RE: ISA causing upload document link problem?

From: Wei-Dong XU [MSFT] (v-wdxu_at_online.microsoft.com)
Date: 01/18/05 

Date: Tue, 18 Jan 2005 09:43:52 GMT

Hi Ed,

>From our further research, this paper focuses on the WSS v2 with ISA 2000
and 2004 which will provide more assistance on your issue.
Reverse Proxy Configurations for Windows SharePoint Services and Internet
Security and Acceleration Server
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/
sharepoint/revproxy.mspx

I'd suggest the section below of this article should be the resolution for
the error 500.
//------------------------------------------------------------------------
HTTP security filtering using ISA Server 2004
After you have created the Web publishing rule, you must change the HTTP
security filter setting. The HTTP filter screens all incoming Web requests
to the ISA Server computer, and only allows requests that comply with the
restrictions configured by the ISA Server administrator.

For example, the Verify Normalization feature (enabled by default)
specifies that requests with URLs that contain escape characters after
normalization will be blocked. Escaped characters include, but are not
limited to, the percent sign (%) and space character ( ). If this feature
is enabled, SharePoint document libraries will fail. URLs for document
libraries and files uploaded and downloaded include non-standard characters
such as the percent sign (%).

Configure HTTP filtering
Right-click the Web publishing rule you created, and select Configure HTTP.
On the General tab, clear the Verify normalization check box.
If you are using a language containing high bit characters (for example,
the umlaut in German) you should also clear the Block high bit characters
check box.

Caution The Verify normalization and Block high bit characters features are
meant to address potential security exploits. When you turn off these
features in ISA Server, you are potentially creating an opening for
malicious users.
//------------------------------------------------------------------------

Please feel free to let me know if you have any question.

Best Regards,
Wei-Dong XU (WD.XU)
Microsoft Product Support Services
Get Secure! - www.microsoft.com/security
This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • RE: ISA causing issue with upload document or new folder link
    ... Security and Acceleration Server ... After you have created the Web publishing rule, you must change the HTTP ... Escaped characters include, but are not ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: HTTP DDoS attack on our servers
    ... Server administration, security, programming, consulting. ... HTTP DDoS attack on our servers ... > handle HTTP requests at all and immediately closed the connection after ...
    (Incidents)
  • Re: Re[2]: Lotus Notes - Is this a bad thing?
    ... Only the Notes security counts if only port 1352 is ... I agree that noone should be able to connect by HTTP to ... that particular server but if users are allowed to set their own passwords ... odds are that HTTP and Notes passwords will be the same for some users. ...
    (Security-Basics)
  • Re: RPC over HTTP with Basic Authentication and no SSL
    ... I have the same problem and you are correct that the 'folks who run exchange ... I'm also the person who runs exchange on our server so it's myself I'm ... wouldnt the RPC over HTTP accpet that? ... the security or get a SSL certificate installed on the website/server. ...
    (microsoft.public.outlook.installation)
  • security-basics Digest of: get.123_145
    ... VPN to ASP a security risk? ... Re: Multiple IPSec tunnels? ... Subject: Security NT Server ... VPN to ASP a security risk? ...
    (Security-Basics)