RE: 504 Proxy timeout only with SSL traffic

Hi,

Here is a little more detail on the problem. The webserver sits wihtin our
DMZ and externally anyone can hit the website and all pages whether normal or
secure come up properly. It is only from within the inside that we are
encountering a problem getting to the secure (SSL) Pages.

We have two ISA 2004 Servers both at same level of service packs which is
SP3 for ISA Server 2004 and SP1 for Windows 2003 server.

One thought I had is perhaps it is seeing it on the same network but they
are clearly on different networks. The internal is using a 192 scheme and
the DMZ is using a 10. scheme

This problem only came about after applying service pack 2 for iSA 2004 and
then in thinking that it was a bug I proceeded to apply sp3 to the same
server for ISA 2004.

Thanks for your help

David


"David Maskell - BUI" wrote:

Hi,

This sounds like a very strange problem, its a bit unusual that you can
access the HTTP but not HTTPS pages, can you access the HTTPS pages directly
on the server? Have you checked the IIS Settings?

If the web server works on itself, ie browsing to the localhost, then it may
have something to do with how the proxy is set up, although, in my honest
opinion, it seems to be more the web server than ISA.

Can you access HTTPS pages locally on the webserver is what we need to look
at first?

--
David Maskell - BUI
MCSE:Security,Messaging, CISSP.
http://www.bui.co.za


"Always remember to rate the posts!"


"bluenetadmin" wrote:

Hi I am hoping that someone can help me. We have been running ISA Server
2004 for sometime and then we had a problem with email so I decided to go to
service pack 2 for ISA 2004 server and I started to get this error mentioned
below. I figured perhaps if I went to the next service pack which is SP3 it
might go away and it has not resolved it yet. I am trying to access https
pages on a webserver that is located on our DMZ. I am able to reach the
webserver pages that are not secure pages but once I try to go to the secure
pages it results in this error mentioned below. I have searched all over the
web for a possible fix and I have not been able to figure this out. Any help
would be appreciated. Thanks

Network Access Message: The page cannot be displayed

Technical Information (for Support personnel)
Error Code: 504 Proxy Timeout. The connection timed out. For more
information about this event, see ISA Server Help. (10060)
IP Address: xxx.xxx.xxx
Date: 9/17/2007 5:36:34 PM
Server: server.at.work
Source: proxy


.

Relevant Pages

  • RE: ISA 2006 and SSL
    ... Because the ISA 2006 is a new ... | 3) From your port I am reading things about publishing to a web server. ...
    (microsoft.public.isa)
  • Angebliche "High Risks" bei Securityspace
    ... socket to the server) it assumes the webserver has crashed. ... Jetzt bin ich der Hoffnung dass eventuell der ISA die fehlerhaften Anfragen ... Next by Date: ...
    (microsoft.public.de.german.isaserver)
  • Re: MS-SQL / General network error
    ... verschiedene durch einen ISA Server getrennt. ... Ich kann auch vom Webserver ohne Probleme auf den ... SQL Server verbinden, über DSN, Query Analyzer, etc. ... Es ist so, also ob der ISA Server zum Teil die Connections verwirft, aus ...
    (microsoft.public.de.german.isaserver)
  • Re: Basic Question (dumb) regarding security
    ... It is not ok to host a public website on your SBS, but it is ok to host ... setup the network and the webserver properly so that only appropriate ... It would be less secure or meaningful to open more holes in ISA so ... Since ISA is an application server, ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA Server 2000 HTTPS langsam
    ... OK also ist HTTPS erst mal nicht langsam? ... Aus dem Internet zu uns nicht. ... also der Webserver steht im Internet? ... Davor das Internet und der ISA ...
    (microsoft.public.de.german.isaserver)
Quantcast