Re: REPOST: Firewall Client Disconnects



Charlie Russel is saying the same thing.

-> ISA Server
-> Configuration
-> General
-> Define Connection Limits
-> Connection Limit
-> Limit the number of connection
-> Connection limit per client (TCP and non-TCP)

Do me a favor and check what value is there?

If 40...try 160 for grins.


clevere wrote:
Here's the google'd version of my post.

 Firewall Client disconnects?
All 17 messages in topic - view as tree
clevere  May 30, 3:04 pm     show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
Date: Mon, 30 May 2005 12:04:05 -0700
Local: Mon,May 30 2005 3:04 pm
Subject: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Ok, in my strive to find out why I am having problems with just one URL, I
was attempting to make a transaction on this URL, and my firewall client
reported it was unable to connect to the ISA server.

The Firewall Client is for ISA 2004. I have manually select the ISA server
selected, with the server name. Just like I had with ISA 2000. The one thing
I find funny is that instead of having the firewall client manager in the
control panel, it's now in Programs (off the start menu). Is everyone elses
like that? Is there a way in ISA 2004 to find why I am getting disconnected?

Reply

"Brandy Nee [MSFT]"  May 31, 6:45 am     show options

Newsgroups: microsoft.public.windows.server.sbs
From: v-bra...@xxxxxxxxxxxxxxxxxxxx ("Brandy Nee [MSFT]") - Find messages by
this author
Date: Tue, 31 May 2005 10:45:19 GMT
Local: Tues,May 31 2005 6:45 am
Subject: RE: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hello Clevere,

Thank you for posting to the SBS Newsgroup.

From your post, I think your issue is your firewall clients cannot connect
to the ISA server. If I have misunderstood your issue, please let me know.

Before we go any further, I need to confirm with you for some information:

1. I am not quite clear your meaning "attempting to make a transaction on
this URL", please explain it in detailed.

2. I assume that your firewall clients are using ISA 2004, what is your ISA
server version, 2000 or 2004?

3. Does this issue happen to all the firewall clients or some of them?

4. Can you manually or automatically connect the firewall client to connect
to the ISA server? To do so,

a) On of the problematic client workstation, in the taskbar, double click
the Firewall Client icon, and Firewall Client Options comes out.

b) Check the box Automatically/Manually detect ISA server.

c) Click OK, and test whether it connects or not.

5. Also in the Firewall Client icon, make sure that you have typed the
right ISA Server address to connect. You can fill in the blank with the ISA
server FQDN or IP address, and test whether it is connected.

6. Make sure your ISA service is Started.

Thanks for your time. I am looking forward to hearing from you soon.

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

==============================­=======================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================­=======================

This posting is provided "AS IS" with no warranties, and confers no rights.

Reply

clevere  May 31, 7:39 pm     show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
Date: Tue, 31 May 2005 16:39:36 -0700
Local: Tues,May 31 2005 7:39 pm
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Brandy-
Here are you answers:

From your post, I think your issue is your firewall clients cannot connect
to the ISA server. If I have misunderstood your issue, please let me know.
Before we go any further, I need to confirm with you for some information:
1. I am not quite clear your meaning "attempting to make a transaction on
this URL", please explain it in detailed


.

I am attempting to connect to my online banking system. It's a CGI based
application that lets you access your bank information. I can email you the
URL, but I can't post it online. The first time I attempt to access the
feature of this site, (getting my account info), the page will not load, the
page can't be displayed.  IE reports
Cannot find server or DNS Error
Internet Explorer
If I click back, and then click continue (on the webpage to access my
account information) everything works. If I attempt to access anything
internet related when the page won't load, my Firewall client software loses
it's connection with the ISA server.

2. I assume that your firewall clients are using ISA 2004, what is your ISA
server version, 2000 or 2004


?

ISA 2004 Firewall Client, ISA 2004 Server

3. Does this issue happen to all the firewall clients or some of them


? I'm only testing this on one workstation at this time, but the URL access problem happens across all the machines on the network. This was not a problem with ISA 2000.

4. Can you manually or automatically connect the firewall client to connect
to the ISA server? To do so


,

I have it setup manually.

a) On of the problematic client workstation, in the taskbar, double click
the Firewall Client icon, and Firewall Client Options comes out.
b) Check the box Automatically/Manually detect ISA server.
c) Click OK, and test whether it connects or not.
5. Also in the Firewall Client icon, make sure that you have typed the
right ISA Server address to connect. You can fill in the blank with the ISA
server FQDN or IP address, and test whether it is connected


.

I've done this, works everytime. Except when the firewall client loses
connection to the ISA server. It then takes about 15 seconds before it can
find the ISA server

6. Make sure your ISA service is Started.
It's running on the SBS2K3 box .. quite happily...

Thanks for your time. I am looking forward to hearing from you soon


.

This is what my ISA 2004 log says when I attempt to connect to the web site
in question:

192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:29 w3proxy VOLE -
www.customwa.com 66.224.153.131 443 - 596 364 SSL-tunnel TCP -
www.customwa.com:443 - Inet 995 - SBS Internet Access Rule - Internal
External 0x8a Failed
192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
External 0x800 Allowed
192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
External 0x800 Allowed
192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:30 w3proxy VOLE -
www.customwa.com 66.224.153.131 443 - 594 341 SSL-tunnel TCP -
www.customwa.com:443 - Inet 64 - SBS Internet Access Rule - Internal
External 0x88 Failed

""Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx­> wrote in message
news:6twcY3cZFHA.2184@xxxxxxxxxxxxxxxxxxxxxxxx

- Hide quoted text -
- Show quoted text -

Hello Clevere,


Thank you for posting to the SBS Newsgroup.


