Re: REPOST: Firewall Client Disconnects
- From: "clevere" <noway@xxxxxxxxx>
- Date: Mon, 13 Jun 2005 12:45:07 -0700
Thanks Susan
I'll give it whirl after the office folk take off.
"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@xxxxxxxxxxx>
wrote in message news:esygRADcFHA.2420@xxxxxxxxxxxxxxxxxxxxxxx
> Charlie Russel is saying the same thing.
>
> -> ISA Server
> -> Configuration
> -> General
> -> Define Connection Limits
> -> Connection Limit
> -> Limit the number of connection
> -> Connection limit per client (TCP and non-TCP)
>
> Do me a favor and check what value is there?
>
> If 40...try 160 for grins.
>
>
> clevere wrote:
> > Here's the google'd version of my post.
> >
> > Firewall Client disconnects?
> > All 17 messages in topic - view as tree
> > clevere May 30, 3:04 pm show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
> > Date: Mon, 30 May 2005 12:04:05 -0700
> > Local: Mon,May 30 2005 3:04 pm
> > Subject: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Ok, in my strive to find out why I am having problems with just one URL,
I
> > was attempting to make a transaction on this URL, and my firewall client
> > reported it was unable to connect to the ISA server.
> >
> > The Firewall Client is for ISA 2004. I have manually select the ISA
server
> > selected, with the server name. Just like I had with ISA 2000. The one
thing
> > I find funny is that instead of having the firewall client manager in
the
> > control panel, it's now in Programs (off the start menu). Is everyone
elses
> > like that? Is there a way in ISA 2004 to find why I am getting
disconnected?
> >
> > Reply
> >
> > "Brandy Nee [MSFT]" May 31, 6:45 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: v-bra...@xxxxxxxxxxxxxxxxxxxx ("Brandy Nee [MSFT]") - Find
messages by
> > this author
> > Date: Tue, 31 May 2005 10:45:19 GMT
> > Local: Tues,May 31 2005 6:45 am
> > Subject: RE: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hello Clevere,
> >
> > Thank you for posting to the SBS Newsgroup.
> >
> > From your post, I think your issue is your firewall clients cannot
connect
> > to the ISA server. If I have misunderstood your issue, please let me
know.
> >
> > Before we go any further, I need to confirm with you for some
information:
> >
> > 1. I am not quite clear your meaning "attempting to make a transaction
on
> > this URL", please explain it in detailed.
> >
> > 2. I assume that your firewall clients are using ISA 2004, what is your
ISA
> > server version, 2000 or 2004?
> >
> > 3. Does this issue happen to all the firewall clients or some of them?
> >
> > 4. Can you manually or automatically connect the firewall client to
connect
> > to the ISA server? To do so,
> >
> > a) On of the problematic client workstation, in the taskbar, double
click
> > the Firewall Client icon, and Firewall Client Options comes out.
> >
> > b) Check the box Automatically/Manually detect ISA server.
> >
> > c) Click OK, and test whether it connects or not.
> >
> > 5. Also in the Firewall Client icon, make sure that you have typed the
> > right ISA Server address to connect. You can fill in the blank with the
ISA
> > server FQDN or IP address, and test whether it is connected.
> >
> > 6. Make sure your ISA service is Started.
> >
> > Thanks for your time. I am looking forward to hearing from you soon.
> >
> > Best regards,
> >
> > Brandy Nee
> >
> > Microsoft CSS Online Newsgroup Support
> >
> > Get Secure! - www.microsoft.com/security
> >
> > =====================================================
> > When responding to posts, please "Reply to Group" via your newsreader so
> > that others may learn and benefit from your issue.
> > =====================================================
> >
> > This posting is provided "AS IS" with no warranties, and confers no
rights.
> >
> > Reply
> >
> > clevere May 31, 7:39 pm show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
> > Date: Tue, 31 May 2005 16:39:36 -0700
> > Local: Tues,May 31 2005 7:39 pm
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Brandy-
> > Here are you answers:
> >
> > From your post, I think your issue is your firewall clients cannot
connect
> > to the ISA server. If I have misunderstood your issue, please let me
know.
> > Before we go any further, I need to confirm with you for some
information:
> > 1. I am not quite clear your meaning "attempting to make a transaction
on
> > this URL", please explain it in detailed
> >
> >
> > .
> >
> > I am attempting to connect to my online banking system. It's a CGI based
> > application that lets you access your bank information. I can email you
the
> > URL, but I can't post it online. The first time I attempt to access the
> > feature of this site, (getting my account info), the page will not load,
the
> > page can't be displayed. IE reports
> > Cannot find server or DNS Error
> > Internet Explorer
> > If I click back, and then click continue (on the webpage to access my
> > account information) everything works. If I attempt to access anything
> > internet related when the page won't load, my Firewall client software
loses
> > it's connection with the ISA server.
> >
> > 2. I assume that your firewall clients are using ISA 2004, what is your
ISA
> > server version, 2000 or 2004
> >
> >
> > ?
> >
> > ISA 2004 Firewall Client, ISA 2004 Server
> >
> > 3. Does this issue happen to all the firewall clients or some of them
> >
> >
> > ?
> > I'm only testing this on one workstation at this time, but the URL
access
> > problem happens across all the machines on the network. This was not a
> > problem with ISA 2000.
> >
> > 4. Can you manually or automatically connect the firewall client to
connect
> > to the ISA server? To do so
> >
> >
> > ,
> >
> > I have it setup manually.
> >
> > a) On of the problematic client workstation, in the taskbar, double
click
> > the Firewall Client icon, and Firewall Client Options comes out.
> > b) Check the box Automatically/Manually detect ISA server.
> > c) Click OK, and test whether it connects or not.
> > 5. Also in the Firewall Client icon, make sure that you have typed the
> > right ISA Server address to connect. You can fill in the blank with the
ISA
> > server FQDN or IP address, and test whether it is connected
> >
> >
> > .
