Sitemap

Amicuk Programming Answers

Issue in configuring TMG as Forward/Reverse Proxy

-0001-11-30   Views:2

Advertisement

I am trying to setup reverse and forward proxy using TMG 2010. I have following networks: Internal Networks: 10.2.1.0/24 10.3.1.0/24 DMZ (Perimeter) Network: 10.7.1.0/24   NAT relationship with external network e.g. Public IPs I've setup one TMG node

I am trying to setup reverse and forward proxy using TMG 2010. I have following networks:
Internal Networks:
10.2.1.0/24
10.3.1.0/24
DMZ (Perimeter) Network:
10.7.1.0/24   NAT relationship with external network e.g. Public IPs
I've setup one TMG node and selected "Back Firewall" as topology.
NIC 1 Config: (Internal)
IP:    10.2.1.20
Subnet: 255.255.255.0
DW:     Not defined
DNS:    10.2.1.5
NIC 2 Config: (Perimeter)
IP:    10.7.1.20
Subnet: 255.255.255.0
DW:     10.7.1.5
DNS:    Not Defined
During setup when wizard asked me to define internal IP ranges, I defined 10.2.1.1 - 10.2.1.255 instead of selecting Adaptor.
Setup Completed successfully.
I created Allow rule from internal to local host.
From Client-end:
From client machines i can not access TMG internal interface IP (because gateway is not defined on TMG internal interface i guess)
while i can access DMZ interface IP i.e. 10.7.1.20 and can telnet port 8080.
When i define DMZ interface IP i.e. 10.7.1.20:8080 as proxy address in client-side browser, that throws an error "10061 no connection could be made because the target machine actively refused it"
Failed Connection Attempt
Log Type: Web Proxy (Forward)
Status:10061 No connection could be made because the target machine actively refused it.
Rule: Allow
Source: Internal (10.2.1.39)
Destination:LocalHost (10.7.1.20:8080)
Request:Get http://www.google.com
Protocol:http
On TMG server:
When i define DMZ interface IP i.e. 10.7.1.20:8080 as proxy address in browser that still throws an error "10061 no connection could be made because the target machine actively refused it"
But when i define internal interface IP as proxy in browser i.e. 10.2.1.20:8080 it works.
Allowed Connection
Log Type: Web Proxy (Forward)
Status:303 Not Modified
Rule: [System] Allow all HTTP traffic from forefront TMG to all networks (for CRL downloads)
Source: LocalHost (10.7.1.20:10082)
Destination: External (94.245.34.74:80)
Request:Get http://someurl
Protocol:http
What am i missing please advise and what could be the work around to get this work from internal network.
Regards,

The replay answer
Advertisement
Hello Quan,
Thanks for your reply..
No it didn't work. I'm still using that as reverse proxy and unable to configure that as forward. :-)
Regards,
Farrukh

Go to See the other 3 answers

Issue in configuring TMG as Forward/Reverse Proxy

Category:DefaultRelease time:-0001-11-30Views:130

I am trying to setup reverse and forward proxy using TMG 2010. I have following networks: Internal Networks: 10.2.1.0/24 10.3.1.0/24 DMZ (Perimeter) Network: 10.7.1.0/24   NAT relationship with external network e.g. Public IPs I've setup one TMG node[More]

Forward/reverse proxy chain losing headers

Category:DefaultRelease time:-0001-11-30Views:130

I have the following setup: user(browser) -> proxy1 -> proxy2 -> webserver This has both forward and reverse mappings. In proxy 1, I have an NSAPI plugin that appends a name/value(uid:userid) pair into the HTTP headers, at the end of my current h[More]

SAP Webdispatcher - Reverse Proxy Configuration

Category:DefaultRelease time:-0001-11-30Views:130

Hi All, Need your help in configuration SAP Webdispatcher as reverse proxy. Currently we are using Apache as reverse proxy, but we are facing 400 Bad Request error and not able to solve the issue. So We are planning to install Webdispatcher and confi[More]

Reverse Proxy Configuration - (HPVM Guest) - 11iV3

Category:DefaultRelease time:-0001-11-30Views:130

Hello Unix Champs, On 11iV3 - Vm Guest -  we want to configure this server as reverse proxy Please share step by step procedure/documents to do same. Thanks in advance Regards, Prashant BehalHi, In addition to Luca's comment in order to determine if[More]

Reverse Proxy Configuration - HPVM (Guest)