From your post, I think your issue is your firewall clients cannot connect
to the ISA server. If I have misunderstood your issue, please let me know.


Before we go any further, I need to confirm with you for some information:


1. I am not quite clear your meaning "attempting to make a transaction on
this URL", please explain it in detailed.


2. I assume that your firewall clients are using ISA 2004, what is your
ISA
server version, 2000 or 2004?


3. Does this issue happen to all the firewall clients or some of them?


4. Can you manually or automatically connect the firewall client to
connect
to the ISA server? To do so,


a) On of the problematic client workstation, in the taskbar, double click
the Firewall Client icon, and Firewall Client Options comes out.


b) Check the box Automatically/Manually detect ISA server.


c) Click OK, and test whether it connects or not.


5. Also in the Firewall Client icon, make sure that you have typed the
right ISA Server address to connect. You can fill in the blank with the
ISA
server FQDN or IP address, and test whether it is connected.


6. Make sure your ISA service is Started.


Thanks for your time. I am looking forward to hearing from you soon.


Best regards,


Brandy Nee


Microsoft CSS Online Newsgroup Support


Get Secure! - www.microsoft.com/security


==============================­=======================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================­=======================


This posting is provided "AS IS" with no warranties, and confers no
rights.



Reply

clevere  Jun 1, 12:18 am     show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
Date: Tue, 31 May 2005 21:18:36 -0700
Local: Wed,Jun 1 2005 12:18 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hmm .. I made an interesting discovery. If I change the server name in the
firewall client to the server IP address, I get the slow page load, but I
can connect to that site without problem.

The firewall client is not able to find the ISA server every time I can't
access this web site. What does that indicate?

""

- Hide quoted text -
- Show quoted text -
Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx­> wrote in message
news:6twcY3cZFHA.2184@xxxxxxxxxxxxxxxxxxxxxxxx

Hello Clevere,


Thank you for posting to the SBS Newsgroup.


From your post, I think your issue is your firewall clients cannot connect
to the ISA server. If I have misunderstood your issue, please let me know.


Before we go any further, I need to confirm with you for some information:


1. I am not quite clear your meaning "attempting to make a transaction on
this URL", please explain it in detailed.


2. I assume that your firewall clients are using ISA 2004, what is your
ISA
server version, 2000 or 2004?


3. Does this issue happen to all the firewall clients or some of them?


4. Can you manually or automatically connect the firewall client to
connect
to the ISA server? To do so,


a) On of the problematic client workstation, in the taskbar, double click
the Firewall Client icon, and Firewall Client Options comes out.


b) Check the box Automatically/Manually detect ISA server.


c) Click OK, and test whether it connects or not.


5. Also in the Firewall Client icon, make sure that you have typed the
right ISA Server address to connect. You can fill in the blank with the
ISA
server FQDN or IP address, and test whether it is connected.


6. Make sure your ISA service is Started.


Thanks for your time. I am looking forward to hearing from you soon.


Best regards,


Brandy Nee


Microsoft CSS Online Newsgroup Support


Get Secure! - www.microsoft.com/security


==============================­=======================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================­=======================


This posting is provided "AS IS" with no warranties, and confers no
rights.



Reply

clevere  Jun 1, 12:22 am     show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
Date: Tue, 31 May 2005 21:22:53 -0700
Local: Wed,Jun 1 2005 12:22 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

I may have spoken too soon on the finding the ISA server via the IP
address...

But the firewall client is losing connection or dropping it with the ISA
server.

"clevere" <n...@xxxxxxxxx> wrote in message


news:uP597DmZFHA.2496@xxxxxxxxxxxxxxxxxxxxxxx

- Hide quoted text -
- Show quoted text -

Hmm .. I made an interesting discovery. If I change the server name in the
firewall client to the server IP address, I get the slow page load, but I
can connect to that site without problem.


The firewall client is not able to find the ISA server every time I can't
access this web site. What does that indicate?


""Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx­> wrote in message
news:6twcY3cZFHA.2184@xxxxxxxxxxxxxxxxxxxxxxxx

Hello Clevere,


Thank you for posting to the SBS Newsgroup.


From your post, I think your issue is your firewall clients cannot
connect
to the ISA server. If I have misunderstood your issue, please let me
know.


Before we go any further, I need to confirm with you for some
information:


1. I am not quite clear your meaning "attempting to make a transaction on
this URL", please explain it in detailed.


2. I assume that your firewall clients are using ISA 2004, what is your
ISA
server version, 2000 or 2004?


3. Does this issue happen to all the firewall clients or some of them?


4. Can you manually or automatically connect the firewall client to
connect
to the ISA server? To do so,


a) On of the problematic client workstation, in the taskbar, double click
the Firewall Client icon, and Firewall Client Options comes out.


b) Check the box Automatically/Manually detect ISA server.


c) Click OK, and test whether it connects or not.


5. Also in the Firewall Client icon, make sure that you have typed the
right ISA Server address to connect. You can fill in the blank with the
ISA
server FQDN or IP address, and test whether it is connected.