> >
> > I've done this, works everytime. Except when the firewall client loses
> > connection to the ISA server. It then takes about 15 seconds before it
can
> > find the ISA server
> >
> > 6. Make sure your ISA service is Started.
> > It's running on the SBS2K3 box .. quite happily...
> >
> > Thanks for your time. I am looking forward to hearing from you soon
> >
> >
> > .
> >
> > This is what my ISA 2004 log says when I attempt to connect to the web
site
> > in question:
> >
> > 192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0;
Windows
> > NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:29 w3proxy VOLE -
> > www.customwa.com 66.224.153.131 443 - 596 364 SSL-tunnel TCP -
> > www.customwa.com:443 - Inet 995 - SBS Internet Access Rule - Internal
> > External 0x8a Failed
> > 192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1;
> > SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
> > www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
> > www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
> > External 0x800 Allowed
> > 192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1;
> > SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
> > www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
> > www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
> > External 0x800 Allowed
> > 192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0;
Windows
> > NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:30 w3proxy VOLE -
> > www.customwa.com 66.224.153.131 443 - 594 341 SSL-tunnel TCP -
> > www.customwa.com:443 - Inet 64 - SBS Internet Access Rule - Internal
> > External 0x88 Failed
> >
> > ""Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:6twcY3cZFHA.2184@xxxxxxxxxxxxxxxxxxxxxxxx
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>Hello Clevere,
> >
> >
> >>Thank you for posting to the SBS Newsgroup.
> >
> >
> >>From your post, I think your issue is your firewall clients cannot
connect
> >>to the ISA server. If I have misunderstood your issue, please let me
know.
> >
> >
> >>Before we go any further, I need to confirm with you for some
information:
> >
> >
> >>1. I am not quite clear your meaning "attempting to make a transaction
on
> >>this URL", please explain it in detailed.
> >
> >
> >>2. I assume that your firewall clients are using ISA 2004, what is your
> >>ISA
> >>server version, 2000 or 2004?
> >
> >
> >>3. Does this issue happen to all the firewall clients or some of them?
> >
> >
> >>4. Can you manually or automatically connect the firewall client to
> >>connect
> >>to the ISA server? To do so,
> >
> >
> >>a) On of the problematic client workstation, in the taskbar, double
click
> >>the Firewall Client icon, and Firewall Client Options comes out.
> >
> >
> >>b) Check the box Automatically/Manually detect ISA server.
> >
> >
> >>c) Click OK, and test whether it connects or not.
> >
> >
> >>5. Also in the Firewall Client icon, make sure that you have typed the
> >>right ISA Server address to connect. You can fill in the blank with the
> >>ISA
> >>server FQDN or IP address, and test whether it is connected.
> >
> >
> >>6. Make sure your ISA service is Started.
> >
> >
> >>Thanks for your time. I am looking forward to hearing from you soon.
> >
> >
> >>Best regards,
> >
> >
> >>Brandy Nee
> >
> >
> >>Microsoft CSS Online Newsgroup Support
> >
> >
> >>Get Secure! - www.microsoft.com/security
> >
> >
> >>=====================================================
> >>When responding to posts, please "Reply to Group" via your newsreader so
> >>that others may learn and benefit from your issue.
> >>=====================================================
> >
> >
> >>This posting is provided "AS IS" with no warranties, and confers no
> >>rights.
> >
> >
> >
> > Reply
> >
> > clevere Jun 1, 12:18 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
> > Date: Tue, 31 May 2005 21:18:36 -0700
> > Local: Wed,Jun 1 2005 12:18 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hmm .. I made an interesting discovery. If I change the server name in
the
> > firewall client to the server IP address, I get the slow page load, but
I
> > can connect to that site without problem.
> >
> > The firewall client is not able to find the ISA server every time I
can't
> > access this web site. What does that indicate?
> >
> > ""
> >
> > - Hide quoted text -
> > - Show quoted text -
> > Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:6twcY3cZFHA.2184@xxxxxxxxxxxxxxxxxxxxxxxx
> >
> >>Hello Clevere,
> >
> >
> >>Thank you for posting to the SBS Newsgroup.
> >
> >
> >>From your post, I think your issue is your firewall clients cannot
connect
> >>to the ISA server. If I have misunderstood your issue, please let me
know.
> >
> >
> >>Before we go any further, I need to confirm with you for some
information:
> >
> >
> >>1. I am not quite clear your meaning "attempting to make a transaction
on
> >>this URL", please explain it in detailed.
> >
> >
> >>2. I assume that your firewall clients are using ISA 2004, what is your
> >>ISA
> >>server version, 2000 or 2004?
> >
> >
> >>3. Does this issue happen to all the firewall clients or some of them?
> >
> >
> >>4. Can you manually or automatically connect the firewall client to
> >>connect
> >>to the ISA server? To do so,
> >
> >
> >>a) On of the problematic client workstation, in the taskbar, double
click
> >>the Firewall Client icon, and Firewall Client Options comes out.
> >
> >
> >>b) Check the box Automatically/Manually detect ISA server.
> >
> >
> >>c) Click OK, and test whether it connects or not.
> >
> >
> >>5. Also in the Firewall Client icon, make sure that you have typed the
> >>right ISA Server address to connect. You can fill in the blank with the
> >>ISA
> >>server FQDN or IP address, and test whether it is connected.
> >
> >
> >>6. Make sure your ISA service is Started.
> >
> >
> >>Thanks for your time. I am looking forward to hearing from you soon.
> >
> >
> >>Best regards,
> >
> >
> >>Brandy Nee
> >
> >
> >>Microsoft CSS Online Newsgroup Support
> >
> >
> >>Get Secure! - www.microsoft.com/security
> >
> >
> >>=====================================================
> >>When responding to posts, please "Reply to Group" via your newsreader so
> >>that others may learn and benefit from your issue.
> >>=====================================================
> >
> >
> >>This posting is provided "AS IS" with no warranties, and confers no
> >>rights.
