Re: Unable to PING a single host from ISA 2006 Server

I have installed Ethereal on the ISA server. I am able to see the Ping
request and Ping reply come in and out of the internal interface that is on
the same VLAN is the F5's. The command window does not reply back with a
ping response.

Thanks for you help.

"Jim Harrison (ISA SE)" wrote:

Since ISA said "let it fly!" and Netmon doesn't see it, I'd start playing
with basic network configuration.
Q1 - have you done due diligence regarding the NIC drivers on the ISA?
Q2 - does the ISA have WS03 SP2 installed? If so, you may want to try the
steps outlined in
http://blogs.technet.com/isablog/archive/2007/03/27/isa-server-and-windows-server-2003-service-pack-2.aspx

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"Lee" <Lee@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:25A7960A-2775-4988-89FC-D394A8B27EF4@xxxxxxxxxxxxxxxx
I do not see it leaving the ISA box.

"Jim Harrison (ISA SE)" wrote:

Take the capture from the ISA itself.
if you can see it leave the NDIS layer, ISA isn't the problem.

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"Lee" <Lee@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:25E4B615-443D-4B50-868F-B7A4C4DF5B96@xxxxxxxxxxxxxxxx
An Engineer from our Networking Group is doing the captures with me using
their tool on the same VLAN. I am currently going over all the System
Policies and configuration to see if am missing something.

"Jim Harrison (ISA SE)" wrote:

Hm - good point.
You're using netmon (or whatever) to monitor traffic at the ISA itself?

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"Lee" <Lee@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:04A63708-88B2-44E2-9B1F-AAF075151A53@xxxxxxxxxxxxxxxx
I would agree if my captures showed traffic leaving my ISA server and
heading
towards the F5. Currently, there is no PING request leaving the ISA
server.
When I PING other host on same VLAN as ISA and F5, I am able to capture
both
the PING request and response.

"Jim Harrison (ISA SE)" wrote:

..time to troubleshoot the F5.
If all other hosts can respond to ping from ISA and this host can ping
ISA,
the problem is most likely the F5.

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"Lee" <Lee@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BD927A02-ED40-4A58-B732-2783F42F6B06@xxxxxxxxxxxxxxxx
Action: Initiated Connection
Rule: [System] Allow ICMP requests from ISA Server to selected servers
Result Code: 0x0 ERROR_SUCCESS

I recieve this same message in the logging when I successfully PING
other
hosts on the same VLAN. This is really strange thing. ALL other host
reply
except this one. The host is a F5 hardware load balancer.

"Jim Harrison (ISA SE)" wrote:

Use the ISA logging.
What does it tell you for those tests?

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"Lee" <Lee@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0C80AA6D-E8F4-49C9-88E4-6A55045A2995@xxxxxxxxxxxxxxxx
I am unable to PING a single host my ISA 2006 server. The host is
on
my
internal network. I am able to ping other host on the same VLAN. I
am
able
to ping from the host back to the ISA server. When i do a network
capture,
I
do not capture any traffic out of the ISA server to this host, but I
do
from
the ISA server to other hosts on the same VLAN and the host to the
ISA.
Thanks for any help.





.

Relevant Pages

  • Re: Unable to PING a single host from ISA 2006 Server
    ... request and Ping reply come in and out of the internal interface that is on ... Q1 - have you done due diligence regarding the NIC drivers on the ISA? ... I would agree if my captures showed traffic leaving my ISA server and ... When I PING other host on same VLAN as ISA and F5, ...
    (microsoft.public.isa)
  • Re: isa 2k4 - ping overflood
    ... i have saved an isa report. ... Ping of Death and Port scan). ... Please follow the link and download and run the Microsoft Internet ... Clear the current existing W3C logs. ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA - Config Help Needed
    ... You want to allow the internal clients to Ping external hosts in ISA server. ... If you want to use a newsreader other than a web forum to access these ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to PING a single host from ISA 2006 Server
    ... You're using netmon to monitor traffic at the ISA itself? ... there is no PING request leaving the ISA server. ... When I PING other host on same VLAN as ISA and F5, I am able to capture both ...
    (microsoft.public.isa)
  • RE: RWW not accessible over web
    ... If you would like to continue to troubleshoot the ping issue with me here, ... this issue is mostly caused by the improperly ISA ... Does the ping issue happen on all internal clients? ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
Loading