6. Make sure your ISA service is Started.


Thanks for your time. I am looking forward to hearing from you soon.


Best regards,


Brandy Nee


Microsoft CSS Online Newsgroup Support


Get Secure! - www.microsoft.com/security


==============================­=======================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================­=======================


This posting is provided "AS IS" with no warranties, and confers no
rights.



Reply

"Brandy Nee [MSFT]"  Jun 1, 7:04 am     show options

Newsgroups: microsoft.public.windows.server.sbs
From: v-bra...@xxxxxxxxxxxxxxxxxxxx ("Brandy Nee [MSFT]") - Find messages by
this author
Date: Wed, 01 Jun 2005 11:04:51 GMT
Local: Wed,Jun 1 2005 7:04 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hello Clevere,

Thank you for posting back.

From your reply, I think this maybe is a very complicated issue. Please
understand that we may take time to do more further research, and we also
need your assistance to collect more error information.

1. Unlike ISA Server 2000, it is by design that the Firewall Client of ISA
2004 is listed in the Programs as you mentioned, so please do not worry
about it.

2. When the connection is rejected by the ISA, the Firewall Client will
temporarily display "not connected" for about 15 seconds.

3. Please configure ISA's internal NIC as the proxy in the IE | Internet
Options | Connections tab | LAN Settings button, and then test whether it
works now. To do so, type the IP address of the ISA internal NIC into the
proxy server name, and then type the Port of internal NIC that the ISA is
monitoring into the port box.

4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
come from the SBS 2K3 SP1 Premium Edition or from the retail version of the
ISA Server 2004?

Thanks for your time. I am looking forward to your reply.

Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
==============================­=======================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================­=======================
This posting is provided "AS IS" with no warranties, and confers no rights


.

Reply

clevere  Jun 1, 12:17 pm     show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
Date: Wed, 1 Jun 2005 09:17:33 -0700
Local: Wed,Jun 1 2005 12:17 pm
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hi Brandy-
    Thanks for replying, I'd really like to know why ISA 2004 is killing my
connection :)

Here are you answers:

From your reply, I think this maybe is a very complicated issue. Please
understand that we may take time to do more further research, and we also
need your assistance to collect more error information.
1. Unlike ISA Server 2000, it is by design that the Firewall Client of ISA
2004 is listed in the Programs as you mentioned, so please do not worry
about it


.

Ok, no worries there then.

2. When the connection is rejected by the ISA, the Firewall Client will
temporarily display "not connected" for about 15 seconds


.

That explains something, that ISA is rejecting the connection from my
workstation, but why?

3. Please configure ISA's internal NIC as the proxy in the IE | Internet
Options | Connections tab | LAN Settings button, and then test whether it
works now. To do so, type the IP address of the ISA internal NIC into the
proxy server name, and then type the Port of internal NIC that the ISA is
monitoring into the port box


.

Did that, didn't change a thing. As soon as I try to access information on
www.customwaNOSPAM.com The firewall client loses connection with the server,
and poof, there goes my internet connection.

4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
come from the SBS 2K3 SP1 Premium Edition or from the retail version of the
ISA Server 2004


?

Yes, I installed SBS 2k3 SP1 Premium Edition. The ISA 2004 comes from the
SBS2K3 SP1 Premium CD set you order over the internet. I upgraded as
follows:

Downloaded SBS2K3 SP1 (per the Microsoft instructions) from the internet,
installed it, and was up and running with little trouble. Ordered my CD's,
got My CD's, and install ISA 2004... that's when the problem started to
happen. I don't know if you saw this in my last post, but this is what ISA
is saying when I attempt to access that web site:

192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:29 w3proxy VOLE -
www.customwa.com 66.224.153.131 443 - 596 364 SSL-tunnel TCP -
www.customwa.com:443 - Inet 995 - SBS Internet Access Rule - Internal
External 0x8a Failed
192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
External 0x800 Allowed
192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0


; Windows NT 5.1; SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE - www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP - www.customwa.com:443 - Inet 407 -

SBS Internet Access Rule - Internal
External 0x800 Allowed
192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE


6.0; Windows NT 5.1;

SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:30 w3proxy VOLE -
www.customwa.com 66.224.153.131 443 - 594 341 SSL-tunnel TCP -
www.customwa.com:443 - Inet 64 - SBS Internet Access Rule - Internal
External 0x88 Failed


I am using IE, with the latest Service Pack install on Windows XP SP2.

Just out of curiousity, and from a recommendation from another SBS member, I
deleted all the ISA rules, and re-ran the Connect to the Internet Wizard. It
recreated all the appropriate ISA rules, but my problem still exists.

""Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx­> wrote in message
news:ms%23bAnpZFHA.2476@xxxxxxxxxxxxxxxxxxxxxxxx

- Hide quoted text -
- Show quoted text -

Hello Clevere,


Thank you for posting back.


From your reply, I think this maybe is a very complicated issue. Please
understand that we may take time to do more further research, and we also
need your assistance to collect more error information.


1. Unlike ISA Server 2000, it is by design that the Firewall Client of ISA
2004 is listed in the Programs as you mentioned, so please do not worry
about it.


2. When the connection is rejected by the ISA, the Firewall Client will
temporarily display "not connected" for about 15 seconds.


