Sitemap

Amicuk Programming Answers

Issue in configuring TMG as Forward/Reverse Proxy

-0001-11-30   Views:3

Advertisement

I am trying to setup reverse and forward proxy using TMG 2010. I have following networks: Internal Networks: 10.2.1.0/24 10.3.1.0/24 DMZ (Perimeter) Network: 10.7.1.0/24   NAT relationship with external network e.g. Public IPs I've setup one TMG node

I am trying to setup reverse and forward proxy using TMG 2010. I have following networks:
Internal Networks:
10.2.1.0/24
10.3.1.0/24
DMZ (Perimeter) Network:
10.7.1.0/24   NAT relationship with external network e.g. Public IPs
I've setup one TMG node and selected "Back Firewall" as topology.
NIC 1 Config: (Internal)
IP:    10.2.1.20
Subnet: 255.255.255.0
DW:     Not defined
DNS:    10.2.1.5
NIC 2 Config: (Perimeter)
IP:    10.7.1.20
Subnet: 255.255.255.0
DW:     10.7.1.5
DNS:    Not Defined
During setup when wizard asked me to define internal IP ranges, I defined 10.2.1.1 - 10.2.1.255 instead of selecting Adaptor.
Setup Completed successfully.
I created Allow rule from internal to local host.
From Client-end:
From client machines i can not access TMG internal interface IP (because gateway is not defined on TMG internal interface i guess)
while i can access DMZ interface IP i.e. 10.7.1.20 and can telnet port 8080.
When i define DMZ interface IP i.e. 10.7.1.20:8080 as proxy address in client-side browser, that throws an error "10061 no connection could be made because the target machine actively refused it"
Failed Connection Attempt
Log Type: Web Proxy (Forward)
Status:10061 No connection could be made because the target machine actively refused it.
Rule: Allow
Source: Internal (10.2.1.39)
Destination:LocalHost (10.7.1.20:8080)
Request:Get http://www.google.com
Protocol:http
On TMG server:
When i define DMZ interface IP i.e. 10.7.1.20:8080 as proxy address in browser that still throws an error "10061 no connection could be made because the target machine actively refused it"
But when i define internal interface IP as proxy in browser i.e. 10.2.1.20:8080 it works.
Allowed Connection
Log Type: Web Proxy (Forward)
Status:303 Not Modified
Rule: [System] Allow all HTTP traffic from forefront TMG to all networks (for CRL downloads)
Source: LocalHost (10.7.1.20:10082)
Destination: External (94.245.34.74:80)
Request:Get http://someurl
Protocol:http
What am i missing please advise and what could be the work around to get this work from internal network.
Regards,

The replay answer
Advertisement
Hello Quan,
Thanks for your reply..
No it didn't work. I'm still using that as reverse proxy and unable to configure that as forward. :-)
Regards,
Farrukh

Go to See the other 3 answers

Issue in configuring TMG as Forward/Reverse Proxy

Category:DefaultRelease time:-0001-11-30Views:130

I am trying to setup reverse and forward proxy using TMG 2010. I have following networks: Internal Networks: 10.2.1.0/24 10.3.1.0/24 DMZ (Perimeter) Network: 10.7.1.0/24   NAT relationship with external network e.g. Public IPs I've setup one TMG node[More]

Forward/reverse proxy chain losing headers

Category:DefaultRelease time:-0001-11-30Views:130

I have the following setup: user(browser) -> proxy1 -> proxy2 -> webserver This has both forward and reverse mappings. In proxy 1, I have an NSAPI plugin that appends a name/value(uid:userid) pair into the HTTP headers, at the end of my current h[More]

SAP Webdispatcher - Reverse Proxy Configuration

Category:DefaultRelease time:-0001-11-30Views:130

Hi All, Need your help in configuration SAP Webdispatcher as reverse proxy. Currently we are using Apache as reverse proxy, but we are facing 400 Bad Request error and not able to solve the issue. So We are planning to install Webdispatcher and confi[More]

Reverse Proxy Configuration - (HPVM Guest) - 11iV3

Category:DefaultRelease time:-0001-11-30Views:130

Hello Unix Champs, On 11iV3 - Vm Guest -  we want to configure this server as reverse proxy Please share step by step procedure/documents to do same. Thanks in advance Regards, Prashant BehalHi, In addition to Luca's comment in order to determine if[More]

Reverse Proxy Configuration - HPVM (Guest)

Category:DefaultRelease time:-0001-11-30Views:130

Hello Unix Champs, On 11iV3 - Vm Guest -  we want to configure this server as reverse proxy Please share step by step procedure/documents to do same. Thanks in advance Regards, Prashant BehalAssuming your webserver is apache, you have to make the apa[More]