> >
> >
> >
> > Reply
> >
> > clevere Jun 1, 12:22 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
> > Date: Tue, 31 May 2005 21:22:53 -0700
> > Local: Wed,Jun 1 2005 12:22 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > I may have spoken too soon on the finding the ISA server via the IP
> > address...
> >
> > But the firewall client is losing connection or dropping it with the ISA
> > server.
> >
> > "clevere" <n...@xxxxxxxxx> wrote in message
> >
> >
> > news:uP597DmZFHA.2496@xxxxxxxxxxxxxxxxxxxxxxx
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>Hmm .. I made an interesting discovery. If I change the server name in
the
> >>firewall client to the server IP address, I get the slow page load, but
I
> >>can connect to that site without problem.
> >
> >
> >>The firewall client is not able to find the ISA server every time I
can't
> >>access this web site. What does that indicate?
> >
> >
> >>""Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx> wrote in message
> >>news:6twcY3cZFHA.2184@xxxxxxxxxxxxxxxxxxxxxxxx
> >>
> >>>Hello Clevere,
> >
> >
> >>>Thank you for posting to the SBS Newsgroup.
> >
> >
> >>>From your post, I think your issue is your firewall clients cannot
> >>>connect
> >>>to the ISA server. If I have misunderstood your issue, please let me
> >>>know.
> >
> >
> >>>Before we go any further, I need to confirm with you for some
> >>>information:
> >
> >
> >>>1. I am not quite clear your meaning "attempting to make a transaction
on
> >>>this URL", please explain it in detailed.
> >
> >
> >>>2. I assume that your firewall clients are using ISA 2004, what is your
> >>>ISA
> >>>server version, 2000 or 2004?
> >
> >
> >>>3. Does this issue happen to all the firewall clients or some of them?
> >
> >
> >>>4. Can you manually or automatically connect the firewall client to
> >>>connect
> >>>to the ISA server? To do so,
> >
> >
> >>>a) On of the problematic client workstation, in the taskbar, double
click
> >>>the Firewall Client icon, and Firewall Client Options comes out.
> >
> >
> >>>b) Check the box Automatically/Manually detect ISA server.
> >
> >
> >>>c) Click OK, and test whether it connects or not.
> >
> >
> >>>5. Also in the Firewall Client icon, make sure that you have typed the
> >>>right ISA Server address to connect. You can fill in the blank with the
> >>>ISA
> >>>server FQDN or IP address, and test whether it is connected.
> >
> >
> >>>6. Make sure your ISA service is Started.
> >
> >
> >>>Thanks for your time. I am looking forward to hearing from you soon.
> >
> >
> >>>Best regards,
> >
> >
> >>>Brandy Nee
> >
> >
> >>>Microsoft CSS Online Newsgroup Support
> >
> >
> >>>Get Secure! - www.microsoft.com/security
> >
> >
> >>>=====================================================
> >>>When responding to posts, please "Reply to Group" via your newsreader
so
> >>>that others may learn and benefit from your issue.
> >>>=====================================================
> >
> >
> >>>This posting is provided "AS IS" with no warranties, and confers no
> >>>rights.
> >
> >
> >
> > Reply
> >
> > "Brandy Nee [MSFT]" Jun 1, 7:04 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: v-bra...@xxxxxxxxxxxxxxxxxxxx ("Brandy Nee [MSFT]") - Find
messages by
> > this author
> > Date: Wed, 01 Jun 2005 11:04:51 GMT
> > Local: Wed,Jun 1 2005 7:04 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hello Clevere,
> >
> > Thank you for posting back.
> >
> > From your reply, I think this maybe is a very complicated issue. Please
> > understand that we may take time to do more further research, and we
also
> > need your assistance to collect more error information.
> >
> > 1. Unlike ISA Server 2000, it is by design that the Firewall Client of
ISA
> > 2004 is listed in the Programs as you mentioned, so please do not worry
> > about it.
> >
> > 2. When the connection is rejected by the ISA, the Firewall Client will
> > temporarily display "not connected" for about 15 seconds.
> >
> > 3. Please configure ISA's internal NIC as the proxy in the IE | Internet
> > Options | Connections tab | LAN Settings button, and then test whether
it
> > works now. To do so, type the IP address of the ISA internal NIC into
the
> > proxy server name, and then type the Port of internal NIC that the ISA
is
> > monitoring into the port box.
> >
> > 4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
> > come from the SBS 2K3 SP1 Premium Edition or from the retail version of
the
> > ISA Server 2004?
> >
> > Thanks for your time. I am looking forward to your reply.
> >
> > Best regards,
> > Brandy Nee
> > Microsoft CSS Online Newsgroup Support
> > Get Secure! - www.microsoft.com/security
> > =====================================================
> > When responding to posts, please "Reply to Group" via your newsreader so
> > that others may learn and benefit from your issue.
> > =====================================================
> > This posting is provided "AS IS" with no warranties, and confers no
rights
> >
> >
> > .
> >
> > Reply
> >
> > clevere Jun 1, 12:17 pm show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
> > Date: Wed, 1 Jun 2005 09:17:33 -0700
> > Local: Wed,Jun 1 2005 12:17 pm
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hi Brandy-
> > Thanks for replying, I'd really like to know why ISA 2004 is killing
my
> > connection :)
> >
> > Here are you answers:
> >
> > From your reply, I think this maybe is a very complicated issue. Please
> > understand that we may take time to do more further research, and we
also
> > need your assistance to collect more error information.
> > 1. Unlike ISA Server 2000, it is by design that the Firewall Client of
ISA
> > 2004 is listed in the Programs as you mentioned, so please do not worry
> > about it
> >
> >
> > .
> >
> > Ok, no worries there then.
> >
> > 2. When the connection is rejected by the ISA, the Firewall Client will
> > temporarily display "not connected" for about 15 seconds
> >
> >
> > .
> >
> > That explains something, that ISA is rejecting the connection from my
> > workstation, but why?
