Web rewriting not working with absolute paths in javascript

[dsegel_]

I have an SA-2000 running v7.1R4 (required for support of Safari 5.1 with JSAM, but that's not germane to this discussion).

I'm trying to proxy an internal web site that's running a helpdesk system. The internal site uses javascript and absolute paths frequently. Initially, access to the internal site's login page and basic functions works fine, but on performing some actions I get an error like this:

Access to the Web site is blocked by your administrator. Please notify your system administrator. Made https request for GET /SearchRequester.do?fromModule=WorkOrder&startsWith= HTTP/1.1 to remote.domain.com:443

(remote.domain.com represents the hostname of the public side of our SA-2000).

The URL it's trying to load is:

https://remote.domain.com_/,DanaInfo=remote.domain.com_.edu,SSL+SearchRequester.do?fromModule=WorkOrder&startsWith=_

If I replace remote.domain.com with help.shs.ucd (the internal URL) after DanaInfo then the request works._ The problem seems to be that it's not rewriting the "/SearchRequester.do_" part of the URL since it's an absolute path.

Is there somewhere I can configure it to work with this type of URL?

[mattspierce_]

We are having the same issue. We have a saml federation with ADP portal. There is an applicaiton within their portal that uses a java servlet to populate a flash element. That servlet generates the base url on the server side and the rewriter isn't catching it. I'm currently working the issue through my reseller and they have an atac case open about the situation. Were you ever able to make any headway?

[dsegel_]

I never did get it working, and I never opened a case to get real help with it. At this point I've moved on but will come back to this problem at some point.

[MattS_]

The Content Intermediation Engine Best Practices document (http://www.juniper.net/techpubs/software/ive/admin/j-sa-sslvpn-7.1-ciebestpractices.pdf) covers what is and isn't supported using javascript, Flash etc.

If the content cannot be re-written correctly using Core Access then other access methods should be tried - Passthrough Proxy, SAM or NC//Pulse.