Remote Desktop and ISA

[wesleyw]

Has anyone got this working externally I'm still having issues with certificates and 408 time outs? If not anyone know of a good book.

 

 

Wes

[CyberNerd]

If not anyone know of a good book.

 

the bible.

[wesleyw]

Praying may be the only way to get this to work

 

Wes

[fawkers]

Hi there

 

We have a TSG published through ISA here which works; we are on ISA 2006, the TSG is on Windows 2008 R2.

 

what sort of issues are you having?

[wesleyw]

It works internally but I can't get it to publish externally when I try it comes back with a 408 time out issue related to SSL certs?

 

i.e.

 

The page cannot be displayed

Explanation: There is a problem with the page you are trying to reach and it cannot be displayed.

 

--------------------------------------------------------------------------------

 

Try the following:

 

Refresh page: Search for the page again by clicking the Refresh button. The timeout may have occurred due to Internet congestion.

Check spelling: Check that you typed the Web page address correctly. The address may have been mistyped.

Access from a link: If there is a link to the page you are looking for, try accessing the page from that link.

 

--------------------------------------------------------------------------------

 

Technical Information (for support personnel)

 

Error Code: 408. The operation timed out. The remote server did not respond within the set time allowed. The server might be unavailable at this time. Try again later or contact the server administrator. (12002)

Edited March 25, 2010 by wesleyw

[fawkers]

Ok;

 

1) Check your LA's not screwing around(personal experance): Create a new rule in ISA to publish a webserver (http) using a machine which just has a clean IIS on it and check that the site is accessable from outside.

 

2) Getting the gatway working: First off create a listener with the following settings; Network: External, Conntections: HTTP+HTTPS Do not Redirect, Certificates: Assign Cert. to web listener for your external name ie tsg.contolso.com, Authentication: HTTP Basic Windows, Forms and SSO leave alone.

 

3) Create Firewall Rule: Run the Exchage pubishing wizard select Exchange 2007 and the outlook anywhere tick box, single web site, use ssl, the internal site name should be the same domain as your external site name i.e. gatway.school.sch.uk (you may need to setup a new forward lookup zone in your DNS), next accept only traffic from gatway.school.sch.uk, Slect the web listener you prevoiusly created, on the auth page slect No deligation but client may authenticate directly, select all users (just for testing) and test your rule.

 

Your should now me able to make a connection to your school from the outside using RDC and entering the correct gateway address in the advanced tab. Once this is working everythig else shouldn't be that big a deal. Shout if you have any problems with this.

[wesleyw]

I'll have a go at that today and see how I get on.

 

Wes