> >
> > 3. Please configure ISA's internal NIC as the proxy in the IE | Internet
> > Options | Connections tab | LAN Settings button, and then test whether
it
> > works now. To do so, type the IP address of the ISA internal NIC into
the
> > proxy server name, and then type the Port of internal NIC that the ISA
is
> > monitoring into the port box
> >
> >
> > .
> >
> > Did that, didn't change a thing. As soon as I try to access information
on
> > www.customwaNOSPAM.com The firewall client loses connection with the
server,
> > and poof, there goes my internet connection.
> >
> > 4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
> > come from the SBS 2K3 SP1 Premium Edition or from the retail version of
the
> > ISA Server 2004
> >
> >
> > ?
> >
> > Yes, I installed SBS 2k3 SP1 Premium Edition. The ISA 2004 comes from
the
> > SBS2K3 SP1 Premium CD set you order over the internet. I upgraded as
> > follows:
> >
> > Downloaded SBS2K3 SP1 (per the Microsoft instructions) from the
internet,
> > installed it, and was up and running with little trouble. Ordered my
CD's,
> > got My CD's, and install ISA 2004... that's when the problem started to
> > happen. I don't know if you saw this in my last post, but this is what
ISA
> > is saying when I attempt to access that web site:
> >
> > 192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0;
Windows
> > NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:29 w3proxy VOLE -
> > www.customwa.com 66.224.153.131 443 - 596 364 SSL-tunnel TCP -
> > www.customwa.com:443 - Inet 995 - SBS Internet Access Rule - Internal
> > External 0x8a Failed
> > 192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1;
> > SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
> > www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
> > www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
> > External 0x800 Allowed
> > 192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0
> >
> >
> > ; Windows NT 5.1;
> > SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
> > www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
> > www.customwa.com:443 - Inet 407 -
> >
> > SBS Internet Access Rule - Internal
> > External 0x800 Allowed
> > 192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE
> >
> >
> > 6.0; Windows
> > NT 5.1;
> >
> > SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:30 w3proxy VOLE -
> > www.customwa.com 66.224.153.131 443 - 594 341 SSL-tunnel TCP -
> > www.customwa.com:443 - Inet 64 - SBS Internet Access Rule - Internal
> > External 0x88 Failed
> >
> >
> > I am using IE, with the latest Service Pack install on Windows XP SP2.
> >
> > Just out of curiousity, and from a recommendation from another SBS
member, I
> > deleted all the ISA rules, and re-ran the Connect to the Internet
Wizard. It
> > recreated all the appropriate ISA rules, but my problem still exists.
> >
> > ""Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:ms%23bAnpZFHA.2476@xxxxxxxxxxxxxxxxxxxxxxxx
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>Hello Clevere,
> >
> >
> >>Thank you for posting back.
> >
> >
> >>From your reply, I think this maybe is a very complicated issue. Please
> >>understand that we may take time to do more further research, and we
also
> >>need your assistance to collect more error information.
> >
> >
> >>1. Unlike ISA Server 2000, it is by design that the Firewall Client of
ISA
> >>2004 is listed in the Programs as you mentioned, so please do not worry
> >>about it.
> >
> >
> >>2. When the connection is rejected by the ISA, the Firewall Client will
> >>temporarily display "not connected" for about 15 seconds.
> >
> >
> >>3. Please configure ISA's internal NIC as the proxy in the IE | Internet
> >>Options | Connections tab | LAN Settings button, and then test whether
it
> >>works now. To do so, type the IP address of the ISA internal NIC into
the
> >>proxy server name, and then type the Port of internal NIC that the ISA
is
> >>monitoring into the port box.
> >
> >
> >>4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
> >>come from the SBS 2K3 SP1 Premium Edition or from the retail version of
> >>the
> >>ISA Server 2004?
> >
> >
> >>Thanks for your time. I am looking forward to your reply.
> >
> >
> >>Best regards,
> >
> >
> >>Brandy Nee
> >
> >
> >>Microsoft CSS Online Newsgroup Support
> >
> >
> >>Get Secure! - www.microsoft.com/security
> >
> >
> >>=====================================================
> >>When responding to posts, please "Reply to Group" via your newsreader so
> >>that others may learn and benefit from your issue.
> >>=====================================================
> >
> >
> >>This posting is provided "AS IS" with no warranties, and confers no
> >>rights.
> >
> >
> >
> > Reply
> >
> > "Brandy Nee [MSFT]" Jun 2, 7:03 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: v-bra...@xxxxxxxxxxxxxxxxxxxx ("Brandy Nee [MSFT]") - Find
messages by
> > this author
> > Date: Thu, 02 Jun 2005 11:03:11 GMT
> > Local: Thurs,Jun 2 2005 7:03 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hello Clevere,
> >
> > Thank you for posting back.
> >
> > As I have stated in my last reply, this is a very complcated issue. To
> > perform more further research, please take your time and help us to
gather
> > the following information:
> >
> > [Note]: This information is very important for us to isolate and resolve
> > this issue.
> >
> > 1. IPCONFIG /ALL results on the SBS.
> >
> > 2. The network diagram that includes the IP addresses range for each
> > network.
> >
> > 3. ISA Info:
> >
> > 1) Download the file from the following URL:
> >
> > http://www.isatools.org/isainfo/ISAInfo.zip
> >
> > 2) Extract all files to a folder on ISA server.
> >
> > 3) Double click Isainfo.js. This will generate 2 files
> > ISAInfo2004-<computer-name>.log and ISAInfo2004-<computer-name>.xml in
the
> > current folder.
> >
> > 4) Attach the files and send it to v-bra...@xxxxxxxxxxxxx
> >
> > 4. Gather the ISA logs:
> >
> > 1) Schedule a down time.
> >
> > 2) Open ISA 2004 management console.
> >
> > 3) Expand the server node and highlight 'Monitoring'.
> >
> > 4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
> > Pane' is showed there.
> >
> > 5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
> > Tasks', and then switch the 'log storage format' from 'MSDE database'
> > (default) to 'File'.
