217;s DNS servers (the proxy server should handle that on behalf of the clients) &#8211; although I do think that having a clear path from clients to the internal DNS and onwards to the ISP&#8217;s DNS is the most straightforward configuration, supporting both internal (Active Directory) and external (Internet) name resolution (and Microsoft&#8217;s advice is to <a href=\"http:\/\/www.microsoft.com\/technet\/prodtechnol\/isa\/2004\/plan\/configuring_dns.mspx\">configure only internal or external DNS on the ISA Server &#8211; not both<\/a>).<\/p>\n<p>The problem was the network configuration on the ISA server.  Jim Harrison&#8217;s excellent article on <a href=\"http:\/\/www.isaserver.org\/tutorials\/configuring_isa_server_interface_settings.html\">configuring ISA Server interface settings<\/a> is my bible when configuring the network cards on an ISA server, but I hadn&#8217;t set up the routes from the external network to my internal networks correctly.  The local LAN was fine, but ISA Server was rejecting requests from remote internal networks because it didn&#8217;t understand the underlying network path (flagging a configuration error alert warning that the address range of an ISA Server network should match the address ranges routable through the associated network adapter as defined in the routing table).  When I monitored the traffic flow, I could see incoming requests that were denied with no rule was given as the reason &#8211; <a href=\"http:\/\/www.isaserver.org\/articles\/isa2004_accessrules.html\">another clue that there was a problem with the network rules<\/a>.<\/p>\n<p>Although the configuring ISA Server interface settings article points out that a route will be required to each internal network, I&#8217;d set the next hop as the internal interface of the ISA server, rather that the local router (the internal NIC doesn&#8217;t have a default gateway if configured correctly).  Adding persistent routes for each of the internal networks (<code>route -p add <em>remoteinternalnetwork<\/em> mask <em>subnetmask routeripaddress<\/em><\/code>) fixed the issue, after which <code>nslookup<\/code> (and web access) began to work from all sites.<\/p>\n<p>Unfortunately, by the time I&#8217;d worked this out, it was too late to set up and test the various filter rules that are needed to ensure correct (authenticated) HTTP(S) and FTP browsing, SMTP e-mail, access to OWA, etc., so I decided to back out and reconnect the legacy proxy server.  At least now I know that the connectivity problems are resolved, I can attempt the migration again another evening.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>It was supposed to be so easy. The new server was already built, with the same IP addresses as the old one. All I had to do was disconnect the NT 4.0 Proxy Server from the network and power on the new Windows Server 2003 R2 box with Internet Security and Acceleration (ISA) Server 2004 &hellip; <a href=\"https:\/\/www.markwilson.co.uk\/blog\/2006\/05\/configuring-network-connections-for.htm\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Configuring network connections for ISA Server 2000\/2004 (aka when proxy server migrations turn bad)<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[],"tags":[71],"class_list":["post-281","post","type-post","status-publish","format-standard","hentry","tag-isa"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Configuring network connections for ISA Server 2000\/2004 (aka when proxy server migrations turn bad) - markwilson.it<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.markwilson.co.uk\/blog\/2006\/05\/configuring-network-connections-for.htm\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Configuring network connections for ISA Server 2000\/2004 (aka when proxy server migrations turn bad) - markwilson.it\" \/>\n<meta property=\"og:description\" content=\"It was supposed to be so easy. The new server was already built, with the same IP addresses as the old one. All I had to do was disconnect the NT 4.0 Proxy Server from the network and power on the new Windows Server 2003 R2 box with Internet Security and Acceleration (ISA) Server 2004 &hellip; Continue reading Configuring network connections for ISA Server 2000\/2004 (aka when proxy server migrations turn bad)\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.markwilson.co.uk\/blog\/2006\/05\/configuring-network-connections-for.htm\" \/>\n<meta property=\"og:site_name\" content=\"markwilson.it\" \/>\n<meta property=\"article:published_time\" content=\"2006-05-18T06:19:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2007-03-09T13:57:49+00:00\" \/>\n<meta name=\"author\" content=\"Mark Wilson\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@markwilsonit\" \/>\n<meta name=\"twitter:site\" content=\"@markwilsonit\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mark