3. Please configure ISA's internal NIC as the proxy in the IE | Internet
Options | Connections tab | LAN Settings button, and then test whether it
works now. To do so, type the IP address of the ISA internal NIC into the
proxy server name, and then type the Port of internal NIC that the ISA is
monitoring into the port box.


4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
come from the SBS 2K3 SP1 Premium Edition or from the retail version of
the
ISA Server 2004?


Thanks for your time. I am looking forward to your reply.


Best regards,


Brandy Nee


Microsoft CSS Online Newsgroup Support


Get Secure! - www.microsoft.com/security


==============================­=======================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================­=======================


This posting is provided "AS IS" with no warranties, and confers no
rights.



Reply

"Brandy Nee [MSFT]"  Jun 2, 7:03 am     show options

Newsgroups: microsoft.public.windows.server.sbs
From: v-bra...@xxxxxxxxxxxxxxxxxxxx ("Brandy Nee [MSFT]") - Find messages by
this author
Date: Thu, 02 Jun 2005 11:03:11 GMT
Local: Thurs,Jun 2 2005 7:03 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hello Clevere,

Thank you for posting back.

As I have stated in my last reply, this is a very complcated issue. To
perform more further research, please take your time and help us  to gather
the following information:

[Note]: This information is very important for us to isolate and resolve
this issue.

1. IPCONFIG /ALL results on the SBS.

2. The network diagram that includes the IP addresses range for each
network.

3. ISA Info:

1) Download the file from the following URL:

http://www.isatools.org/isainf­o/ISAInfo.zip

2) Extract all files to a folder on ISA server.

3) Double click Isainfo.js. This will generate 2 files
ISAInfo2004-<computer-name>.lo­g and ISAInfo2004-<computer-name>.xm­l in the
current folder.

4) Attach the files and send it to v-bra...@xxxxxxxxxxxxx

4. Gather the ISA logs:

1) Schedule a down time.

2) Open ISA 2004 management console.

3) Expand the server node and highlight 'Monitoring'.

4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
Pane' is showed there.

5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.

6) Switch to the 'Fields' tab, click 'Select All', and then click OK.

7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.

8) Switch to the 'Fields' tab, click 'Select All', and then click OK.

9) Click 'Apply' to save changes and update the configuration.

10) Temporarily disable the Firewall service.  To do that, please click
Monitoring | Services tab, and then right click 'Microsoft Firewall' to
choose 'Stop'.

11) Clear the current existing W3C logs.  To do that, go to the log saving
directory and clean any existing .W3C logs. By default, the logs will be
saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may not
be able to deleted, that's normal.)   You may backup them first and then
delete them.

12) Go back to the ISA 2004 management console, and then Start the stopped
'Microsoft Firewall' service.

13) Reproduce the problem, stop the service, and then attach the resulting
W3C files to the newsgroup.

14) Please also let me know the IP address of the testing clients so that I
can filter the data.

Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
==============================­=======================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================­=======================
This posting is provided "AS IS" with no warranties, and confers no rights


.

Reply

clevere  Jun 3, 1:18 am     show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
Date: Thu, 2 Jun 2005 22:18:24 -0700
Local: Fri,Jun 3 2005 1:18 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Thanks for the reply Brandy, I'll start getting you this information
tomorrow in the AM!

""Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx­> wrote in message
news:tSM1wK2ZFHA.3928@xxxxxxxxxxxxxxxxxxxxxxxx

- Hide quoted text -
- Show quoted text -

Hello Clevere,


Thank you for posting back.


As I have stated in my last reply, this is a very complcated issue. To
perform more further research, please take your time and help us  to
gather
the following information:


[Note]: This information is very important for us to isolate and resolve
this issue.


1. IPCONFIG /ALL results on the SBS.


2. The network diagram that includes the IP addresses range for each
network.


3. ISA Info:


1) Download the file from the following URL:


http://www.isatools.org/isainf­o/ISAInfo.zip


2) Extract all files to a folder on ISA server.


3) Double click Isainfo.js. This will generate 2 files
ISAInfo2004-<computer-name>.lo­g and ISAInfo2004-<computer-name>.xm­l in

the

current folder.


4) Attach the files and send it to v-bra...@xxxxxxxxxxxxx


4. Gather the ISA logs:


1) Schedule a down time.


2) Open ISA 2004 management console.


3) Expand the server node and highlight 'Monitoring'.


4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
Pane' is showed there.


5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.


6) Switch to the 'Fields' tab, click 'Select All', and then click OK.


7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.


8) Switch to the 'Fields' tab, click 'Select All', and then click OK.


9) Click 'Apply' to save changes and update the configuration.


10) Temporarily disable the Firewall service.  To do that, please click
Monitoring | Services tab, and then right click 'Microsoft Firewall' to
choose 'Stop'.


11) Clear the current existing W3C logs.  To do that, go to the log saving
directory and clean any existing .W3C logs. By default, the logs will be
saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
not
be able to deleted, that's normal.)   You may backup them first and then
delete them.


12) Go back to the ISA 2004 management console, and then Start the stopped
'Microsoft Firewall' service.


13) Reproduce the problem, stop the service, and then attach the resulting
W3C files to the newsgroup.


14) Please also let me know the IP address of the testing clients so that
I
can filter the data.


Best regards,


Brandy Nee


Microsoft CSS Online Newsgroup Support


Get Secure! - www.microsoft.com/security


==============================­=======================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================­=======================


This posting is provided "AS IS" with no warranties, and confers no
rights.