> >
> > 6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
> >
> > 7) In the 'Task Pane', click 'Configure Web Proxy Logging' under
'Logging
> > Tasks', and then switch the 'log storage format' from 'MSDE database'
> > (default) to 'File'.
> >
> > 8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
> >
> > 9) Click 'Apply' to save changes and update the configuration.
> >
> > 10) Temporarily disable the Firewall service. To do that, please click
> > Monitoring | Services tab, and then right click 'Microsoft Firewall' to
> > choose 'Stop'.
> >
> > 11) Clear the current existing W3C logs. To do that, go to the log
saving
> > directory and clean any existing .W3C logs. By default, the logs will be
> > saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
not
> > be able to deleted, that's normal.) You may backup them first and then
> > delete them.
> >
> > 12) Go back to the ISA 2004 management console, and then Start the
stopped
> > 'Microsoft Firewall' service.
> >
> > 13) Reproduce the problem, stop the service, and then attach the
resulting
> > W3C files to the newsgroup.
> >
> > 14) Please also let me know the IP address of the testing clients so
that I
> > can filter the data.
> >
> > Best regards,
> > Brandy Nee
> > Microsoft CSS Online Newsgroup Support
> > Get Secure! - www.microsoft.com/security
> > =====================================================
> > When responding to posts, please "Reply to Group" via your newsreader so
> > that others may learn and benefit from your issue.
> > =====================================================
> > This posting is provided "AS IS" with no warranties, and confers no
rights
> >
> >
> > .
> >
> > Reply
> >
> > clevere Jun 3, 1:18 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
> > Date: Thu, 2 Jun 2005 22:18:24 -0700
> > Local: Fri,Jun 3 2005 1:18 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Thanks for the reply Brandy, I'll start getting you this information
> > tomorrow in the AM!
> >
> > ""Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:tSM1wK2ZFHA.3928@xxxxxxxxxxxxxxxxxxxxxxxx
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>Hello Clevere,
> >
> >
> >>Thank you for posting back.
> >
> >
> >>As I have stated in my last reply, this is a very complcated issue. To
> >>perform more further research, please take your time and help us to
> >>gather
> >>the following information:
> >
> >
> >>[Note]: This information is very important for us to isolate and resolve
> >>this issue.
> >
> >
> >>1. IPCONFIG /ALL results on the SBS.
> >
> >
> >>2. The network diagram that includes the IP addresses range for each
> >>network.
> >
> >
> >>3. ISA Info:
> >
> >
> >>1) Download the file from the following URL:
> >
> >
> >>http://www.isatools.org/isainfo/ISAInfo.zip
> >
> >
> >>2) Extract all files to a folder on ISA server.
> >
> >
> >>3) Double click Isainfo.js. This will generate 2 files
> >>ISAInfo2004-<computer-name>.log and ISAInfo2004-<computer-name>.xml in
> >
> > the
> >
> >>current folder.
> >
> >
> >>4) Attach the files and send it to v-bra...@xxxxxxxxxxxxx
> >
> >
> >>4. Gather the ISA logs:
> >
> >
> >>1) Schedule a down time.
> >
> >
> >>2) Open ISA 2004 management console.
> >
> >
> >>3) Expand the server node and highlight 'Monitoring'.
> >
> >
> >>4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
> >>Pane' is showed there.
> >
> >
> >>5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
> >>Tasks', and then switch the 'log storage format' from 'MSDE database'
> >>(default) to 'File'.
> >
> >
> >>6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
> >
> >
> >>7) In the 'Task Pane', click 'Configure Web Proxy Logging' under
'Logging
> >>Tasks', and then switch the 'log storage format' from 'MSDE database'
> >>(default) to 'File'.
> >
> >
> >>8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
> >
> >
> >>9) Click 'Apply' to save changes and update the configuration.
> >
> >
> >>10) Temporarily disable the Firewall service. To do that, please click
> >>Monitoring | Services tab, and then right click 'Microsoft Firewall' to
> >>choose 'Stop'.
> >
> >
> >>11) Clear the current existing W3C logs. To do that, go to the log
saving
> >>directory and clean any existing .W3C logs. By default, the logs will be
> >>saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
> >>not
> >>be able to deleted, that's normal.) You may backup them first and then
> >>delete them.
> >
> >
> >>12) Go back to the ISA 2004 management console, and then Start the
stopped
> >>'Microsoft Firewall' service.
> >
> >
> >>13) Reproduce the problem, stop the service, and then attach the
resulting
> >>W3C files to the newsgroup.
> >
> >
> >>14) Please also let me know the IP address of the testing clients so
that
> >>I
> >>can filter the data.
> >
> >
> >>Best regards,
> >
> >
> >>Brandy Nee
> >
> >
> >>Microsoft CSS Online Newsgroup Support
> >
> >
> >>Get Secure! - www.microsoft.com/security
> >
> >
> >>=====================================================
> >>When responding to posts, please "Reply to Group" via your newsreader so
> >>that others may learn and benefit from your issue.
> >>=====================================================
> >
> >
> >>This posting is provided "AS IS" with no warranties, and confers no
> >>rights.
> >
> >
> >
> > Reply
> >
> > clevere Jun 3, 2:50 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
> > Date: Thu, 2 Jun 2005 23:50:47 -0700
> > Local: Fri,Jun 3 2005 2:50 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Good morning Brandy-
> >
> > Please check your email, you have some information from me.
> >
> > ""
> >
> > - Hide quoted text -
> > - Show quoted text -
> > Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:tSM1wK2ZFHA.3928@xxxxxxxxxxxxxxxxxxxxxxxx
> >
> >>Hello Clevere,
> >
> >
> >>Thank you for posting back.
> >
> >
> >>As I have stated in my last reply, this is a very complcated issue. To
> >>perform more further research, please take your time and help us to
> >>gather
> >>the following information:
> >
> >
> >>[Note]: This information is very important for us to isolate and resolve
> >>this issue.
> >
> >
> >>1. IPCONFIG /ALL results on the SBS.