Wilson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2006\\\/05\\\/configuring-network-connections-for.htm#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2006\\\/05\\\/configuring-network-connections-for.htm\"},\"author\":{\"name\":\"Mark Wilson\",\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/98f61365e7c39d6be942174b8c4de468\"},\"headline\":\"Configuring network connections for ISA Server 2000\\\/2004 (aka when proxy server migrations turn bad)\",\"datePublished\":\"2006-05-18T06:19:00+00:00\",\"dateModified\":\"2007-03-09T13:57:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2006\\\/05\\\/configuring-network-connections-for.htm\"},\"wordCount\":721,\"commentCount\":5,\"publisher\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/98f61365e7c39d6be942174b8c4de468\"},\"keywords\":[\"Microsoft ISA Server\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2006\\\/05\\\/configuring-network-connections-for.htm#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2006\\\/05\\\/configuring-network-connections-for.htm\",\"url\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2006\\\/05\\\/configuring-network-connections-for.htm\",\"name\":\"Configuring network connections for ISA Server 2000\\\/2004 (aka when proxy server migrations turn bad) - markwilson.it\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#website\"},\"datePublished\":\"2006-05-18T06:19:00+00:00\",\"dateModified\":\"2007-03-09T13:57:49+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2006\\\/05\\\/configuring-network-connections-for.htm#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2006\\\/05\\\/configuring-network-connections-for.htm\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/2006\\\/05\\\/configuring-network-connections-for.htm#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Configuring network connections for ISA Server 2000\\\/2004 (aka when proxy server migrations turn bad)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/\",\"name\":\"markwilson.it\",\"description\":\"get-info -class technology | write-output &gt; \\\/dev\\\/web\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/98f61365e7c39d6be942174b8c4de468\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/#\\\/schema\\\/person\\\/98f61365e7c39d6be942174b8c4de468\",\"name\":\"Mark Wilson\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/i0.wp.com\\\/www.markwilson.co.uk\\\/blog\\\/uploads\\\/image-4.png?fit=800%2C800&ssl=1\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/www.markwilson.co.uk\\\/blog\\\/uploads\\\/image-4.png?fit=800%2C800&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.markwilson.co.uk\\\/blog\\\/uploads\\\/image-4.png?fit=800%2C800&ssl=1\",\"width\":800,\"height\":800,\"caption\":\"Mark Wilson\"},\"logo\":{\"@id\":\"https:\\\/\\\/i0.wp.com\\\/www.markwilson.co.uk\\\/blog\\\/uploads\\\/image-4.png?fit=800%2C800&ssl=1\"},\"description\":\"A Chartered IT Professional, with recent experience in technology leadership, IT strategy and practice management roles, Mark Wilson is an Enterprise Architect in the Advisory and Management Group at risual. During a career spanning more than two decades, Mark has gained widespread recognition as an expert in his field including both industry and national press exposure. In addition to certifications from Microsoft, VMware, Red Hat, The Open Group and Axelos, Mark held a Microsoft Most Valuable Professional (MVP) award for three years and is now part of the MVP Reconnect programme. Mark is also well-known on social media and maintains an award-winning blog.\",\"sameAs\":[\"http:\\\/\\\/www.markwilson.co.uk\\\/\",\"https:\\\/\\\/www.instagram.com\\\/markwilsonuk\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/markawilson\\\/\",\"https:\\\/\\\/x.com\\\/markwilsonit\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCWHlZCoHRTocdvtrOJ2IL4A\"],\"url\":\"https:\\\/\\\/www.markwilson.co.uk\\\/blog\\\/author\\\/mark-wilson\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Configuring network connections for ISA Server 2000\/2004 (aka when proxy server migrations turn bad) - markwilson.it","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.markwilson.co.uk\/blog\/2006\/05\/configuring-network-connections-for.htm","og_locale":"en_GB","og_type":"article","og_title":"Configuring network connections for ISA Server 2000\/2004 (aka when proxy server migrations turn bad) - markwilson.it","og_description":"It was supposed to be so easy. The new server was already built, with the same IP addresses as the old one. All I had to do was disconnect the NT 4.0 Proxy Server from the network and power on the new Windows Server 2003 R2 box with Internet Security and Acceleration (ISA) Server 2004 &hellip; Continue reading Configuring network connections for ISA Server 2000\/2004 (aka when proxy server migrations turn