Re: IE 6 and Proxy Setting Exceptions

Hello,

It appears that this is a ISA proxy script development related request and
would best be address in Developer newsgroup. I provide the link below:
http://msdn.microsoft.com/newsgroup/default.asp

Or you may ask for developer support:
http://support.microsoft.com/directory/directory/phonepro.asp?sd=msdn

Thanks & Regards,

Ken Zhao

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.





--------------------
| Thread-Topic: IE 6 and Proxy Setting Exceptions
| thread-index: AccOU3XOyxS2sLs9RLunD5THbN4k/g==
| X-WBNR-Posting-Host: 209.217.222.70
| From: =?Utf-8?B?U211cmZtYW4=?= <smurfman@xxxxxxxxxxxxxx>
| References: <52493CE0-F615-441D-B01F-DBBFEA1127D8@xxxxxxxxxxxxx>
<#DIDwBQDHHA.2176@xxxxxxxxxxxxxxxxxxxx>
<XN7ACDTDHHA.4808@xxxxxxxxxxxxxxxxxxxxx>
<E693BC96-9887-4D1B-BBEB-FF8148102F59@xxxxxxxxxxxxx>
<#6iDBWcDHHA.3836@xxxxxxxxxxxxxxxxxxxx>
| Subject: Re: IE 6 and Proxy Setting Exceptions
| Date: Wed, 22 Nov 2006 08:30:02 -0800
| Lines: 204
| Message-ID: <B60060B8-9578-43BA-B91D-35F1EF81962F@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| Newsgroups: microsoft.public.isa
| Path: TK2MSFTNGXA01.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.isa:69707
| NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| X-Tomcat-NG: microsoft.public.isa
|
| ADDITIONAL INFO.
|
| I was doing some more research on the KB that you referenced, and it had
| some other references in the help which didn't really give me much...but
I
| searched on the TechNet DVD for this "Internal Client Concepts in ISA
Server
| 2006" and I was able to get an understanding for the key, and value
settings.
|
| I also note that if I were to create an application.ini on the local
machine
| or modify the common.ini or management.ini that according to page 3 under
the
| "Configuring Firewall Client Settings" this comment 'If a configuration
| setting is specified that contradicts the user-specific or
computer-specific
| settings, it is ignored' referring to the settings made on the server
level.
|
| I also noted how the key and value settings were defined, and see that
you
| mentioned to create an application entry with a key of DisableEx and a
value
| of 0, but I note in the reference material I found a value of 1 seems to
be
| what I should use. It states 'When the value is set to 1, the Firewall
Client
| application is disabled for the specific client application'
|
| Please correct me if I am understanding this wrong, the only difference
| between the Disable and DisableEx is that the later is for Firewall
Client
| 2006 where as the first entry is for other versions? Is this correct?
Is it
| also true then I could use either setting?
|
| Finally, and please be patient with me, but the Applicaiton defined, how
is
| this to be entered. I have tried the following and can't seem to get any
| results.
|
| ProgramName.EXE Disable/DisableEx 1
| C:\Program Files\Vendor\ProgramName.exe Disable/DisableEx 1
| WebService.aspx Disbale/DisableEx 1
| http://192.168.1.x/VirtualDirectory/WebService.aspx Disable/DisableEx 1
|
| But I read on page 6 that on the local machine I coudl create an
| Application.ini either for the user or the machine (depending on where I
| placed the file) and the example showed if I wanted to specify a specific
| program FW_Client_App.exe that I could create this ini, with this type of
| layout:
|
| [fw_client_App]
| Disable=0
| etc.etc...
|
| In their example they were configuring the application with special ports
to
| go thru the ISA Server, whereas I want to configure the application to
NOT
| USE the SIA server much the same as adding the IP addres to the DO NOT
PROXY
| Exceptions in IE.
|
| But what I noted is that the example does not have a file extension on
it.
|
| SO...should I just create an entry for:
|
| ProgramName Disable/DisableEx 1 and leave it at that?
|
| Thanks a ton!
|
| J
|
|
| "Kevin Longley" wrote:
|
| > To clarify - are you saying that even though you never specify an ip
address
| > when trying to access this internal site it won't work without an ip
address
| > exception within ie?
| >
| > "The user opens their browser, it goes to
| > http://localdomain.com/somewebpage.asp, logon, and then launch this
third
| > party program. If there is no ip address defined in the browser
exceptions
| > then the client fails."
| >
| > If that is the case see the url below.
| > http://support.microsoft.com/kb/888642/en-us
| >
| > "Smurfman" <smurfman@xxxxxxxxxxxxxx> wrote in message
| > news:E693BC96-9887-4D1B-BBEB-FF8148102F59@xxxxxxxxxxxxxxxx
| > > Thank you for the input, unfortunately an IP address can not be added
to
| > > the
| > > location that Kevin Specified.
| > >
| > > My users are configured to point to the server by IP address, do you
think
| > > that if I add the FQDN for that server the IP resolved will be
sufficient?
| > >
| > > Thanks
| > > J
| > >
| > > ""Ken Zhao [MSFT]"" wrote:
| > >
| > >> Hello,
| > >>
| > >> Thank you for using newsgroup!
| > >>
| > >> I'd like to thanks Kevin for his kindly input. You may refer to his
| > >> suggestions.
| > >>
| > >> Thanks & Regards,
| > >>
| > >> Ken Zhao
| > >>
| > >> Microsoft Online Partner Support
| > >> Get Secure! - www.microsoft.com/security
| > >>
| > >> =====================================================
| > >> When responding to posts, please "Reply to Group" via your
newsreader so
| > >> that others may learn and benefit from your issue.
| > >> =====================================================
| > >> This posting is provided "AS IS" with no warranties, and confers no
| > >> rights.
| > >>
| > >>
| > >>
| > >>
| > >>
| > >> --------------------
| > >> | From: "Kevin Longley" <kwlongley@xxxxxxxxxxxxxx>
| > >> | References: <52493CE0-F615-441D-B01F-DBBFEA1127D8@xxxxxxxxxxxxx>
| > >> | Subject: Re: IE 6 and Proxy Setting Exceptions
| > >> | Date: Mon, 20 Nov 2006 19:03:11 -0500
| > >> | Lines: 55
| > >> | X-Priority: 3
| > >> | X-MSMail-Priority: Normal
| > >> | X-Newsreader: Microsoft Outlook Express 6.00.2900.2869
| > >> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
| > >> | X-RFC2646: Format=Flowed; Original
| > >> | Message-ID: <#DIDwBQDHHA.2176@xxxxxxxxxxxxxxxxxxxx>
| > >> | Newsgroups: microsoft.public.isa
| > >> | NNTP-Posting-Host: c-71-233-16-23.hsd1.ma.comcast.net 71.233.16.23
| > >> | Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
| > >> | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.isa:69652
| > >> | X-Tomcat-NG: microsoft.public.isa
| > >> |
| > >> | Enter those address's in the internal network object on the tab
where
| > >> you
| > >> | can add domains for direct access. The routing script will then
handle
| > >> | updating the client. Note that the browser exceptions will not
show the
| > >> | entries from the isa server and in addition any that have been
manually
| > >> | entered or entered through a gpo will be removed by the script.
| > >> |
| > >> | "Smurfman" <smurfman@xxxxxxxxxxxxxx> wrote in message
| > >> | news:52493CE0-F615-441D-B01F-DBBFEA1127D8@xxxxxxxxxxxxxxxx
| > >> | > Okay, in an ISA 2006 setting, I have clients who have the most
| > >> current
| > >> ISA
| > >> | > Firewall Client installed. On the ISA server the config set for
the
| > >> | > browser
| > >> | > to use the ISA Server as its path to the internet. This works
well.
| > >> | > There
| > >> | > is the default Auto config script that looks like this:
| > >> | >
| > >> | > http://isaserver.FQDN.com:8080/array.dll?Get.Routing.Script
| > >> | >
| > >> | > I have in the ISA Server config for the newwork, to not proxy
for IP
| > >> | > addresses that belong to my network.
| > >> | >
| > >> | > I have 4 clients that have a third party piece of software
installed
| > >> that
| > >> | > will not work unless there is an entry for a local web server in
the
| > >> Do
| > >> | > Not
| > >> | > Proxy --> Exceptions for the local web server on the network.
For
| > >> | > example:
| > >> | > The user opens their browser, it goes to
| > >> | > http://localdomain.com/somewebpage.asp, logon, and then launch
this
| > >> third
| > >> | > party program. If there is no ip addess defined in the browser
| > >> exceptions
| > >> | > then the client fails.
| > >> | >
| > >> | > HOWEVER, if I enter the IP address of the local web server, the
| > >> client
| > >> | > launches the third party software, and everything works just
fine.
| > >> BUT,
| > >> | > each
| > >> | > time the user closes the third party software or logs off the PC
the
| > >> | > setting
| > >> | > is removed, presumably by the ISA Client, I say that because I
have
| > >> even
| > >> | > added the do not proxy ip addresses in a Group Policy...
| > >> | >
| > >> | > The setting is:
| > >> | > User Config --> Windows --> IE Maint --> Connection/Proxy
| > >> Settings -->
| > >> | > Exceptions
| > >> | >
| > >> | > I have tried several attempts of adding the IP address in the
ISA
| > >> Server
| > >> | > config settings, and nothing seems to stick. I think that the
do not
| > >> | > proxy
| > >> | > is working from a client standpoint, but I need the setting to
remain
| > >> in
| > >> | > the
| > >> | > IE Browser.
| > >> | >
| > >> | > How can I resolve this?
| > >> | >
| > >> | > Thanks
| > >> | > J
| > >> |
| > >> |
| > >> |
| > >>
| > >>
| >
| >
| >
|