> >
> >
> >>2. The network diagram that includes the IP addresses range for each
> >>network.
> >
> >
> >>3. ISA Info:
> >
> >
> >>1) Download the file from the following URL:
> >
> >
> >>http://www.isatools.org/isainfo/ISAInfo.zip
> >
> >
> >>2) Extract all files to a folder on ISA server.
> >
> >
> >>3) Double click Isainfo.js. This will generate 2 files
> >>ISAInfo2004-<computer-name>.log and ISAInfo2004-<computer-name>.xml in
> >
> > the
> >
> >>current folder.
> >
> >
> >>4) Attach the files and send it to v-bra...@xxxxxxxxxxxxx
> >
> >
> >>4. Gather the ISA logs:
> >
> >
> >>1) Schedule a down time.
> >
> >
> >>2) Open ISA 2004 management console.
> >
> >
> >>3) Expand the server node and highlight 'Monitoring'.
> >
> >
> >>4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
> >>Pane' is showed there.
> >
> >
> >>5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
> >>Tasks', and then switch the 'log storage format' from 'MSDE database'
> >>(default) to 'File'.
> >
> >
> >>6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
> >
> >
> >>7) In the 'Task Pane', click 'Configure Web Proxy Logging' under
'Logging
> >>Tasks', and then switch the 'log storage format' from 'MSDE database'
> >>(default) to 'File'.
> >
> >
> >>8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
> >
> >
> >>9) Click 'Apply' to save changes and update the configuration.
> >
> >
> >>10) Temporarily disable the Firewall service. To do that, please click
> >>Monitoring | Services tab, and then right click 'Microsoft Firewall' to
> >>choose 'Stop'.
> >
> >
> >>11) Clear the current existing W3C logs. To do that, go to the log
saving
> >>directory and clean any existing .W3C logs. By default, the logs will be
> >>saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
> >>not
> >>be able to deleted, that's normal.) You may backup them first and then
> >>delete them.
> >
> >
> >>12) Go back to the ISA 2004 management console, and then Start the
stopped
> >>'Microsoft Firewall' service.
> >
> >
> >>13) Reproduce the problem, stop the service, and then attach the
resulting
> >>W3C files to the newsgroup.
> >
> >
> >>14) Please also let me know the IP address of the testing clients so
that
> >>I
> >>can filter the data.
> >
> >
> >>Best regards,
> >
> >
> >>Brandy Nee
> >
> >
> >>Microsoft CSS Online Newsgroup Support
> >
> >
> >>Get Secure! - www.microsoft.com/security
> >
> >
> >>=====================================================
> >>When responding to posts, please "Reply to Group" via your newsreader so
> >>that others may learn and benefit from your issue.
> >>=====================================================
> >
> >
> >>This posting is provided "AS IS" with no warranties, and confers no
> >>rights.
> >
> >
> >
> > Reply
> >
> > clevere Jun 5, 3:09 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
> > Date: Sun, 5 Jun 2005 00:09:09 -0700
> > Local: Sun,Jun 5 2005 3:09 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > While waiting for Brandy to reply to me, I discovered something
interesting.
> > If I disable ISA 2004's Web Proxy, everything works as you should expect
> > (all be it a little slower)..
> > Anyone got a take on that?
> >
> > "clevere" <n...@xxxxxxxxx> wrote in message
> >
> >
> > news:e9DhXpUZFHA.1092@xxxxxxxxxxxxxxxxxxxxxxx
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>Ok, in my strive to find out why I am having problems with just one URL,
I
> >>was attempting to make a transaction on this URL, and my firewall client
> >>reported it was unable to connect to the ISA server.
> >
> >
> >>The Firewall Client is for ISA 2004. I have manually select the ISA
server
> >>selected, with the server name. Just like I had with ISA 2000. The one
> >>thing I find funny is that instead of having the firewall client manager
> >>in the control panel, it's now in Programs (off the start menu). Is
> >>everyone elses like that? Is there a way in ISA 2004 to find why I am
> >>getting disconnected?
> >
> >
> >
> > Reply
> >
> > "Brandy Nee [MSFT]" Jun 6, 6:32 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: v-bra...@xxxxxxxxxxxxxxxxxxxx ("Brandy Nee [MSFT]") - Find
messages by
> > this author
> > Date: Mon, 06 Jun 2005 10:32:39 GMT
> > Local: Mon,Jun 6 2005 6:32 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hello Clevere,
> >
> > Thank you for posting back.
> >
> > I have received your logs. Please be patient that I am doing researching
on
> > your issue now. To better filter your issue, I would like to know what
> > exactly the URL you failed to access. Can you please paste the URL link
to
> > my email address?
> >
> > Thanks for your cooperation and time. I am looking forward to hearing
from
> > you.
> >
> > Best regards,
> > Brandy Nee
> > Microsoft CSS Online Newsgroup Support
> > Get Secure! - www.microsoft.com/security
> > =====================================================
> > When responding to posts, please "Reply to Group" via your newsreader so
> > that others may learn and benefit from your issue.
> > =====================================================
> > This posting is provided "AS IS" with no warranties, and confers no
rights
> >
> >
> > .
> >
> > Reply
> >
> > "Brandy Nee [MSFT]" Jun 7, 6:31 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: v-bra...@xxxxxxxxxxxxxxxxxxxx ("Brandy Nee [MSFT]") - Find
messages by
> > this author
> > Date: Tue, 07 Jun 2005 10:31:04 GMT
> > Local: Tues,Jun 7 2005 6:31 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hello Clevere,
> >
> > Thank you for posting back.
> >
> > I have received your email. After a long time research on your logs, I
> > found there are some errors occur when the Firewall Clients pass the
> > authentication to the ISA. Please try the following steps:
> >
> > 1. On the problematic client, temporarily disable the Firewall Client.
> >
> > 2. Close all IE windows.
> >
> > 3. Open Internet Options | Connections tab | LAN Settings button,
configure
> > the ISA's internal NIC as the proxy.