bad)","og_url":"https:\/\/www.markwilson.co.uk\/blog\/2006\/05\/configuring-network-connections-for.htm","og_site_name":"markwilson.it","article_published_time":"2006-05-18T06:19:00+00:00","article_modified_time":"2007-03-09T13:57:49+00:00","author":"Mark Wilson","twitter_card":"summary_large_image","twitter_creator":"@markwilsonit","twitter_site":"@markwilsonit","twitter_misc":{"Written by":"Mark Wilson","Estimated reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.markwilson.co.uk\/blog\/2006\/05\/configuring-network-connections-for.htm#article","isPartOf":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/2006\/05\/configuring-network-connections-for.htm"},"author":{"name":"Mark Wilson","@id":"https:\/\/www.markwilson.co.uk\/blog\/#\/schema\/person\/98f61365e7c39d6be942174b8c4de468"},"headline":"Configuring network connections for ISA Server 2000\/2004 (aka when proxy server migrations turn bad)","datePublished":"2006-05-18T06:19:00+00:00","dateModified":"2007-03-09T13:57:49+00:00","mainEntityOfPage":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/2006\/05\/configuring-network-connections-for.htm"},"wordCount":721,"commentCount":5,"publisher":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/#\/schema\/person\/98f61365e7c39d6be942174b8c4de468"},"keywords":["Microsoft ISA Server"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.markwilson.co.uk\/blog\/2006\/05\/configuring-network-connections-for.htm#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.markwilson.co.uk\/blog\/2006\/05\/configuring-network-connections-for.htm","url":"https:\/\/www.markwilson.co.uk\/blog\/2006\/05\/configuring-network-connections-for.htm","name":"Configuring network connections for ISA Server 2000\/2004 (aka when proxy server migrations turn bad) - markwilson.it","isPartOf":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/#website"},"datePublished":"2006-05-18T06:19:00+00:00","dateModified":"2007-03-09T13:57:49+00:00","breadcrumb":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/2006\/05\/configuring-network-connections-for.htm#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.markwilson.co.uk\/blog\/2006\/05\/configuring-network-connections-for.htm"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.markwilson.co.uk\/blog\/2006\/05\/configuring-network-connections-for.htm#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.markwilson.co.uk\/blog"},{"@type":"ListItem","position":2,"name":"Configuring network connections for ISA Server 2000\/2004 (aka when proxy server migrations turn bad)"}]},{"@type":"WebSite","@id":"https:\/\/www.markwilson.co.uk\/blog\/#website","url":"https:\/\/www.markwilson.co.uk\/blog\/","name":"markwilson.it","description":"get-info -class technology | write-output &gt; \/dev\/web","publisher":{"@id":"https:\/\/www.markwilson.co.uk\/blog\/#\/schema\/person\/98f61365e7c39d6be942174b8c4de468"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.markwilson.co.uk\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":["Person","Organization"],"@id":"https:\/\/www.markwilson.co.uk\/blog\/#\/schema\/person\/98f61365e7c39d6be942174b8c4de468","name":"Mark Wilson","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/i0.wp.com\/www.markwilson.co.uk\/blog\/uploads\/image-4.png?fit=800%2C800&ssl=1","url":"https:\/\/i0.wp.com\/www.markwilson.co.uk\/blog\/uploads\/image-4.png?fit=800%2C800&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.markwilson.co.uk\/blog\/uploads\/image-4.png?fit=800%2C800&ssl=1","width":800,"height":800,"caption":"Mark Wilson"},"logo":{"@id":"https:\/\/i0.wp.com\/www.markwilson.co.uk\/blog\/uploads\/image-4.png?fit=800%2C800&ssl=1"},"description":"A Chartered IT Professional, with recent experience in technology leadership, IT strategy and practice management roles, Mark Wilson is an Enterprise Architect in the Advisory and Management Group at risual. During a career spanning more than two decades, Mark has gained widespread recognition as an expert in his field including both industry and national press exposure. In addition to certifications from Microsoft, VMware, Red Hat, The Open Group and Axelos, Mark held a Microsoft Most Valuable Professional (MVP) award for three years and is now part of the MVP Reconnect programme. Mark is also well-known on social media and maintains an award-winning blog.","sameAs":["http:\/\/www.markwilson.co.uk\/","https:\/\/www.instagram.com\/markwilsonuk\/","https:\/\/www.linkedin.com\/in\/markawilson\/","https:\/\/x.com\/markwilsonit","https:\/\/www.youtube.com\/channel\/UCWHlZCoHRTocdvtrOJ2IL4A"],"url":"https:\/\/www.markwilson.co.uk\/blog\/author\/mark-wilson"}]}},"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":288,"url":"https:\/\/www.markwilson.co.uk\/blog\/2006\/05\/isa-server-2004-gotchas.htm","url_meta":{"origin":281,"position":0},"title":"ISA Server 2004 &#8220;gotchas&#8221;","author":"Mark Wilson","date":"Thursday 25 May 