Sign in
 
HomeProductsLibraryLearnDownloadsSupportForums
Microsoft Forefront TechCenter >
> 
> 
ISA 2006 in DMZ and SSL Authentication

Proposed Answer ISA 2006 in DMZ and SSL Authentication

  • Wednesday, November 14, 2012 7:44 PM
     
     
    Sign In to Vote
    0

    Hello can anyone give some insight as to how this can be accomplished? Here's some setup info...

    ISA 2006 Front End Firewall

    DMZ - Web Proxy's - DMZ

    ISA 2004 Back End Firewall

    The front end firewall obviously has no connection to the domain, while the back end firewall does. I have a website that is published on the Front End Firewall, which then forwards the requests to my web proxy, which then forwards the request to the back end firewall, and then on to the actual web application. I need to add security to this setup by use of SSL Authentication. Any suggestions?

    Thanks,

     

All Replies

  • Thursday, November 15, 2012 7:09 AM
     
     
    Sign In to Vote
    0

    Hi,

    to clarify this. You need authentication on the internal webserver?

    regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.nt-faq.de

     
  • Thursday, November 15, 2012 1:15 PM
     
     
    Sign In to Vote
    0
    Yes sir, the actual web application is in the internal network which the backend firewall can reach unrestricted. The backend firewall is ISA 2004
     
  • Friday, November 23, 2012 4:52 AM
    Moderator
     
     Proposed Answer
    Sign In to Vote
    0

    Hi,

    Thank you for the post.

    You can use a Client Certificate when bridging SSL traffic from TMG server: http://technet.microsoft.com/en-us/library/cc302649.aspx

    Regards,

    Nick Gu - MSFT