Reply

clevere  Jun 3, 2:50 am     show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
Date: Thu, 2 Jun 2005 23:50:47 -0700
Local: Fri,Jun 3 2005 2:50 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Good morning Brandy-

Please check your email, you have some information from me.

""

- Hide quoted text -
- Show quoted text -
Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx­> wrote in message
news:tSM1wK2ZFHA.3928@xxxxxxxxxxxxxxxxxxxxxxxx

Hello Clevere,


Thank you for posting back.


As I have stated in my last reply, this is a very complcated issue. To
perform more further research, please take your time and help us  to
gather
the following information:


[Note]: This information is very important for us to isolate and resolve
this issue.


1. IPCONFIG /ALL results on the SBS.


2. The network diagram that includes the IP addresses range for each
network.


3. ISA Info:


1) Download the file from the following URL:


http://www.isatools.org/isainf­o/ISAInfo.zip


2) Extract all files to a folder on ISA server.


3) Double click Isainfo.js. This will generate 2 files
ISAInfo2004-<computer-name>.lo­g and ISAInfo2004-<computer-name>.xm­l in

the

current folder.


4) Attach the files and send it to v-bra...@xxxxxxxxxxxxx


4. Gather the ISA logs:


1) Schedule a down time.


2) Open ISA 2004 management console.


3) Expand the server node and highlight 'Monitoring'.


4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
Pane' is showed there.


5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.


6) Switch to the 'Fields' tab, click 'Select All', and then click OK.


7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.


8) Switch to the 'Fields' tab, click 'Select All', and then click OK.


9) Click 'Apply' to save changes and update the configuration.


10) Temporarily disable the Firewall service.  To do that, please click
Monitoring | Services tab, and then right click 'Microsoft Firewall' to
choose 'Stop'.


11) Clear the current existing W3C logs.  To do that, go to the log saving
directory and clean any existing .W3C logs. By default, the logs will be
saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
not
be able to deleted, that's normal.)   You may backup them first and then
delete them.


12) Go back to the ISA 2004 management console, and then Start the stopped
'Microsoft Firewall' service.


13) Reproduce the problem, stop the service, and then attach the resulting
W3C files to the newsgroup.


14) Please also let me know the IP address of the testing clients so that
I
can filter the data.


Best regards,


Brandy Nee


Microsoft CSS Online Newsgroup Support


Get Secure! - www.microsoft.com/security


==============================­=======================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================­=======================


This posting is provided "AS IS" with no warranties, and confers no
rights.



Reply

clevere  Jun 5, 3:09 am     show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
Date: Sun, 5 Jun 2005 00:09:09 -0700
Local: Sun,Jun 5 2005 3:09 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

While waiting for Brandy to reply to me, I discovered something interesting.
If I disable ISA 2004's Web Proxy, everything works as you should expect
(all be it a little slower)..
Anyone got a take on that?

"clevere" <n...@xxxxxxxxx> wrote in message


news:e9DhXpUZFHA.1092@xxxxxxxxxxxxxxxxxxxxxxx

- Hide quoted text -
- Show quoted text -

Ok, in my strive to find out why I am having problems with just one URL, I
was attempting to make a transaction on this URL, and my firewall client
reported it was unable to connect to the ISA server.


The Firewall Client is for ISA 2004. I have manually select the ISA server
selected, with the server name. Just like I had with ISA 2000. The one
thing I find funny is that instead of having the firewall client manager
in the control panel, it's now in Programs (off the start menu). Is
everyone elses like that? Is there a way in ISA 2004 to find why I am
getting disconnected?



Reply

"Brandy Nee [MSFT]"  Jun 6, 6:32 am     show options

Newsgroups: microsoft.public.windows.server.sbs
From: v-bra...@xxxxxxxxxxxxxxxxxxxx ("Brandy Nee [MSFT]") - Find messages by
this author
Date: Mon, 06 Jun 2005 10:32:39 GMT
Local: Mon,Jun 6 2005 6:32 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hello Clevere,

Thank you for posting back.

I have received your logs. Please be patient that I am doing researching on
your issue now. To better filter your issue, I would like to know what
exactly the URL you failed to access. Can you please paste the URL link to
my email address?

Thanks for your cooperation and time. I am looking forward to hearing from
you.

Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
==============================­=======================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================­=======================
This posting is provided "AS IS" with no warranties, and confers no rights


.

Reply

"Brandy Nee [MSFT]"  Jun 7, 6:31 am     show options

Newsgroups: microsoft.public.windows.server.sbs
From: v-bra...@xxxxxxxxxxxxxxxxxxxx ("Brandy Nee [MSFT]") - Find messages by
this author
Date: Tue, 07 Jun 2005 10:31:04 GMT
Local: Tues,Jun 7 2005 6:31 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hello Clevere,

Thank you for posting back.

I have received your email. After a long time research on your logs, I
found there are some errors occur when the Firewall Clients pass the
authentication to the ISA. Please try the following steps:

1. On the problematic client, temporarily disable the Firewall Client.

2. Close all IE windows.

3. Open Internet Options | Connections tab | LAN Settings button, configure
the ISA's internal NIC as the proxy.

4. Launch IE to access that URL again to see if the problem still exists.

If this issue persists, please help to gather the following information:

1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out the
steps how you did that? Do you mean that you disabled HTTP Filter under
Internet Security & Acceleration Server
2004\Yourserver\Configuration\­Add-in?