Category:DefaultRelease time:-0001-11-30Views:130

Hello Unix Champs, On 11iV3 - Vm Guest -  we want to configure this server as reverse proxy Please share step by step procedure/documents to do same. Thanks in advance Regards, Prashant BehalAssuming your webserver is apache, you have to make the apa[More]

Sun Web Server Reverse Proxy and Weblogic HTTP to HTTPS redirection

Category:DefaultRelease time:2015-10-11Views:130

Hi, I am currently testing reverse-proxy from SJSW 7.0 update 5 to Weblogic server but I have encountered an issue. I have configured a context root to be forwarded to weblogic: Web Server: www.server.com URI: /path Reverse Proxy URL: wlserver:9000 W[More]

Reverse proxy with apache2

Category:DefaultRelease time:-0001-11-30Views:130

Hi folks, I have a huge problem here. I have a apache 2.0.50 on a Linux system that is to act as a reverse proxy for an enterprise portal. I have set up the apache to do reverse proxying and so far I have made first success. I can get to the login pa[More]

ISP redundancy and reverse proxy

Category:DefaultRelease time:-0001-11-30Views:130

Greetings, community! We have two EDGE TMG servers and two INTERNAL TMG servers. We have two providers with two dedicated external IP addresses each. I configure ISP Redundancy for each EDGE TMG servers with parameters: Each EDGE TMG server has two E[More]

Web Dispatcher as the Full reverse proxy

Category:DefaultRelease time:-0001-11-30Views:130

Hi all, Has anyone configured SAP Web Dispatcher(WD) as the full reverse proxy for THE portal? We need to open our portal on to the internet and we thinking to put WD inside the DMZ and have it forward the requests to the portal server. Which is expl[More]

Apache Reverse Proxy: Domain problem

Category:DefaultRelease time:-0001-11-30Views:130

Hi, I have a problem with Apache Reverse Proxy (Apache 2.2) and SAP Enterprise Portal 6.0. I configured Apache as a Reverse Proxy Server (with SSL)so that the portal is accessible through the internet. Everything is working fine but the OWA integrati[More]

Reverse Proxy in SOAMANAGER not working

Category:DefaultRelease time:-0001-11-30Views:130

SAP Environment: SAP Netweaver 7.01 SP3 Service Testing Tool: SOAPUI Requirements: Redirect the end-point (serverA) in the WSDL of a web service created from an ABAP proxy to the load balancer What I have done: 1. Defined a Reverse Proxy in SOAMANAGE[More]

Hot
Dear, We happened to know  A customer code been posted with wrong gl recon account in FBL5N. User has been choosing mistakenly  wrong alternative recon. account while manual posting. So User wants to change this GL account on the line of customer in [More]
I used my snow leopard disk to erase my hard drive. Now I want to eject the snow leopard disk to clean install from the lion boot disk I made. How do I eject the snow leopard disk? It is the start up disk and I can't figure out how to get it out of t [More]
Hi everyone , I have created an animated button with Edge Animate, but when I import in my Adobe Muse project I can't link it to anchor points in Muse. What is the code? Thanks.Hi, Could you please take a look to this thread and try the suggestion. S [More]
Hello, I am creating a swing view for my ADF application (quite new for me, swing...) and I'd like to know how I can use localization for items such as frame title, menu item names, etc. I'm using JDeveloper 11.1.1.3.0Hi, you use Java resource bundle [More]
Dock is only showing on one of two monitors in setup - when I click to second monitor, it doesn't show up as it has in the past. On Friday after install, it was. Setting somewhere? Any insight is appreciated.This could be a bug. Could you test with F [More]
We have a three week old Macbook Pro 13 inch. My son installed the Messages Beta. It deleted iChat and now he can't iChat (video etc.) with far away family members because they have iChat and he has Facetime and Messages. He said that during the down [More]
When I use the clipping mask, I later cannot recognise that there is one, as there is no 2nd box that appears like it did in previous Illustrator programs. Is there a way to make it visible?CS 4? I can still see the clipping mask in the Layers Panel [More]
If I invoke a java.lang.reflect.Method and that method throws InvocationTargetException then surely the first stack frame of ite.getCause() should be the method that I invoked, except that's not happening! In fact the frames returned seem to be nothi [More]
The new SPA122 device connected to router through DHCP. I can see IP-address on router's web page, can ping it, and receive it with ****110# IVR command. But I cannot access web configuration utility in the browser: the page is unavailible. I tried t [More]
My itunes has been saying for awhile that i needed a software update, so i did today and it erased all my photos. Is there anyway to get those back?- If they were photos synced to the iPod they are gone unless you get them from where you obtained the [More]