Re: ISA 2006 proxy error

So you live in Bangkok? That is where the addresses are owned.

inetnum: 168.120.0.0 - 168.120.255.255
last-name: Charmonman
first-name: Srisakdi
street: Assumption University
Ramkamhaeng 24
Bangkok
Bkk
10240
country: TH


Why are there Public Addresses on the internal LAN,...but RFC Private
non-Routable Addresses on the external side. Even besides the fact that you
may not own the Public Address, the whole thing is backwards.

The LAN is supposed to use RFC Private Addresses on the internal side and
you are supposed to have Public Addresses that you own on the external side.

The first step is to get the LAN's design corrected.
The second step is to verify the DNS Scheme is correct
and to correctly configure the Internl Network Definition

Setting up Proxy Autodetection is not required but isn't a bad idea.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------

"Andrew" <andrew@xxxxxx> wrote in message
news:OUf5vMAPIHA.748@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have an ISA2006 server in an edge firewall role. The ISA server is on
LAN/WAN scenario so the local network address is
168.120.0.254(configuration below). I have a number of servers on the
168.120.3.x subnet. All the clients are receiving ip addresses from the
DHCP server on the 168.120.2.x subnet.

I need the local network users to be able to access 168.120.1.141 address
to administer a printer but when they try to acccess it we get the
following error:

Error Code: 502 Proxy Error. The ISA Server denied the specified Uniform
Resource Locator (URL). (12202)
IP Address: 168.120.0.254
Date: 06/12/2007 11:53:19 [GMT]
Server: isa1.domain.org.local
Source: proxy

Ipconfig on the ISA server results in the following:

Ethernet adapter WAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Dual Port
Network Co
nnection #2
Physical Address. . . . . . . . . : 00-04-23-D9-2F-85
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.1.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.254
DNS Servers . . . . . . . . . . . : 168.120.3.1
168.120.3.11

Ethernet adapter LAN:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Dual Port
Network Co
nnection
Physical Address. . . . . . . . . : 00-04-23-D9-2F-84
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 168.120.0.254
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 168.120.3.1
168.120.3.11


Under networks the internal network is defined as 168.120.0.0 -
168.120.255.255.

Under network rules there is a rule setup as follows:

Local host access | Route | Local Host | All networks (and local host)


I've added an access rule for that particular address but still get the
same error message.

From All networks (and local host)>> 168.120.1.141 using http and https
protocols.

Direct access has also been added as an exception to "do not use proxy
server for addresses beginning with" for http://168.120.1. within GP but
this doesn't seem to solve it. Completely removing the proxy address does
solve it though.

Any configuration changes I could make or is it just a case of installing
the ISA 2006 supportability update which i've read solves it.

Thanks,

Andrew



.

Relevant Pages

  • Re: ISA 2006 Basic Configuration
    ... Troubleshooting Client Authentication on Access Rules in ISA Server 2004 ... Microsoft Internet Security & Acceleration Server: ... Microsoft ISA Server Partners: Partner Hardware Solutions ... The routing table for the network adapter Internal ...
    (microsoft.public.isa.configuration)
  • Re: ISA 2006 Basic Configuration
    ... Does the AD/DNS Server have the ISP's DNS properly configured as a Forwarder? ... Microsoft Internet Security & Acceleration Server: ... Microsoft ISA Server Partners: Partner Hardware Solutions ... The routing table for the network adapter Internal includes IP address ranges that are not defined in the array-level network Internal, ...
    (microsoft.public.isa.configuration)
  • RE: Digest authentication does not work for HTTPS-requests through MS
    ... I've seen this problem happening when the network range in your "Internal" ... Clients use Internet Explorer 6.0. ... All the testing was performed having SP1 for ISA Server 2004 installed. ...
    (microsoft.public.isa)
  • RE: DNS MS Firewall error: 21174...
    ... Thank you for posting in SBS newsgroup. ... Using ISA Server 2004 with Exchange Server 2003 ... the problem may be caused by the Internal network is ...
    (microsoft.public.windows.server.sbs)
  • Re: Can some please help me?
    ... Verify that you have some network relationship between the external network ... and perimeter network. ... If you create a route relationship, then an access rule from external to the ... If you create a NAT relationship, then you would have to publish the server ...
    (microsoft.public.isa.publishing)
Loading