2. Are there any error messages in the System event log and the Application
event log? Please export the events into .evt files and then send to you.

I am greatly appreciated your time and cooperation. If anything unclear,
please let me know.

I am looking forward to hearing from you!
Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www
.microsoft.com/security
==============================­=======================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================­=======================
This posting is provided "AS IS" with no warranties, and confers no rights


.

Reply

clevere  Jun 8, 4:20 am     show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
Date: Wed, 8 Jun 2005 01:20:27 -0700
Local: Wed,Jun 8 2005 4:20 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hi Brandy-
    Alright, this is odd.

I had to re-enable Web Proxy, for my network (I turned it off). I did they
by Going to the ISA manager, clicking in Networks, right-clicking on the
Internal network, and disabling Web Proxy.

With the web proxy enabled, I disabled the firewall client, and put in IE to
use my server, at port 8080 for the proxy server.

I was unable to access the website in question. I turned on the Firewall
Client, told IE to just "Auto matically detect connection settings" (so that
it no longer used Proxy Server), and I could access the web site.

With the "Web Proxy" running, some sites seem to be having problems loading,
but that could be because SBS is doing it's mid-week backup. This I can
continue to test, I'll leave the Web Proxy turned on for now, and see how it
performs during the day.

As far as IE goes, shouldn't I be able to tell it to use this proxy server,
and be good to go? Do you need any logs?

There are no event ID's in the event viewer.

""Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx­> wrote in message
news:EjsQUMoaFHA.3336@xxxxxxxxxxxxxxxxxxxxxxxx

- Hide quoted text -
- Show quoted text -

Hello Clevere,


Thank you for posting back.


I have received your logs. Please be patient that I am doing researching
on
your issue now. To better filter your issue, I would like to know what
exactly the URL you failed to access. Can you please paste the URL link to
my email address?


Thanks for your cooperation and time. I am looking forward to hearing from
you.


Best regards,


Brandy Nee


Microsoft CSS Online Newsgroup Support


Get Secure! - www.microsoft.com/security


==============================­=======================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================­=======================


This posting is provided "AS IS" with no warranties, and confers no
rights.



Reply

"Brandy Nee [MSFT]"  Jun 9, 7:19 am     show options

Newsgroups: microsoft.public.windows.server.sbs
From: v-bra...@xxxxxxxxxxxxxxxxxxxx ("Brandy Nee [MSFT]") - Find messages by
this author
Date: Thu, 09 Jun 2005 11:19:41 GMT
Local: Thurs,Jun 9 2005 7:19 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hello Clever,

Thank you for posting back.

Please see my information below:

1. If you disabled the Web Proxy, whatever you enabled "Automatically
detect connection settings", IE will not directly pass the request to the
ISA.  Instead, the Firewall Client will pass the IE requests to the ISA so
it works.

2. To use "Automatically detect connection settings", we need to enable
WPAD on the ISA. Please See:

309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
Windows 2000
http://support.microsoft.com/?­id=309814

816320 How to configure firewall and Web proxy client Autodiscovery in
Windows Server 2003
http://support.microsoft.com/?­id=816320

Configuring DHCP and DNS for ISA automatic discovery
http://www.isaserver.org/tutor­ials/Configuring-DHCP-DNS-auto­matic-dis....
html

We need to configure either on DHCP or on DNS for the WPAD record. For the
DHCP way, we do not recommend do that since there are many known issues.
For the DNS way, it needs to use the port 80 on the internal NIC. However,
since the services on the SBS needs the port 80 on the internal NIC, we are
unable to use DNS to configure WPAD.

As a conclusion, we are unable to enable "Automatically detect connection
settings" in a SBS environment. If you really want to do that, you must use
the DHCP way.

3. In your scenario, you should always manually set SBS' internal NIC as
the proxy in Internet options instead of enabling "Automatically detect
connection settings"

Hope the information helps. If anything is

unclear, please let me know. I
am looking forward to hearing from you
Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www
.microsoft.com/security
==============================­=======================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================­=======================
This posting is provided "AS IS" with no warranties, and confers no rights


.

Reply

clevere  Jun 9, 1:20 pm     show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
Date: Thu, 9 Jun 2005 10:20:15 -0700
Local: Thurs,Jun 9 2005 1:20 pm
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

I'm afraid you misunderstood what I was saying. I was doing what you
recommended:

I have received your email. After a long time research on your logs, I
found there are some errors occur when the Firewall Clients pass the
authentication to the ISA. Please try the following steps:
1. On the problematic client, temporarily disable the Firewall Client


.

Done

2. Close all IE windows.

Done

3. Open Internet Options | Connections tab | LAN Settings button, configure
the ISA's internal NIC as the proxy


.

Did that.

4. Launch IE to access that URL again to see if the problem still exists


. Yes, the problem presists.

If this issue persists, please help to gather the following information:
1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out the
steps how you did that? Do you mean that you disabled HTTP Filter under
Internet Security & Acceleration Server
2004\Yourserver\Configuration\­Add-in


?

No, I disabled Web Proxy under ISA
2004\Myserver\Configuration\Ne­twork\Internal Network\Properties\Web Proxy

2. Are there any error messages in the System event log and the Application
event log? Please export the events into .evt files and then send to you


.

No, there are none.

