Re: Apparent intermittent WEB connectivity

Tech-Archive recommends: Fix windows errors by optimizing your registry

I have found certain http or https sites don't work well and have only been
able to resolve by configuring the sites for direct access; that would
require that you have configured the clients as firewall clients also. The
problem appears to be caused by some websites that do not work correctly
with the web proxy client, poorly written java code or ssl tunneling issue.

"mike" <munderwood@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:eOF5cob$FHA.140@xxxxxxxxxxxxxxxxxxxxxxx
>I have two ISA 2004 installations, both have issues with reliable WEB
>connectivity. One, has intermittent connection to a particular external
>company WEB site. There are about 30 users and access is via a T1 to the
>ISP. Some sessions will "freeze", some pages will only partially load and
>sometimes, it just times out. All other WEB sites seem to work OK. They do
>"bump" the T1 limit on occassion but it is difficult to pin the whole
>problem on that. BTW, external customers and the same users working from
>home never have a problem.
>
> The second installation (ISA 2004) has a very similar problem, in that it
> also does not like a particular external WEB site (not the same one as
> above). The difference is that it can never get the site. Other machines
> connected on the DMZ can get to it fine. The ISA server returns a time out
> error.
>
> Both ISAs logs show connection failed attempt errors. Again, only for the
> one WEB site that each ISA doesn't "like". I have looked at DNS (which
> seems to be fine) and MTU (which also seems to be OK). The thing that
> gets me is, evey other site works fine. It is just the one (although
> different) site at each ISA install that does not work. (One "bad site is
> https: the other is http:, if that helps.)
>
> I have seen references to this problem on other forums but never a
> soultion (other than to take down ISA.) Any ideas would be greatly
> appreciated.
>
> Regards,
> Mike
>
>


.

Relevant Pages

  • RE: ISA - The size of the response header is too large.
    ... web site. ... The only way I found around it was to put a connection in front of ISA. ... Open the gui - right-click the outbound rule that allows http ... But this seems to only relate to the REQUEST headers size, ...
    (microsoft.public.isa.configuration)
  • Re: How-to Block Outbound Access to Certain Web Sites
    ... There is nothing ISA can do about that. ... It is the way HTTP works,...HTTP ... you can not break the connection because there is no ... connections either (alongside with SNAT and Firewall client sessions). ...
    (microsoft.public.isa)
  • Re: Apparent intermittent WEB connectivity
    ... >I have found certain http or https sites don't work well and have only been ... >>I have two ISA 2004 installations, both have issues with reliable WEB ... has intermittent connection to a particular external ... >> also does not like a particular external WEB site (not the same one as ...
    (microsoft.public.isa)
  • Apparent intermittent WEB connectivity
    ... I have two ISA 2004 installations, both have issues with reliable WEB ... also does not like a particular external WEB site (not the same one as ... Both ISAs logs show connection failed attempt errors. ...
    (microsoft.public.isa)
  • Re: No access with firewall client
    ... You may want to discover the information you need on MS ISA Server web site. ... Then I have a Protocol Rule, called Http Outbound ... firewall client is enabled, but is able to when it is disabled. ...
    (microsoft.public.isa)