2006","format":false,"excerpt":"After having to abort last week's attempt to replace an aging Microsoft Proxy Server 2.0 installation with Microsoft Internet Security and Acceleration (ISA) Server 2004, last night I had another go and I'm pleased to say that the ISA Server is now up and running. There are still some minor\u2026","rel":"","context":"In \"Microsoft ISA Server\"","block_context":{"text":"Microsoft ISA Server","link":"https:\/\/www.markwilson.co.uk\/blog\/tag\/isa"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":236,"url":"https:\/\/www.markwilson.co.uk\/blog\/2004\/04\/10000-feet-view-of-microsoft-isa.htm","url_meta":{"origin":281,"position":1},"title":"10,000 feet view of Microsoft ISA Server 2000","author":"Mark Wilson","date":"Thursday 8 April 2004","format":false,"excerpt":"Microsoft Internet Security and Acceleration (ISA) Server 2000 is Microsoft's firewall and proxy server product, replacing Microsoft Proxy Server. ISA Server 2000 operates in one of three modes: Firewall - security server. Caching (i.e. proxy) - acceleration server. Integrated - firewall and caching. As a firewall, ISA Server's filtering capabilities\u2026","rel":"","context":"In \"Microsoft ISA Server\"","block_context":{"text":"Microsoft ISA Server","link":"https:\/\/www.markwilson.co.uk\/blog\/tag\/isa"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1016,"url":"https:\/\/www.markwilson.co.uk\/blog\/2008\/03\/isa-server-client-software.htm","url_meta":{"origin":281,"position":2},"title":"ISA Server client software","author":"Mark Wilson","date":"Thursday 13 March 2008","format":false,"excerpt":"Fighting with ISA Server 2006, as I have been for the last few days, has given me an opportunity to refresh my knowledge of the various ISA Server clients. Actually, calling them clients is far more grandiose than is strictly necessary (only one of them involves the installation of client\u2026","rel":"","context":"In \"Microsoft ISA Server\"","block_context":{"text":"Microsoft ISA Server","link":"https:\/\/www.markwilson.co.uk\/blog\/tag\/isa"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":507,"url":"https:\/\/www.markwilson.co.uk\/blog\/2005\/05\/installing-and-verifying-configuration.htm","url_meta":{"origin":281,"position":3},"title":"Installing and verifying the configuration of an ISA Server 2000 array","author":"Mark Wilson","date":"Friday 6 May 2005","format":false,"excerpt":"Just over a year ago, I posted a blog entry which gives a 10,000 feet view of Microsoft ISA Server 2000. I haven't done anything with ISA Server since then but over the last few days, I've been installing an new ISA Server 2000 array into an existing enterprise for\u2026","rel":"","context":"In \"Microsoft ISA Server\"","block_context":{"text":"Microsoft ISA Server","link":"https:\/\/www.markwilson.co.uk\/blog\/tag\/isa"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":317,"url":"https:\/\/www.markwilson.co.uk\/blog\/2005\/06\/chaining-proxy-servers.htm","url_meta":{"origin":281,"position":4},"title":"Chaining proxy servers","author":"Mark Wilson","date":"Thursday 30 June 2005","format":false,"excerpt":"I spent some time yesterday chaining two ISA Server 2000 proxy arrays. As there doesn't seem to be a lot of information about on the subject, I thought I'd provide some here (most of what can be found easily is about using proxy chaining for anonymity, and mostly reads as\u2026","rel":"","context":"In \"Microsoft ISA Server\"","block_context":{"text":"Microsoft ISA Server","link":"https:\/\/www.markwilson.co.uk\/blog\/tag\/isa"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":196,"url":"https:\/\/www.markwilson.co.uk\/blog\/2005\/07\/allowing-isa-server-2000-web-proxy.htm","url_meta":{"origin":281,"position":5},"title":"Allowing ISA Server 2000 web proxy clients to use non-standard ports for HTTPS","author":"Mark Wilson","date":"Friday 15 July 2005","format":false,"excerpt":"I spent most of today trying to get some ISA Server 2000 web proxy clients to access a web application using HTTPS on a non-standard port (4443). The issue was further complicated by the fact that the application server needed to be accessed using an upstream proxy server. Once the\u2026","rel":"","context":"In \"Microsoft ISA Server\"","block_context":{"text":"Microsoft ISA Server","link":"https:\/\/www.markwilson.co.uk\/blog\/tag\/isa"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/posts\/281","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=281"}],"version-history":[{"count":0,"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/posts\/281\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=281"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=281"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.markwilson.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=281"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}