ISA Server

ISA Server (Internet, Security and Acceleration Server) from Microsoft can act as a both a proxy server and an application layer firewall. Many organisations use it as the main gateway connecting their internal network to the outside world.

If you wish to install Moodle behind an ISA server e.g. to make it available to the outside world rather than just inside your organisation, you will need to have administrator acces to the machine that ISA server that runs on and follow these steps.

Your best bet for doing this is to use split DNS so that from inside your network, typing the URL e.g. http://moodle.yourorganisation.ac.uk will resolve to an internal IP e.g. 192.168.2.34, but from the wider internet it will resolve to the external interface of the ISA Server, which will then forward the request to the internal machine.

Internal DNS This is something that needs to be set up in your DNS manager like active directory. Once that is done you will need to set up an exception on the ISA's proxy screen so that http://moodle.yourorganisation.ac.uk is not routed through the proxy.

• better instructions needed here on how to find the logs

External Once you can access moodle OK using http://moodle.yourorganisation.ac.uk from an internal machine, you need to sort out your external DNS. Find out the IP which resolves to the external interface of the ISA server (a good way to do this is to browse to www.whatsmyip.net from an internal machine), then set up http://moodle.yourorganisation.ac.uk as a subdomain pointing to that IP with your hosting provider (there may be a web interface for you to do this, companies vary)

• instructions needed on how to find external IP from inside ISA

Note that the IP address bound to the external interface of the ISA is not necessarily the IP as seen from the wider internet - you may be behind another firewall if you are getting your internet from a consortium e.g. LGfL Once that is done and you have allowed time for the Internet's DNS cache's to update (can be up to 24hrs) you should be able to type http://moodle.yourorganisation.ac.uk and get some sort of server error message from the ISA. This will also show up in the ISA's event logs

• instructions on how to access event logs needed

The next step is to run the web publishing wizard on the ISA and enter the details of the machine moodle is running on. It should be possible to follow the tutorial here http://www.isaserver.org/tutorials/ISA-2006-Firewall-Web-Publishing-Rules.html or here http://www.isaserver.org/tutorials/Publishing-Multiple-Non-SSL-Web-Sites-Single-IP-Address-using-ISA-Firewalls.html

Once that's done, you should be able to access from outside. If there is still an error, check the ISA Server's logs to find more information.

If you want to use SSL, you will need to generate a Certificate to bind to the Listener. This needs to be done

References: www.isaserver.org