Proxy Server Settings

If you want to use SharePoint Portal Server across the extranet and you have a proxy server, you must:

• Ensure that you add the external IP address of your SharePoint Portal Server computer to the proxy server.
• Map the internal static IP address of the server to an external static IP address. Microsoft Internet Security and Acceleration (ISA) Server 2000 calls this server publishing. The proxy server must pass permissions through and must not modify the host header file.

If you are not using ISA Server, you must configure your proxy server as follows:

• The proxy server must allow password and authentication information to pass through to the SharePoint Portal Server computer inside the firewall.
• The host header name must stay intact when passing through.
• Do not use SSL bridging.

Before performing the following procedures, you must know the static external IP address that is assigned to your SharePoint Portal Server computer. This is not the same IP address as the static internal IP address for the server. You must also have a subnet mask. You receive a range of static external IP addresses and a subnet mask when you first establish Internet access through Network Solutions or through another company authorized by the ICANN.

The following procedures apply if you are using ISA Server as your proxy server. Note that the following steps assume that you have already enabled the firewall and reverse proxy for ISA Server. Additionally, your ISA Server must allow internal users to access the Internet by using the proxy server without authentication. If you have a proxy server that requires a server to provide authentication to access the Internet from your intranet, you cannot download a Web part from the Internet. This is because the ServerXMLHTTP object cannot access the Internet if authentication is required.

To ensure that the external static IP address of your server is added to the proxy server:

1. On the desktop on the proxy server, right-click My Network Places, and then click Properties.
2. Right-click the NIC that is connected to the Internet, and then click Properties.
3. Under Components checked are used by this connection, click Internet Protocol (TCP/IP), and then click Properties.
4. Click Advanced.
5. Under IP addresses, scroll through the list of IP address to ensure that it lists the external static IP address for the SharePoint Portal Server computer. This external static IP address is the same one used to create the DNS entry for the server.
6. If the IP address appears in the list, no further action is required. If the external static IP address does not appear in the list of IP addresses, you must complete steps 7 through 12.
7. Click Add. The TCP/IP Address dialog box appears.
8. In IP address, type the external static IP address.
9. In Subnet mask, type the subnet mask for the IP address.
10. Click Add to close the TCP/IP Address dialog box, and then click OK.
11. Click OK, and then click OK again to close the Properties page.
12. Restart the server.

You have now successfully added the external static IP address of your server to the proxy server.

To map an external IP address to an internal IP address:

1. On the Start menu, point to Programs, point to Microsoft ISA Server, and then click ISA Management.
2. Expand Servers and Arrays.
3. Expand the name of your proxy server.
4. Expand Publishing.
5. Right-click Server Publishing Rules, point to View, and then click Taskpad.
6. Click Publish a Server. The New Server Publishing Rule Wizard appears.
7. In Server publishing rule name, type a name to identify the new publishing rule, and then click Next.
8. On the Address Mapping page, type the internal static IP address of the server in IP address of internal server.
9. On the Address Mapping page, type the external static IP address in External IP address on ISA Server.
10. Click Next.
11. On the Protocol Settings page under Apply the rule to this protocol:
    • Select HTTP Server if you have not enabled SSL.
    • Select HTTPS Server if you have enabled SSL.

    You must enable these protocols on the proxy server. For procedures used to enable the protocols, see the documentation for your proxy server.

12. Click Next.
13. On the Client Type page, click Any request, and then click Next.
14. Click Finish.
15. Double-click the rule you just created, and on the General tab, ensure that you select the Enable check box.

    It may take up to 15 minutes for the mapping to be effective. If the mapping has not become effective after 15 minutes, perform steps 16 through 24.

16. On the Start menu, point to Programs, point to Microsoft ISA Server, and then click ISA Management.
17. Expand Servers and Arrays.
18. Expand the name of your proxy server.
19. Expand Monitoring.
20. Right-click Services, point to View, and then click Taskpad.
21. Select the Web proxy service, and then click Stop a Service.
22. Select the Firewall service, and then click Stop a Service.
23. Select the Web proxy service, and then click Start a Service.
24. Select the Firewall service, and then click Start a Service.

If the mapping has not taken effect within 30 minutes after this procedure, restart the proxy server.