Does that make more sense? I had to re-enable the Web Proxy for the internal
network in ISA to do the testing you asked, Because I had turned it off.
After I turned it OFF, I could no longer use "Use this Proxy Server" in IE,
because the proxy server was turned off. So I had to reconfigure IE to just
Automatically detect the settings, so it would work with the web Proxy
turned off.

Does that make sense?

""Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx­> wrote in message
news:WtYxiUObFHA.2184@xxxxxxxxxxxxxxxxxxxxxxxx

- Hide quoted text -
- Show quoted text -

Hello Clever,


Thank you for posting back.


Please see my information below:


1. If you disabled the Web Proxy, whatever you enabled "Automatically
detect connection settings", IE will not directly pass the request to the
ISA.  Instead, the Firewall Client will pass the IE requests to the ISA so
it works.


2. To use "Automatically detect connection settings", we need to enable
WPAD on the ISA. Please See:


309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
Windows 2000
http://support.microsoft.com/?­id=309814


816320 How to configure firewall and Web proxy client Autodiscovery in
Windows Server 2003
http://support.microsoft.com/?­id=816320


Configuring DHCP and DNS for ISA automatic discovery


http://www.isaserver.org/tutor­ials/Configuring-DHCP-DNS-auto­matic-dis....

html


We need to configure either on DHCP or on DNS for the WPAD record. For the
DHCP way, we do not recommend do that since there are many known issues.
For the DNS way, it needs to use the port 80 on the internal NIC. However,
since the services on the SBS needs the port 80 on the internal NIC, we

are

unable to use DNS to configure WPAD.


As a conclusion, we are unable to enable "Automatically detect connection
settings" in a SBS environment. If you really want to do that, you must

use

the DHCP way.


3. In your scenario, you should always manually set SBS' internal NIC as
the proxy in Internet options instead of enabling "Automatically detect
connection settings"


Hope the information helps. If anything is unclear, please let me know. I
am looking forward to hearing from you


Best regards,


Brandy Nee


Microsoft CSS Online Newsgroup Support


Get Secure! - www.microsoft.com/security


==============================­=======================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================­=======================


This posting is provided "AS IS" with no warranties, and confers no

rights


.

- Hide quoted text -
- Show quoted text -


Reply

clevere  Jun 13, 10:43 am     show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
Date: Mon, 13 Jun 2005 07:43:13 -0700
Local: Mon,Jun 13 2005 10:43 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

I'm afraid you misunderstood what I was saying. I was doing what you
recommended


, and your answers are below:

- Hide quoted text -
- Show quoted text -
I have received your email. After a long time research on your logs
, I
found
 there
 are
 some
 errors
 occur
 when
 the
 Firewall
 Clients
 pass
 the
authentication
 to
 the
 ISA
. Please
 try
 the
 following
 steps
:
1
. On
 the
 problematic
 client
, temporarily
 disable
 the
 Firewall
 Client
.
Done
2. Close all IE windows.
Done
3. Open Internet Options | Connections tab | LAN Settings button, configure
the ISA's
 internal
 NIC
 as
 the
 proxy
.
Did that.
4. Launch IE to access that URL again to see if the
 problem
 still
 exists
.
Yes, the problem presists.
If this issue persists, please help to gather the following information:
1
. You
 mentioned
 "disable
 ISA
 2004's
 Web
 Proxy
". Please
 fully
 give
 out
 the
steps
 how
 you
 did
 that
? Do
 you
 mean
 that
 you
 disabled
 HTTP
 Filter
 under
Internet
 Security
 & Acceleration
 Server
2004
\Yourserver
\Configuration
\Add
-in
?
No, I disabled Web Proxy under ISA
2004\Myserver\Configuration\Ne­twork\Internal Network\Properties\Web Proxy
2. Are there any error messages in the System event log and
 the
 Application
event
 log
? Please
 export
 the
 events
 into
 .evt
 files
 and
 then
 send
 to
 you
.
No, there are none.
Does that make more sense? I had to re-enable the Web Proxy for the internal
network in ISA to do the testing you asked, Because I had turned it off.
After I turned it OFF, I could no longer use "Use this Proxy Server" in IE,
because the proxy server was turned off. So I had to reconfigure IE to just
Automatically detect the settings, so it would work with the web Proxy
turned off.
Does that make sense?
""Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx­> wrote in message
news:WtYxiUObFHA.2184@xxxxxxxxxxxxxxxxxxxxxxxx

Hello Clever,


Thank you for posting back.


Please see my information below:


1. If you disabled the Web Proxy, whatever you enabled "Automatically
detect connection settings", IE will not directly pass the request to the
ISA.  Instead, the Firewall Client will pass the IE requests to the ISA so
it works.


2. To use "Automatically detect connection settings", we need to enable
WPAD on the ISA. Please See:


309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
Windows 2000
http://support.microsoft.com/?­id=309814


816320 How to configure firewall and Web proxy client Autodiscovery in
Windows Server 2003
http://support.microsoft.com/?­id=816320


Configuring DHCP and DNS for ISA automatic discovery


http
://www
.isaserver
.org
/tutorials
/Configuring
-DHCP
-DNS
-automatic
-discovery
.

html


We need to configure either on DHCP or on DNS for the WPAD record. For the
DHCP way, we do not recommend do that since there are many known issues.
For the DNS way, it needs to use the port 80 on the internal NIC. However,
since the services on the SBS needs the port 80 on the internal NIC, we

are

unable to use DNS to configure WPAD.


