Field note / 22 August 2010
Publishing SharePoint 2010 through ISA Server 2006 SP1
A reverse proxy sits between the user and the farm. Every rule it applies becomes part of the application experience.
Publishing SharePoint through ISA Server required more than opening a rule to the web front end. The proxy had to pass authentication, preserve host names, handle certificates and allow the request patterns that SharePoint uses. Each of those areas could fail independently.
The work was a good reminder that a reverse proxy is not a transparent pipe. It is an active participant in the request. The rules and the listener configuration determine what the farm sees and how the user is authenticated.
Test the path in layers
Start with a direct request to one SharePoint server. Then introduce the proxy with a simple path and confirm the basic response. Add authentication, host name preservation and certificates one at a time. If the experience breaks, the last change is a strong candidate.
Record the listener, the public name, the internal name and the certificate for every published application. A mismatch between those four values can produce a loop that looks like a SharePoint permission problem. Keep the request path diagram with the configuration.
The short list
Checks worth running
- Confirm the direct path works before adding the proxy.
- Record listener, public name, internal name and certificate for each application.
- Test authentication and host name preservation separately.
The legacy product may have moved on, but the design lesson remains: a publishing layer adds its own state to the application. Test it as a layer, not as a hidden detail.
Outside reading
Reference shelf
Official documentation and independent community reading for the subjects in this note.
- Microsoft Learn: IIS documentation (opens in a new tab)Reference material for web server configuration, authentication and diagnostics.
- Microsoft Learn: Windows Server documentation (opens in a new tab)Current guidance for Windows Server roles, networking, storage and management.
- Microsoft Support (opens in a new tab)Support articles, troubleshooting steps and product help from Microsoft.
- Microsoft Learn: SharePoint administration (opens in a new tab)Operational guidance for service settings, site management and the modern admin experience.
- Microsoft Learn: SharePoint documentation (opens in a new tab)The starting point for current SharePoint administration, development and hybrid guidance.
- Microsoft Security blog (opens in a new tab)Microsoft guidance on security research, response and platform protection.
- Microsoft Security Response Center (opens in a new tab)Security advisories, update guidance and vulnerability response information.
- Microsoft Tech Community (opens in a new tab)Community discussion, product announcements and practical posts from Microsoft teams.
- Microsoft Learn Q&A (opens in a new tab)A community question and answer space hosted by Microsoft.
- SharePoint Stack Exchange (opens in a new tab)An independent question and answer community for SharePoint practitioners.
- Microsoft Download Center (opens in a new tab)Official downloads for Microsoft tools, updates and supporting packages.
- SharePoint community on Reddit (opens in a new tab)An independent discussion space for administrators, developers and users.
- Microsoft Learn: SharePoint search (opens in a new tab)Documentation for search architecture, crawling and result management.
- Microsoft Learn: PowerShell documentation (opens in a new tab)Language reference, cmdlet documentation and guidance for repeatable automation.
- PowerShell Gallery (opens in a new tab)A public repository for PowerShell modules and scripts. Review package provenance before use.