Re: IE 6 and Proxy Setting Exceptions

ADDITIONAL INFO.

I was doing some more research on the KB that you referenced, and it had
some other references in the help which didn't really give me much...but I
searched on the TechNet DVD for this "Internal Client Concepts in ISA Server
2006" and I was able to get an understanding for the key, and value settings.

I also note that if I were to create an application.ini on the local machine
or modify the common.ini or management.ini that according to page 3 under the
"Configuring Firewall Client Settings" this comment 'If a configuration
setting is specified that contradicts the user-specific or computer-specific
settings, it is ignored' referring to the settings made on the server level.

I also noted how the key and value settings were defined, and see that you
mentioned to create an application entry with a key of DisableEx and a value
of 0, but I note in the reference material I found a value of 1 seems to be
what I should use. It states 'When the value is set to 1, the Firewall Client
application is disabled for the specific client application'

Please correct me if I am understanding this wrong, the only difference
between the Disable and DisableEx is that the later is for Firewall Client
2006 where as the first entry is for other versions? Is this correct? Is it
also true then I could use either setting?

Finally, and please be patient with me, but the Applicaiton defined, how is
this to be entered. I have tried the following and can't seem to get any
results.

ProgramName.EXE Disable/DisableEx 1
C:\Program Files\Vendor\ProgramName.exe Disable/DisableEx 1
WebService.aspx Disbale/DisableEx 1
http://192.168.1.x/VirtualDirectory/WebService.aspx Disable/DisableEx 1

But I read on page 6 that on the local machine I coudl create an
Application.ini either for the user or the machine (depending on where I
placed the file) and the example showed if I wanted to specify a specific
program FW_Client_App.exe that I could create this ini, with this type of
layout:

[fw_client_App]
Disable=0
etc.etc...

In their example they were configuring the application with special ports to
go thru the ISA Server, whereas I want to configure the application to NOT
USE the SIA server much the same as adding the IP addres to the DO NOT PROXY
Exceptions in IE.

But what I noted is that the example does not have a file extension on it.

SO...should I just create an entry for:

ProgramName Disable/DisableEx 1 and leave it at that?

Thanks a ton!

J


"Kevin Longley" wrote:

To clarify - are you saying that even though you never specify an ip address
when trying to access this internal site it won't work without an ip address
exception within ie?

"The user opens their browser, it goes to
http://localdomain.com/somewebpage.asp, logon, and then launch this third
party program. If there is no ip address defined in the browser exceptions
then the client fails."

If that is the case see the url below.
http://support.microsoft.com/kb/888642/en-us

"Smurfman" <smurfman@xxxxxxxxxxxxxx> wrote in message
news:E693BC96-9887-4D1B-BBEB-FF8148102F59@xxxxxxxxxxxxxxxx
Thank you for the input, unfortunately an IP address can not be added to
the
location that Kevin Specified.

My users are configured to point to the server by IP address, do you think
that if I add the FQDN for that server the IP resolved will be sufficient?

Thanks
J

""Ken Zhao [MSFT]"" wrote:

Hello,

Thank you for using newsgroup!

I'd like to thanks Kevin for his kindly input. You may refer to his
suggestions.

Thanks & Regards,

Ken Zhao

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.





--------------------
| From: "Kevin Longley" <kwlongley@xxxxxxxxxxxxxx>
| References: <52493CE0-F615-441D-B01F-DBBFEA1127D8@xxxxxxxxxxxxx>
| Subject: Re: IE 6 and Proxy Setting Exceptions
| Date: Mon, 20 Nov 2006 19:03:11 -0500
| Lines: 55
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
| X-RFC2646: Format=Flowed; Original
| Message-ID: <#DIDwBQDHHA.2176@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.isa
| NNTP-Posting-Host: c-71-233-16-23.hsd1.ma.comcast.net 71.233.16.23
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.isa:69652
| X-Tomcat-NG: microsoft.public.isa
|
| Enter those address's in the internal network object on the tab where
you
| can add domains for direct access. The routing script will then handle
| updating the client. Note that the browser exceptions will not show the
| entries from the isa server and in addition any that have been manually
| entered or entered through a gpo will be removed by the script.
|
| "Smurfman" <smurfman@xxxxxxxxxxxxxx> wrote in message
| news:52493CE0-F615-441D-B01F-DBBFEA1127D8@xxxxxxxxxxxxxxxx
| > Okay, in an ISA 2006 setting, I have clients who have the most
current
ISA
| > Firewall Client installed. On the ISA server the config set for the
| > browser
| > to use the ISA Server as its path to the internet. This works well.
| > There
| > is the default Auto config script that looks like this:
| >
| > http://isaserver.FQDN.com:8080/array.dll?Get.Routing.Script
| >
| > I have in the ISA Server config for the newwork, to not proxy for IP
| > addresses that belong to my network.
| >
| > I have 4 clients that have a third party piece of software installed
that
| > will not work unless there is an entry for a local web server in the
Do
| > Not
| > Proxy --> Exceptions for the local web server on the network. For
| > example:
| > The user opens their browser, it goes to
| > http://localdomain.com/somewebpage.asp, logon, and then launch this
third
| > party program. If there is no ip addess defined in the browser
exceptions
| > then the client fails.
| >
| > HOWEVER, if I enter the IP address of the local web server, the
client
| > launches the third party software, and everything works just fine.
BUT,
| > each
| > time the user closes the third party software or logs off the PC the
| > setting
| > is removed, presumably by the ISA Client, I say that because I have
even
| > added the do not proxy ip addresses in a Group Policy...
| >
| > The setting is:
| > User Config --> Windows --> IE Maint --> Connection/Proxy
Settings -->
| > Exceptions
| >
| > I have tried several attempts of adding the IP address in the ISA
Server
| > config settings, and nothing seems to stick. I think that the do not
| > proxy
| > is working from a client standpoint, but I need the setting to remain
in
| > the
| > IE Browser.
| >
| > How can I resolve this?
| >
| > Thanks
| > J
|
|
|





.

Relevant Pages

  • Re: WSUS Client not yet reported
    ... The client still fails to report. ... Check your server status ... Suggestion 2: Check the IIS settings: ... any updates in your thread. ...
    (microsoft.public.windows.server.sbs)
  • Re: Setting up Exchange
    ... I uncheck it once I've confirmed that the settings are as ... >> the SBS Exchange Server, so there is no need to change any settings ... We're only concerned with configuring Exchange to send mail ... >>> on client PC's. ...
    (microsoft.public.windows.server.sbs)
  • Re: [SLE] Networking CUPS?
    ... > replace the client.conf in the other machine as it has the correct settings. ... I know, from Windows days, that the server must be booted first, ten the ... pressing print on the Mozilla GUI on the client and the page would ... for kprinter under a terminal screen could get the KPrinter dialogs to ...
    (SuSE)
  • Re: ActiveX control and Authorization issue
    ... security settings the way you do in standalone apps. ... > I am running a DCOM server on Win XP Pro, developed with VC++ 6, MFC. ... My typical client setup makes the SAME CALL to ... This has always worked until I wrote an ActiveX ...
    (microsoft.public.win32.programmer.ole)
  • Re: What doesnt lend itself to OO?
    ... >> proxy and instructs the server to constuct the real object. ... rather than client code. ... If 'clock' is instantiated in the server, ... > for the server interface at the OOA level. ...
    (comp.object)