Troubleshooting IAG Path Validation Problems
If you’re an experienced ISA firewall admin, you probably have had a chance to configure the firewall’s HTTP Security Filter to increase the level of security the firewall can apply to both inbound and outbound connections. While the HTTP Security Filter is useful, it does suffer from a couple of limitations. One of those limitations is the lack of support for Regular Expressions.
The Forefront Intelligent Application Gateway (IAG) does not suffer from this limitation and makes liberal use of Regular Expressions for both positive and negative logic filtering. However, this feature can also trip you up.
To see an example of how you might run into problems publishing your Web Applications using the IAG and how to solve RegEx issues, check out Yuri Diogenes’ article on this subject at http://blogs.technet.com/yuridiogenes/archive/2008...l.aspx
HTH,
Tom
Thomas W Shinder, M.D.
Site: http://www.isaserver.org/
Blog: http://blogs.isaserver.org/shinder/
GET THE NEW BOOK! Go to http://tinyurl.com/2gpoo8
Email: tshinder@isaserver.org
MVP — Microsoft Firewalls (ISA)
ferrix Says:
July 20th, 2008 at 3:24 pm
With the IsaScript filter, you can do Regular Expressions in ISA
Having said that, it’s certainly not for the faint of heart.
Thomas Shinder Says:
July 20th, 2008 at 7:29 pm
HA! Yes, that’s an excellent point. In fact, I think we need a blog post on this topic. Stay tuned.
Thanks!
Tom