Re: SBS 2003 ISA proxy for FTP fails

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Marina Roos [SBS-MVP] (marina_at_roos.nodontwantspam.nl.com)
Date: 08/12/04


Date: Fri, 13 Aug 2004 01:21:10 +0200

Hi David,

ISA is the follow up from Proxy. To be honest, I have never seen a printer
needing the proxy client software.

-- 
Regards,
Marina
Microsoft SBS-MVP
"David Barnes" <david@nospam-bitsolve.com> schreef in bericht
news:zCSSc.4314$aC2.46428406@news-text.cableinet.net...
> That's all very well, but that doesn't fit my requirements.
> MS Proxy 2.0 did a better job of proxy than this.
>
> If I get what you are saying correct; ISA is no longer a standard CERN 1.1
> compliant PROXY with windows extensions (as Proxy 2.0 was).
>
> How do I install this on my clients Xerox printer, or their Apple MAC's?
> I need standard FTP(Read) proxy capability.
> If ISA can't do this I'll have to use something else.
>
> If I have to use Wingate, do I have to make some changes to ISA?
> Or do I just set Wingate to proxy on another port eg 8081
>
> David
>
> "Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in
message
> news:OetFm2yfEHA.2896@TK2MSFTNGP11.phx.gbl...
> > Hi David,
> >
> > Because that is the way ISA works ;-) Install the Firewall Client on the
> > workstations and set the proxy to your server and port 8080.
> >
> > -- 
> > Regards,
> >
> > Marina
> > Microsoft SBS-MVP
> >
> > "David Barnes" <david@nospam-bitsolve.com> schreef in bericht
> > news:2jcSc.3078$Bt5.32541818@news-text.cableinet.net...
> > > Hi Marina,
> > >
> > > Why is the firewall client required for FTP proxy access via SBS's
ISA?
> > > I have some non-windows systems (printers linux etc..) that I also
want
> to
> > > get this working for..
> > > Can't install firewall client on a minolta printer..!
> > >
> > > Apart from that I don't really want to install the firewallclient on
the
> > > PC's I want to use the proxy server as a proxy..
> > > I can get Wingate to work, why can't I get ISA to work for FTP(Read)
> > proxy.?
> > >
> > > David
> > >
> > >
> > > "Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in
> > message
> > > news:uKj2XlOeEHA.3016@tk2msftngp13.phx.gbl...
> > > > Hi David,
> > > >
> > > > Make sure the Firewall client is installed on the clients. Proxy
> should
> > > > point to your server and port 8080.
> > > >
> > > > -- 
> > > > Regards,
> > > >
> > > > Marina
> > > > Microsoft SBS-MVP
> > > >
> > > > "David Barnes" <david@nospam-bitsolve.com> schreef in bericht
> > > > news:i8APc.236$Jw6.1926354@news-text.cableinet.net...
> > > > > I'm stuck..
> > > > >
> > > > > Start again and ask the question properly this time...
> > > > >
> > > > > SBS2003 (premium)
> > > > > 2 NICs
> > > > > 'out of the tin' default settings
> > > > > SBS's 'CEICW' run and selected 'directly connected' and 'enable
> > > firewall'
> > > > > Servers connection to the internet is via a NAT/PAT
firewall/router
> > > > > (FireBrick to be precise)
> > > > >
> > > > > NOTE1: ISA is pre-configured by the SBS setup with filters etc..
> > > > >
> > > > > From the SBS server itself I couldn't do any FTP access to any
site
> at
> > > > all,
> > > > > from IE or the 'CMD> FTP' until I enabled the outbound port 21 and
> > > inbound
> > > > > port 20 filters that were there but disabled(why?) and created an
> > > > additional
> > > > > filter 'outbound, tcp, local=dynamic, remote=any'.
> > > > >
> > > > > Q1) Why didn't this 'work out of the tin'?
> > > > > Q1a) Is there an SBS wizard I should be running to fix this?
> > > > > Q1b) Is there a patch from MS for this?
> > > > > NOTE2: This should work out of the tin as MS market and sell SBS
as
> a
> > > > > pre-configured solution for small businesses..
> > > > >
> > > > > At least I can get the server to ftp download the virus updates
> now..
> > > > >
> > > > > HOWEVER...
> > > > >
> > > > > on a client PC (in IE) goto ftp://ftp.hp.com  .. fails and I get:
> > > > > ISA Server: Extended error message:
> > > > > 200 type set to A.
> > > > > 500 Invalid PORT Command.
> > > > >
> > > > > NOTE3: the error returned to the client is an SBS/ISA error page..
> > > > > Client has NO default gateway
> > > > > Client has ISA(SBS) server defined as proxy for FTP
> > > > > Client does NOT have proxy firewall installed.
> > > > >
> > > > > Note: ftp.hp.com is just an example, also tried ftp.microsoft.com
> and
> > > > > ftp.nai.com..
> > > > >
> > > > > Q2) How do I get the Proxy FTP(read) to work?
> > > > > Q2a)What SBS wizard/setting do I have to run to enable this?
> > > > > Q2b) How do I diagnose it's failing?
> > > > >
> > > > >
> > > > >
> > > > > David Barnes
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>


Relevant Pages

  • Re: Migrate then Setup or Setup then Migrate?
    ... The term "transparent proxy" is a specific term with a specifi meaning. ... Clients by either installing the Firewall Client Software ... See the ISA documentation or the built in Help for the details of the three ... Microsoft Internet Security & Acceleration Server: ...
    (microsoft.public.isa.configuration)
  • Re: IE 6 and Proxy Setting Exceptions
    ... IE 6 and Proxy Setting Exceptions ... | searched on the TechNet DVD for this "Internal Client Concepts in ISA ... | ProgramName.EXE Disable/DisableEx 1 ...
    (microsoft.public.isa)
  • Re: HTTPS; SSL-Tunnel
    ... ISA resolves names for browsers configured as web proxy clients, so if the browser is complaining about "DNS Failure", it's likely ... Original Client IP Client Agent Authenticated Client Service Server Name ...
    (microsoft.public.isa)
  • Re: Webproxy Konfiguration auf einem ISA 2006 Standard
    ... dann ist der Client noch SecureNAT Client?! ... Dann geht es auch ohne Proxy ... Hierbei habe ich die einzelne IP als Quelle angegeben und den ISA ... Freigegeben sind Port 80/443/8080. ...
    (microsoft.public.de.german.isaserver)
  • Re: ISA server 2004 and Bluecoat proxy
    ... i want to mention that we have configured a backup rout (backup bluecoat ... i want to ask about event 14130 that related to web proxy chain fauilire. ... If you were able to work around the upstream proxy server, ... upstream ISA Server, you might want to change it back. ...
    (microsoft.public.isa.configuration)