Sun Web Server Reverse Proxy and Weblogic HTTP to HTTPS redirection

Category:DefaultRelease time:2015-10-11Views:130

Hi, I am currently testing reverse-proxy from SJSW 7.0 update 5 to Weblogic server but I have encountered an issue. I have configured a context root to be forwarded to weblogic: Web Server: www.server.com URI: /path Reverse Proxy URL: wlserver:9000 W[More]

Reverse proxy with apache2

Category:DefaultRelease time:-0001-11-30Views:130

Hi folks, I have a huge problem here. I have a apache 2.0.50 on a Linux system that is to act as a reverse proxy for an enterprise portal. I have set up the apache to do reverse proxying and so far I have made first success. I can get to the login pa[More]

ISP redundancy and reverse proxy

Category:DefaultRelease time:-0001-11-30Views:130

Greetings, community! We have two EDGE TMG servers and two INTERNAL TMG servers. We have two providers with two dedicated external IP addresses each. I configure ISP Redundancy for each EDGE TMG servers with parameters: Each EDGE TMG server has two E[More]

Web Dispatcher as the Full reverse proxy

Category:DefaultRelease time:-0001-11-30Views:130

Hi all, Has anyone configured SAP Web Dispatcher(WD) as the full reverse proxy for THE portal? We need to open our portal on to the internet and we thinking to put WD inside the DMZ and have it forward the requests to the portal server. Which is expl[More]

Apache Reverse Proxy: Domain problem

Category:DefaultRelease time:-0001-11-30Views:130

Hi, I have a problem with Apache Reverse Proxy (Apache 2.2) and SAP Enterprise Portal 6.0. I configured Apache as a Reverse Proxy Server (with SSL)so that the portal is accessible through the internet. Everything is working fine but the OWA integrati[More]

Reverse Proxy in SOAMANAGER not working

Category:DefaultRelease time:-0001-11-30Views:130

SAP Environment: SAP Netweaver 7.01 SP3 Service Testing Tool: SOAPUI Requirements: Redirect the end-point (serverA) in the WSDL of a web service created from an ABAP proxy to the load balancer What I have done: 1. Defined a Reverse Proxy in SOAMANAGE[More]

Hot
Dear Friends, 1. How to came to Know  the Pending GR or Inbound Delivery  ( GR against inbound delivery ) 2. How to came to know the pending (PO,GR,INVOICE,BILLING) documents in a particular period in a particular level. With Regards MaheruQuestion 1 [More]
I'm using Mail in 10.9.2. I took the mail from 2 old POP a/cs and archived it in 4 (i.e. sent + received) folders under 'On My Mac'.  Then, unfortunately, I deleted the contents of one of those folders. I have a backup of the emails, but it is in an [More]
Dear All, I am trying to display values other than database table field data into a popup with inputtext. this values are derived thru some methods. I have created a editpopupfetchlistener event that calls this method and then populate the field by f [More]
And here's the details... Does anyone know what's going wrong? Process:         Safari [271] Path:            /Applications/Safari.app/Contents/MacOS/Safari Identifier:      com.apple.Safari Version:         5.0.5 (6533.21.1) Build Info:      WebBrow [More]
Hello, We have a problem in BO 4.0 SP5. We have a webi with the following prompt: Year: ie. 2014 Month: ie. 001 Company: ie ES01 The name webi is: Report_Sales When we shchedule the report we can't name the file like: "Report_Sales_<year>_<m [More]
I have a Layout with a transparent Frame on the top most Layer. For this Workflow-Step I do not have access to the original Image-Links, so I guess that all I see are the embedded Preview-Pictures and InDesign reports that all Object-Links are missin [More]
Hi, Our clients use Internet Explorer and with the standard setting (menu Tools, Options, section Security) "Do not save encrypted pages to disk" marked it is not possible for users to make an export of their calendar with UWC. Does anyone know [More]
I use the HP SCAN app to scan from my Photosmart.  I like it because it lets me crop to constrained size.  However, it seems to scan only at 200 DPI.  I want a higher scan resolution.  I know how to change it through System Preferences, but HP SCAN d [More]
Last night my Galaxy SIII updated automatically (I'm not sure what the update was, but everything looks very different). I was just getting used to typing on the Galaxy, but since the update, autocorrect/completion doesn't work at all. It still sugge [More]
I have following questions.. Q1> In BPC 7.0 do we have to update the master data twice one in dimention and also in infoobject. Or the infoobject master data is automatically updated the dimension. Q2> What are the new features in BPC 7.0 NW version [More]