.

Relevant Pages

  • Re: Site2Site VPN - Web page requests returns FWX_E_TERMINATING
    ... have?Firewall client or Web proxy clients?If you are using FWC is normal ... to use proxy locally and create an exception for your web site. ... in them,...this causes them to be interpreted by Internet ... Understanding the ISA 2004 Access Rule Processing ...
    (microsoft.public.isa.vpn)
  • Re: Migrate then Setup or Setup then Migrate?
    ... The term "transparent proxy" is a specific term with a specifi meaning. ... Clients by either installing the Firewall Client Software ... See the ISA documentation or the built in Help for the details of the three ... Microsoft Internet Security & Acceleration Server: ...
    (microsoft.public.isa.configuration)
  • Re: HTTPS; SSL-Tunnel
    ... ISA resolves names for browsers configured as web proxy clients, so if the browser is complaining about "DNS Failure", it's likely ... Original Client IP Client Agent Authenticated Client Service Server Name ...
    (microsoft.public.isa)
  • Re: Webproxy Konfiguration auf einem ISA 2006 Standard
    ... dann ist der Client noch SecureNAT Client?! ... Dann geht es auch ohne Proxy ... Hierbei habe ich die einzelne IP als Quelle angegeben und den ISA ... Freigegeben sind Port 80/443/8080. ...
    (microsoft.public.de.german.isaserver)
  • Re: ISA server 2004 and Bluecoat proxy
    ... i want to mention that we have configured a backup rout (backup bluecoat ... i want to ask about event 14130 that related to web proxy chain fauilire. ... If you were able to work around the upstream proxy server, ... upstream ISA Server, you might want to change it back. ...
    (microsoft.public.isa.configuration)
Loading