External Access (SSL), ISA and Apache

Discussion in 'Apache' started by bensewell, Jun 23, 2011.

  1. #1
    I'm trying to publish and Apache site using a SSL wildcard on our ISA server.

    The site i've got is running on Tomcat.

    Heres what ive got so far.

    When traffic comes into the ISA server using https://mysite.mydomain.com the ISA server then picks up a web publishing rule and tries to forward it to my internal site on http://myinternalsite.mydomain.com.

    Some quick questions.

    1. Does the Apache server need the same SSL wildcard installing on it or can the traffic be converted from SSL:443 to HTTP:80 using the ISA server.

    2. Or do i enable traffic to come in on port 443 of the Apache server and do some kind of re-write to the desired internal address.

    So not sure if the setup needs to be this:

    https: :)443) - CISCO ASA :)443) - MS ISA :)443) - Apache :)80)
    or

    https: :)443) - CISCO ASA :)443) - MS ISA :)443) - Apache :)443) - Apache Re-write :)80)

    or maybe even:

    https: :)443) - CISCO ASA :)443) - MS ISA :)443) - Apache / Tomcat Mod_JK :)80) Apache :)80)

    I need to nail this by the end of today. Help please !
     
    bensewell, Jun 23, 2011 IP