Re: IE 6 and Proxy Setting Exceptions

Before trying what I suggested substitute the fqdn of the server instead of
the ip address, in the url string.

"Smurfman" <smurfman@xxxxxxxxxxxxxx> wrote in message
news:0C174D54-1403-4AB8-9B1C-6439785E7DCA@xxxxxxxxxxxxxxxx
Thanks Kevin,
I located the setting you were referring to in ISA 2006, basically it was
the same.

I was unsure which program I was to add to the applications, I assumed the
third party software? But I was unsure if I should enter:

C:\Program Files\ProgramVendor\Program.exe

or

Program.exe

So I entered both. Two entries

---

Your summary of what is happening in you post below is exactly what is
going
on. The Firewall exception I have to add is the IP address of the
localwebserver.com, users go to http://192.168.1.x/program.asp?codestring
this is kind of like a portal page for users, once they logon, they are
presented with a menu of choices of tools they can use, based on the
security
codes that they logon with...these codes are specific to the vendor of
web-browser and third party software and are not to be confused with
Windows
authentication.

In my model, If I do not enter the IP address of the internal web server
that hte users are launching the third party software from, then I get an
error message in the software...

"Verify that program.asmx located at
http://192.168.1.x/WEBService/program.asmx is an established web service
for
the specified group"

When the ip address is present, then all is well.

Should I be entering the program.asmx in the DisableEx settings for ISA as
well?

Much appreciated! I think we are onto something.

J


"Kevin Longley" wrote:

To clarify - are you saying that even though you never specify an ip
address
when trying to access this internal site it won't work without an ip
address
exception within ie?

"The user opens their browser, it goes to
http://localdomain.com/somewebpage.asp, logon, and then launch this third
party program. If there is no ip address defined in the browser
exceptions
then the client fails."

If that is the case see the url below.
http://support.microsoft.com/kb/888642/en-us

"Smurfman" <smurfman@xxxxxxxxxxxxxx> wrote in message
news:E693BC96-9887-4D1B-BBEB-FF8148102F59@xxxxxxxxxxxxxxxx
Thank you for the input, unfortunately an IP address can not be added
to
the
location that Kevin Specified.

My users are configured to point to the server by IP address, do you
think
that if I add the FQDN for that server the IP resolved will be
sufficient?

Thanks
J

""Ken Zhao [MSFT]"" wrote:

Hello,

Thank you for using newsgroup!

I'd like to thanks Kevin for his kindly input. You may refer to his
suggestions.

Thanks & Regards,

Ken Zhao

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader
so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.





--------------------
| From: "Kevin Longley" <kwlongley@xxxxxxxxxxxxxx>
| References: <52493CE0-F615-441D-B01F-DBBFEA1127D8@xxxxxxxxxxxxx>
| Subject: Re: IE 6 and Proxy Setting Exceptions
| Date: Mon, 20 Nov 2006 19:03:11 -0500
| Lines: 55
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
| X-RFC2646: Format=Flowed; Original
| Message-ID: <#DIDwBQDHHA.2176@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.isa
| NNTP-Posting-Host: c-71-233-16-23.hsd1.ma.comcast.net 71.233.16.23
| Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.isa:69652
| X-Tomcat-NG: microsoft.public.isa
|
| Enter those address's in the internal network object on the tab
where
you
| can add domains for direct access. The routing script will then
handle
| updating the client. Note that the browser exceptions will not show
the
| entries from the isa server and in addition any that have been
manually
| entered or entered through a gpo will be removed by the script.
|
| "Smurfman" <smurfman@xxxxxxxxxxxxxx> wrote in message
| news:52493CE0-F615-441D-B01F-DBBFEA1127D8@xxxxxxxxxxxxxxxx
| > Okay, in an ISA 2006 setting, I have clients who have the most
current
ISA
| > Firewall Client installed. On the ISA server the config set for
the
| > browser
| > to use the ISA Server as its path to the internet. This works
well.
| > There
| > is the default Auto config script that looks like this:
| >
| > http://isaserver.FQDN.com:8080/array.dll?Get.Routing.Script
| >
| > I have in the ISA Server config for the newwork, to not proxy for
IP
| > addresses that belong to my network.
| >
| > I have 4 clients that have a third party piece of software
installed
that
| > will not work unless there is an entry for a local web server in
the
Do
| > Not
| > Proxy --> Exceptions for the local web server on the network. For
| > example:
| > The user opens their browser, it goes to
| > http://localdomain.com/somewebpage.asp, logon, and then launch
this
third
| > party program. If there is no ip addess defined in the browser
exceptions
| > then the client fails.
| >
| > HOWEVER, if I enter the IP address of the local web server, the
client
| > launches the third party software, and everything works just fine.
BUT,
| > each
| > time the user closes the third party software or logs off the PC
the
| > setting
| > is removed, presumably by the ISA Client, I say that because I
have
even
| > added the do not proxy ip addresses in a Group Policy...
| >
| > The setting is:
| > User Config --> Windows --> IE Maint --> Connection/Proxy
Settings -->
| > Exceptions
| >
| > I have tried several attempts of adding the IP address in the ISA
Server
| > config settings, and nothing seems to stick. I think that the do
not
| > proxy
| > is working from a client standpoint, but I need the setting to
remain
in
| > the
| > IE Browser.
| >
| > How can I resolve this?
| >
| > Thanks
| > J
|
|
|







.

Relevant Pages

  • RE: sloww web browsing
    ... and ISA 2004, the internet access became slower than it used to be. ... Open the ISA Server management console, ... Click Start, point to Programs, point to Microsoft ISA server, and then ... will you be able to access the internet from the internal client ...
    (microsoft.public.windows.server.sbs)
  • RE: OWA page not displayed Outside
    ... Open ISA 2006 management console. ... Expand the server node and highlight 'Monitoring'. ... Click 'Configure Firewall Logging'. ... |> internal client as both the web proxy client and firewall client? ...
    (microsoft.public.windows.server.sbs)
  • Has your problem been resolved
    ... username not showing in ISA log ... They probably aren't using the proxy server. ... Troubleshooting Client Authentication on Access Rules in ISA Server 2004 ...
    (microsoft.public.isaserver)
  • Re: ISA firewall block outgoing email.
    ... I cannot send/receive email to the POP3 account unless I turn off the firewall in the CEICW. ... (This server is behind a router so I felt the test was safe enough to turn off the firewall). ... As I said, there is no need to add a hole for port 110, If the ISA client is installed on the workstation, Outlook will deliver the email. ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS PE - Unable to establish Outbound VPN
    ... connect to an external VPN server through SBS with ISA 2004 or VPN to SBS ... the firewall client application identifies the internal/external ...
    (microsoft.public.windows.server.sbs)
Loading