ISA server Paths (URI) and Citrix Metaweb publications won't work.

[Peter]

Dear,

We’re using ISA Server 2006 Enterprise Edition. We have a strange problem
with the use of Paths (URI) and Citrix Metaweb publications.

The internal name of the site is: citrix.company.be
The external name is: standard.employee.net
The paths settings we configured are: external: /citrix/*
internal: /*

The user connects to ISA through the following link:
https://standard.employee.net/citrix
Other sites are ok: https://standard.employee.net/phonebook
Ok too: https://standard.employee.net/hrm

ISA uses the combination of the URL (standard.employee.net) and the Paths
(/citrix) to know which rule to apply, and uses the paths too, to strip off
the /citrix .

We’re publishing many applications that way but for some reasons it will not
work for most of the aspx pages.

Does someone know why?

When connecting the Citrix portal directly using: http://citrix.company.be
it works
When connecting the Citrix portal through ISA using:
https://standard.employee.net/citrix I receive an error from Citrix that I
need to allow cookies on my web browser.

Does someone have any experience with this?
We have an official statement from Microsoft that using paths that way is
not working and not supported for SharePoint publications. Bet we never
received a valid explication why.

Thanks a lot in advance,
Regards,
Peter

[Phillip Windell]

"Peter" <Pe...@discussions.microsoft.com> wrote in message
news:223FC2F7-2FCF-40A9...@microsoft.com...

> The user connects to ISA through the following link:
> https://standard.employee.net/citrix
> Other sites are ok: https://standard.employee.net/phonebook
> Ok too: https://standard.employee.net/hrm
>
> ISA uses the combination of the URL (standard.employee.net) and the Paths
> (/citrix) to know which rule to apply, and uses the paths too, to strip
> off
> the /citrix .

I think you need to forget about the Paths and use
https://citrix.employee.net
Get a Certificate specifically for citrix.employee.net unless you already
have a wildcard certificate for *.employee.net

Use Split DNS so that internally the name citrix.employee.net resolves to
the same internal private IP# used by citrix.company.be

Seems everytime I hear of someone using the Paths feature they create more
problems for themselves than what they solve. The more complex the
Site,...the less likely it will respond in a friendly way to using the ISA
Paths feature.

--
Phillip Windell

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------