Re: Pest Patrol Updates on client machines not going through ISA
From: Marina Roos [SBS-MVP] (marina_at_roos.nodontwantspam.nl.com)
Date: 01/06/05
- Next message: Travis Wallace: "Using GPO to force client computers to lock"
- Previous message: Cameron: "Error when trying to connect client computers to server"
- In reply to: Jeff Teel: "Re: Pest Patrol Updates on client machines not going through ISA"
- Next in thread: Jeff Teel: "Re: Pest Patrol Updates on client machines not going through ISA"
- Reply: Jeff Teel: "Re: Pest Patrol Updates on client machines not going through ISA"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 6 Jan 2005 19:18:10 +0100
Hi Jeff,
You should be able to figure out from the ISA logs what port is wanting
access and thus being denied by ISA.
-- Regards, Marina Microsoft SBS-MVP One of the Magical M&M's "Jeff Teel" <jdteel@sugardog.com> schreef in bericht news:%23yV4qGA9EHA.2012@TK2MSFTNGP15.phx.gbl... > Hi Marina > > I don't think it is the Windows Firewall as I was getting the updates before > I joined the PC's to my domain. The Pest Patrol Update window has an error > that reads: > > "Unexpected error EIdHTTPProtocolException HTTP/1.1 403 Forbidden ( The ISA > Server denies the specified Uniform Resource Locator (URL). )" which leads > me to think it is ISA keeping the updates out. I was able to get the updates > by changing doing this to ISA: > > >> 1. Open ISA management > View > Advanced > >> > >> 2. Right click on "yourSBSserver" > Properties > Outgoing Web Requests > >> tab > >> > >> Uncheck "Ask unauthenticated users for identification" > OK > select > >> "Restart Services" > >> > >> 3. Access Policy > Site and Content Rules > Disable both "Small Business > >> . > > . > >> ." rules (do not disable the "Allow Rule") > >> > >> 4 Access Policy > Protocol Rules > Right Click Protocol Rules > New > > >> rule > >> > >> create a rule that allows all ip traffic at all times for any request. > >> > >> 5. Access Policy > Protocol Rules > disable the "Small Business Internet > >> Access Rule" > > Is this something safe to leave or should it be changed back after updates > are downloaded? > > Thanks > Jeff > > > "Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in message > news:%23CGFUXn8EHA.2192@TK2MSFTNGP14.phx.gbl... > > Hi Jeff, > > > > Are the workstations XP SP2? Can you check if the pestpatrol update > > program > > is allowed through the xp firewall? > > > > -- > > Regards, > > > > Marina > > Microsoft SBS-MVP > > One of the Magical M&M's > > > > "Jeff Teel" <jdteel@sugardog.com> schreef in bericht > > news:%23hyjcSN8EHA.2012@TK2MSFTNGP15.phx.gbl... > >> Hi Marina.... > >> > >> The clients do have the ISA Firewall client installed and they show the > >> firewall client icon in the system tray as being connected to ISA. I did > > see > >> a post by Charles Grossman telling about an error that read the same as > > the > >> one I was getting and a response from Steve Bruce that I have copied in > > this > >> post. I applied Steve's rules and was able to get the updates from > >> PestPatrol. Would it be safe to leave the settings that Steve had > > suggested > >> or should they be changed back after the updates are downloaded? Or is > > there > >> a way to just allow updates from the PestPatrol address? I see a place > > where > >> Microsoft Windows Updates and Office Updates are allowed but there is not > >> any place to add another web address. > >> ---------------------------------------------------- > >> Here is the post from Charles > >> > >> I get this message when I try to access my exchange server I have looked > > at > >> kb 842612 and it did not fix problem. Also I have tried to reach another > > owa > >> site that my wife uses and I can not log in Are these 2 issues connected? > >> > >> 403 Forbidden - The server denies the specified Uniform Resource Locator > >> (URL). Contact the server administrator. (12202) > >> Internet Security and Acceleration Server > >> ------------------------------------------------------- > >> There is an outbound authentication scheme on ISA. > >> > >> For testing purposes - or pemanently - you could remove the outbound > >> authentication scheme that the SBS setup configures on the ISA server. > >> Outbound access control may not be neccesary in your organization. > >> > >> These changes also permit you to remove the proxy settings in Internet > >> Explorer - which is handy for users who bring notebooks to your office > > from > >> home or other networks. > >> > >> 1. Open ISA management > View > Advanced > >> > >> 2. Right click on "yourSBSserver" > Properties > Outgoing Web Requests > >> tab > >> > >> Uncheck "Ask unauthenticated users for identification" > OK > select > >> "Restart Services" > >> > >> 3. Access Policy > Site and Content Rules > Disable both "Small Business > >> . > > . > >> ." rules (do not disable the "Allow Rule") > >> > >> 4 Access Policy > Protocol Rules > Right Click Protocol Rules > New > > >> rule > >> > >> create a rule that allows all ip traffic at all times for any request. > >> > >> 5. Access Policy > Protocol Rules > disable the "Small Business Internet > >> Access Rule" > >> > >> > >> > >> > >> "Charles Grossman" <Charles Grossman@discussions.microsoft.com> wrote in > >> message news:F239DA3F-656D-489E-8E0B-CCCBEAEF87CB@microsoft.com... > >> > >> > >> "Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in > > message > >> news:%23XZTnv27EHA.3700@TK2MSFTNGP10.phx.gbl... > >> > Hi Jeff, > >> > > >> > Do the clients have the Firewall Client installed? > >> > > >> > -- > >> > Regards, > >> > > >> > Marina > >> > Microsoft SBS-MVP > >> > One of the Magical M&M's > >> > > >> > "Jeff Teel" <jdteel@sugardog.com> schreef in bericht > >> > news:%23eZeTVV7EHA.1452@TK2MSFTNGP11.phx.gbl... > >> >> When I try to run the update for Pest Patrol on clients I get an error > >> > "ELD > >> >> HTTPProtocal Exception HTTP/1.1 403 Forbidden (This ISA Server denies > > the > >> >> specified URL)" > >> >> Is there a setting that I need to adjust in ISA to allow traffic from > >> >> Pest > >> >> Patrol? > >> >> > >> >> Thanks > >> >> Jeff > >> >> > >> >> > >> > > >> > > >> > >> > > > > > >
- Next message: Travis Wallace: "Using GPO to force client computers to lock"
- Previous message: Cameron: "Error when trying to connect client computers to server"
- In reply to: Jeff Teel: "Re: Pest Patrol Updates on client machines not going through ISA"
- Next in thread: Jeff Teel: "Re: Pest Patrol Updates on client machines not going through ISA"
- Reply: Jeff Teel: "Re: Pest Patrol Updates on client machines not going through ISA"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
