Hello,
We just started using ASG 7.3 for a few months. We have 2 internet leased-lines coming in to Astaro, and one LAN link behind Astaro. All web users go through ISA2004 before getting to Astaro.

Currently, we have all web traffic (HTTP) going out 1 leased-line, while the other leased-line is for HTTPS, SMTP and VPN traffics.

Now the executives are complaining that web access is too slow. And with 300 users freely surfing all day, no wonder. Anyway, we would like to let the execs surf the web on the other leased-line by setting up another proxy (say Squid) and tell Astaro to use the other leased-line for HTTP traffic from the new proxy's IP address.

However, our vendor told us that web security will only work on one link, and therefore we would have to choose which link gets the web security's protection, and the other will not. And even version 7.4 does solve this problem.

Is this true? If so, is there any other way to spilt HTTP traffic and send traffic from ISA to 1 link and traffic from Squid to the other link?

Thank you very much,
greenspot

Greenspot, Are you using the HTTP Proxy in the Astaro now, or are you using the ISA server? Do you have a Web Security subscription?

__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!

No we are not using Astaro for HTTP proxy. Only ISA2004 is doing that. And we plan to setup a Squid for another HTTP proxy. We have Web security licenses, but we can't afford the licenses to allow everyone to go directly through Astaro i.e. use Astaro as HTTP proxy.

Are you suggesting that using Astaro as HTTP proxy is the way to accomplish our goal?

Thank you very much,
Greenspot