Squid to ISA pass original IP

[Iain]

All done, if you send me a pm with your email, i'll send it over to you.

 

Iain.

[skeep]

I have pm'd you

 

thanks

[skeep]

Installed and working could not have been easier!!

 

Do you want to pop it on sourceforge Iain? I have some software on there called skeep VNC console so I could host it on Skeep VNC Console if you would like?

 

Thanks again!!

[skeep]

OK ISA is seeing the correct IP but websense is not! I think it is the order of the ISAPI filters.

 

I have the websense filter in position 9 and the x-forwarded-for in position 8. If i try to swap the positions I get

 

The operation failed :A Web filter can be moved only into the positions of filters that have the same priority.

 

Am i correct in thinking that the websense filter is running first and therefore, shows the wrong IP?

 

Thanks

[skeep]

I have managed to swap the order of the ISAPI and this has made no difference. I take it that teh websense ISAPI is ignoring the previous ISAPI.

 

I need a websense expert:confused:

[skeep]

*SOLVED*

 

Sometimes, workstations that must be filtered are located behind a proxy that uses Microsoft ISA Server as a proxy (proxy chaining).

Some proxies can be configured to expose the workstation's IP address in the HTTP header via the value of X-Forwarded-For:. Microsoft ISA integration with Websense software can be configured to do filtering lookups based on this value, rather than on the IP address of the downstream proxy.

To filter workstations behind multiple proxies:

Configure the downstream proxy to pass workstation IP addresses via X-Forwarded-For.

See the proxy documentation for instructions.

On the machine running Microsoft ISA Server, navigate to the WINDOWS\system32 directory.

Open the file wsMSP.ini in a text editor.

Add a new heading of: [configSection]

Under the new heading add the following key:

CheckXForwardedFor=1

NOTE If the X-Forwarded-For value is not found in the HTTP header when this feature is enabled, filtering lookups occur based on the IP address of the downstream proxy.

 

Stop the ISA Server service via the Windows Services dialog box.

The service is labeled as Microsoft Firewall.

Start the ISA Server service via the Windows Services dialog box.

Repeat steps 1-6 for each machine on which Websense ISAPI Filter is installed.

[cic]

Hello Iain!

 

I read that you have developed a X-Forwarded-For Log Filter for ISA that was successfully tested by Skeep. I would be grateful if you could send me, too, this filter and the instructions how to set it. I had to make a cross upgrade to Trend Micro InterScan Web Security Virtual Appliance which can add the XFF HTTP header. So now I have a chain of proxies. Unfortunately ISA is not able to get from it the originating IP address and the product from Winfrasoft costs too much for me. Thanks a lot.

All the best,

 

cic