> >
> > 4. Launch IE to access that URL again to see if the problem still
exists.
> >
> > If this issue persists, please help to gather the following information:
> >
> > 1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out
the
> > steps how you did that? Do you mean that you disabled HTTP Filter under
> > Internet Security & Acceleration Server
> > 2004\Yourserver\Configuration\Add-in?
> >
> > 2. Are there any error messages in the System event log and the
Application
> > event log? Please export the events into .evt files and then send to
you.
> >
> > I am greatly appreciated your time and cooperation. If anything unclear,
> > please let me know.
> >
> > I am looking forward to hearing from you!
> > Best regards,
> > Brandy Nee
> > Microsoft CSS Online Newsgroup Support
> > Get Secure! - www
> > .microsoft.com/security
> > =====================================================
> > When responding to posts, please "Reply to Group" via your newsreader so
> > that others may learn and benefit from your issue.
> > =====================================================
> > This posting is provided "AS IS" with no warranties, and confers no
rights
> >
> >
> > .
> >
> > Reply
> >
> > clevere Jun 8, 4:20 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
> > Date: Wed, 8 Jun 2005 01:20:27 -0700
> > Local: Wed,Jun 8 2005 4:20 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hi Brandy-
> > Alright, this is odd.
> >
> > I had to re-enable Web Proxy, for my network (I turned it off). I did
they
> > by Going to the ISA manager, clicking in Networks, right-clicking on the
> > Internal network, and disabling Web Proxy.
> >
> > With the web proxy enabled, I disabled the firewall client, and put in
IE to
> > use my server, at port 8080 for the proxy server.
> >
> > I was unable to access the website in question. I turned on the Firewall
> > Client, told IE to just "Auto matically detect connection settings" (so
that
> > it no longer used Proxy Server), and I could access the web site.
> >
> > With the "Web Proxy" running, some sites seem to be having problems
loading,
> > but that could be because SBS is doing it's mid-week backup. This I can
> > continue to test, I'll leave the Web Proxy turned on for now, and see
how it
> > performs during the day.
> >
> > As far as IE goes, shouldn't I be able to tell it to use this proxy
server,
> > and be good to go? Do you need any logs?
> >
> > There are no event ID's in the event viewer.
> >
> > ""Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:EjsQUMoaFHA.3336@xxxxxxxxxxxxxxxxxxxxxxxx
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>Hello Clevere,
> >
> >
> >>Thank you for posting back.
> >
> >
> >>I have received your logs. Please be patient that I am doing researching
> >>on
> >>your issue now. To better filter your issue, I would like to know what
> >>exactly the URL you failed to access. Can you please paste the URL link
to
> >>my email address?
> >
> >
> >>Thanks for your cooperation and time. I am looking forward to hearing
from
> >>you.
> >
> >
> >>Best regards,
> >
> >
> >>Brandy Nee
> >
> >
> >>Microsoft CSS Online Newsgroup Support
> >
> >
> >>Get Secure! - www.microsoft.com/security
> >
> >
> >>=====================================================
> >>When responding to posts, please "Reply to Group" via your newsreader so
> >>that others may learn and benefit from your issue.
> >>=====================================================
> >
> >
> >>This posting is provided "AS IS" with no warranties, and confers no
> >>rights.
> >
> >
> >
> > Reply
> >
> > "Brandy Nee [MSFT]" Jun 9, 7:19 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: v-bra...@xxxxxxxxxxxxxxxxxxxx ("Brandy Nee [MSFT]") - Find
messages by
> > this author
> > Date: Thu, 09 Jun 2005 11:19:41 GMT
> > Local: Thurs,Jun 9 2005 7:19 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hello Clever,
> >
> > Thank you for posting back.
> >
> > Please see my information below:
> >
> > 1. If you disabled the Web Proxy, whatever you enabled "Automatically
> > detect connection settings", IE will not directly pass the request to
the
> > ISA. Instead, the Firewall Client will pass the IE requests to the ISA
so
> > it works.
> >
> > 2. To use "Automatically detect connection settings", we need to enable
> > WPAD on the ISA. Please See:
> >
> > 309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
> > Windows 2000
> > http://support.microsoft.com/?id=309814
> >
> > 816320 How to configure firewall and Web proxy client Autodiscovery in
> > Windows Server 2003
> > http://support.microsoft.com/?id=816320
> >
> > Configuring DHCP and DNS for ISA automatic discovery
> >
http://www.isaserver.org/tutorials/Configuring-DHCP-DNS-automatic-dis....
> > html
> >
> > We need to configure either on DHCP or on DNS for the WPAD record. For
the
> > DHCP way, we do not recommend do that since there are many known issues.
> > For the DNS way, it needs to use the port 80 on the internal NIC.
However,
> > since the services on the SBS needs the port 80 on the internal NIC, we
are
> > unable to use DNS to configure WPAD.
> >
> > As a conclusion, we are unable to enable "Automatically detect
connection
> > settings" in a SBS environment. If you really want to do that, you must
use
> > the DHCP way.
> >
> > 3. In your scenario, you should always manually set SBS' internal NIC as
> > the proxy in Internet options instead of enabling "Automatically detect
> > connection settings"
> >
> > Hope the information helps. If anything is
> >
> > unclear, please let me know. I
> > am looking forward to hearing from you
> > Best regards,
> > Brandy Nee
> > Microsoft CSS Online Newsgroup Support
> > Get Secure! - www
> > .microsoft.com/security
> > =====================================================
> > When responding to posts, please "Reply to Group" via your newsreader so
> > that others may learn and benefit from your issue.
> > =====================================================
> > This posting is provided "AS IS" with no warranties, and confers no
rights
> >
> >
> > .
> >
> > Reply
> >
> > clevere Jun 9, 1:20 pm show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
> > Date: Thu, 9 Jun 2005 10:20:15 -0700
> > Local: Thurs,Jun 9 2005 1:20 pm
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > I'm afraid you misunderstood what I was saying. I was doing what you
> > recommended:
> >
> > I have received your email. After a long time research on your logs, I
> > found there are some errors occur when the Firewall Clients pass the
> > authentication to the ISA. Please try the following steps:
> > 1. On the problematic client, temporarily disable the Firewall Client
> >
> >
> > .