As a conclusion, we are unable to enable "Automatically detect connection
settings" in a SBS environment. If you really want to do that, you must

use

the DHCP way.


3. In your scenario, you should always manually set SBS' internal NIC as
the proxy in Internet options instead of enabling "Automatically detect
connection settings"


Hope the information helps. If anything is unclear, please let me know. I
am looking forward to hearing from you


Best regards,


Brandy Nee


Microsoft CSS Online Newsgroup Support


Get Secure! - www.microsoft.com/security


==============================­=======================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================­=======================


This posting is provided "AS IS" with no warranties, and confers no

rights


.

"clevere" <n...@xxxxxxxxx> wrote in message


news:uEBdCeRbFHA.584@xxxxxxxxxxxxxxxxxxxxxxx

- Hide quoted text -
- Show quoted text -

I'm afraid you misunderstood what I was saying. I was doing what you
recommended:


I have received your email. After a long time research on your logs, I
found there are some errors occur when the Firewall Clients pass the
authentication to the ISA. Please try the following steps:


1. On the problematic client, temporarily disable the Firewall Client.


Done


2. Close all IE windows.


Done


3. Open Internet Options | Connections tab | LAN Settings button,

configure

the ISA's internal NIC as the proxy.


Did that.


4. Launch IE to access that URL again to see if the problem still exists.
Yes, the problem presists.


If this issue persists, please help to gather the following information:


1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out the
steps how you did that? Do you mean that you disabled HTTP Filter under
Internet Security & Acceleration Server
2004\Yourserver\Configuration\­Add-in?


No, I disabled Web Proxy under ISA
2004\Myserver\Configuration\Ne­twork\Internal Network\Properties\Web Proxy


2. Are there any error messages in the System event log and the

Application

event log? Please export the events into .evt files and then send to you.


No, there are none.


Does that make more sense? I had to re-enable the Web Proxy for the

internal

network in ISA to do the testing you asked, Because I had turned it off.
After I turned it OFF, I could no longer use "Use this Proxy Server" in

IE,

because the proxy server was turned off. So I had to reconfigure IE to

just

Automatically detect the settings, so it would work with the web Proxy
turned off.


Does that make sense?


""Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx­> wrote in message
news:WtYxiUObFHA.2184@xxxxxxxxxxxxxxxxxxxxxxxx

Hello Clever,


Thank you for posting back.


Please see my information below:


1. If you disabled the Web Proxy, whatever you enabled "Automatically
detect connection settings", IE will not directly pass the request to

the

ISA. Instead, the Firewall Client will pass the IE requests to the ISA

so

it works.


2. To use "Automatically detect connection settings", we need to enable
WPAD on the ISA. Please See:


309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
Windows 2000
http://support.microsoft.com/?­id=309814


816320 How to configure firewall and Web proxy client Autodiscovery in
Windows Server 2003
http://support.microsoft.com/?­id=816320


Configuring DHCP and DNS for ISA automatic discovery



http://www.isaserver.org/tutor­ials/Configuring-DHCP-DNS-auto­matic-dis....

- Hide quoted text -
- Show quoted text -

html


We need to configure either on DHCP or on DNS for the WPAD record. For

the

DHCP way, we do not recommend do that since there are many known issues.
For the DNS way, it needs to use the port 80 on the internal NIC.

However,

since the services on the SBS needs the port 80 on the internal NIC, we

are

unable to use DNS to configure WPAD.


As a conclusion, we are unable to enable "Automatically detect

connection

settings" in a SBS environment. If you really want to do that, you must

use

the DHCP way.


3. In your scenario, you should always manually set SBS' internal NIC as
the proxy in Internet options instead of enabling "Automatically detect
connection settings"


Hope the information helps. If anything is unclear, please let me know.

I

am looking forward to hearing from you


Best regards,


Brandy Nee


Microsoft CSS Online Newsgroup Support


Get Secure! - www.microsoft.com/security


==============================­=======================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================­=======================


This posting is provided "AS IS" with no warranties, and confers no

rights.



Reply


.



Relevant Pages

  • REPOST: Firewall Client Disconnects
    ... Subject: Firewall Client disconnects? ... reported it was unable to connect to the ISA server. ... The Firewall Client is for ISA 2004. ... This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.windows.server.sbs)
  • Re: REPOST: Firewall Client Disconnects
    ... >> Subject: Firewall Client disconnects? ... >> reported it was unable to connect to the ISA server. ... >> Thank you for posting to the SBS Newsgroup. ...
    (microsoft.public.windows.server.sbs)
  • Re: REPOST: Firewall Client Disconnects
    ... >> Subject: Firewall Client disconnects? ... >> reported it was unable to connect to the ISA server. ... >> Thank you for posting to the SBS Newsgroup. ...
    (microsoft.public.windows.server.sbs)
  • Re: Firewall Client disconnects?
    ... it's connection with the ISA server. ... ISA 2004 Firewall Client, ISA 2004 Server ... Also in the Firewall Client icon, make sure that you have typed the ...
    (microsoft.public.windows.server.sbs)
  • Re: Firewall Client Extremely Chatty
    ... It runs on the Machine that the Executable causing the connection ... But with that said ISA does get similar information from Firewall ... Clients because the Firewall Client has this information (because it ... traffic is leaving my network. ...
    (microsoft.public.isa)