Discussion Locked

Web Server behind the ISA Firewall

0 helpful
9 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I am trying to place a webserver behind the ISA firewall. I have multiple websites on the same webserver. I have ISA routing to the webserver, but can only get one site to work on ISA. How can I have the ISA server external IP addresses look at multiple Web sites on the same webserver

9 replies

by insatiable

I've only run multiple web sites on the same webserver with different port numbers.

If that's what you are doing, are you allowing more than port 80 for http and 443 for https to route through the firewall to the other webservers?

For instance, webserver1 runs on 198.198.198.1, using port 80.
webserver2 runs on 198.198.198.1, using port 222

So ISA has to allow the http protocol to use port 80 and port 222 to that IP address of the webserver.

I hope that helps --
Good luck,
Melissa

by dc1

Either use different port numbers for each web site or seperate IP addresses for each web site.

by dlafrombois

Both answers are correct but are missing one more element. I make the conclusion that you are proxying with a NAT the web traffic from the public network to the private. If this is correct, you will have to publish multiple IP addresses on the public network which will map (one-to-one) to each of the internal(Private) address allocated to your web servers. This is because the proxy from the public network to the private will be using the firewall/proxy servers ip address only or designated ports of the firewall/proxy servers ip. Thus allowing you public users access to individual web sites using the default port 80. This is more desirable than changing ports.

by kurt.smith

IF you need for each web site a public IP Address on the External NIC of the ISA server why not creating a DMZ, place there your web server with public addresses and configure packet filters to access.
With this you avoid external people accessing your internal network.

This discussion is closed to new replies.