> >
> > Done
> >
> > 2. Close all IE windows.
> >
> > Done
> >
> > 3. Open Internet Options | Connections tab | LAN Settings button,
configure
> > the ISA's internal NIC as the proxy
> >
> >
> > .
> >
> > Did that.
> >
> > 4. Launch IE to access that URL again to see if the problem still exists
> >
> >
> > .
> > Yes, the problem presists.
> >
> > If this issue persists, please help to gather the following information:
> > 1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out
the
> > steps how you did that? Do you mean that you disabled HTTP Filter under
> > Internet Security & Acceleration Server
> > 2004\Yourserver\Configuration\Add-in
> >
> >
> > ?
> >
> > No, I disabled Web Proxy under ISA
> > 2004\Myserver\Configuration\Network\Internal Network\Properties\Web
Proxy
> >
> > 2. Are there any error messages in the System event log and the
Application
> > event log? Please export the events into .evt files and then send to you
> >
> >
> > .
> >
> > No, there are none.
> >
> > Does that make more sense? I had to re-enable the Web Proxy for the
internal
> > network in ISA to do the testing you asked, Because I had turned it off.
> > After I turned it OFF, I could no longer use "Use this Proxy Server" in
IE,
> > because the proxy server was turned off. So I had to reconfigure IE to
just
> > Automatically detect the settings, so it would work with the web Proxy
> > turned off.
> >
> > Does that make sense?
> >
> > ""Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:WtYxiUObFHA.2184@xxxxxxxxxxxxxxxxxxxxxxxx
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>Hello Clever,
> >
> >
> >>Thank you for posting back.
> >
> >
> >>Please see my information below:
> >
> >
> >>1. If you disabled the Web Proxy, whatever you enabled "Automatically
> >>detect connection settings", IE will not directly pass the request to
the
> >>ISA. Instead, the Firewall Client will pass the IE requests to the ISA
so
> >>it works.
> >
> >
> >>2. To use "Automatically detect connection settings", we need to enable
> >>WPAD on the ISA. Please See:
> >
> >
> >>309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
> >>Windows 2000
> >>http://support.microsoft.com/?id=309814
> >
> >
> >>816320 How to configure firewall and Web proxy client Autodiscovery in
> >>Windows Server 2003
> >>http://support.microsoft.com/?id=816320
> >
> >
> >>Configuring DHCP and DNS for ISA automatic discovery
> >
> >
> >
http://www.isaserver.org/tutorials/Configuring-DHCP-DNS-automatic-dis....
> >
> >>html
> >
> >
> >>We need to configure either on DHCP or on DNS for the WPAD record. For
the
> >>DHCP way, we do not recommend do that since there are many known issues.
> >>For the DNS way, it needs to use the port 80 on the internal NIC.
However,
> >>since the services on the SBS needs the port 80 on the internal NIC, we
> >
> > are
> >
> >>unable to use DNS to configure WPAD.
> >
> >
> >>As a conclusion, we are unable to enable "Automatically detect
connection
> >>settings" in a SBS environment. If you really want to do that, you must
> >
> > use
> >
> >>the DHCP way.
> >
> >
> >>3. In your scenario, you should always manually set SBS' internal NIC as
> >>the proxy in Internet options instead of enabling "Automatically detect
> >>connection settings"
> >
> >
> >>Hope the information helps. If anything is unclear, please let me know.
I
> >>am looking forward to hearing from you
> >
> >
> >>Best regards,
> >
> >
> >>Brandy Nee
> >
> >
> >>Microsoft CSS Online Newsgroup Support
> >
> >
> >>Get Secure! - www.microsoft.com/security
> >
> >
> >>=====================================================
> >>When responding to posts, please "Reply to Group" via your newsreader so
> >>that others may learn and benefit from your issue.
> >>=====================================================
> >
> >
> >>This posting is provided "AS IS" with no warranties, and confers no
> >
> > rights
> >
> >
> > .
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >
> > Reply
> >
> > clevere Jun 13, 10:43 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@xxxxxxxxx> - Find messages by this author
> > Date: Mon, 13 Jun 2005 07:43:13 -0700
> > Local: Mon,Jun 13 2005 10:43 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > I'm afraid you misunderstood what I was saying. I was doing what you
> > recommended
> >
> >
> > , and your answers are below:
> >
> > - Hide quoted text -
> > - Show quoted text -
> > I have received your email. After a long time research on your logs
> > , I
> > found
> > there
> > are
> > some
> > errors
> > occur
> > when
> > the
> > Firewall
> > Clients
> > pass
> > the
> > authentication
> > to
> > the
> > ISA
> > . Please
> > try
> > the
> > following
> > steps
> > :
> > 1
> > . On
> > the
> > problematic
> > client
> > , temporarily
> > disable
> > the
> > Firewall
> > Client
> > .
> > Done
> > 2. Close all IE windows.
> > Done
> > 3. Open Internet Options | Connections tab | LAN Settings button,
configure
> > the ISA's
> > internal
> > NIC
> > as
> > the
> > proxy
> > .
> > Did that.
> > 4. Launch IE to access that URL again to see if the
> > problem
> > still
> > exists
> > .
> > Yes, the problem presists.
> > If this issue persists, please help to gather the following information:
> > 1
> > . You
> > mentioned
> > "disable
> > ISA
> > 2004's
> > Web
> > Proxy
> > ". Please
> > fully
> > give
> > out
> > the
> > steps
> > how
> > you
> > did
> > that
> > ? Do
> > you
> > mean
> > that
> > you
> > disabled
> > HTTP
> > Filter
> > under
> > Internet
> > Security
> > & Acceleration
> > Server
> > 2004
> > \Yourserver
> > \Configuration
> > \Add
> > -in
> > ?
> > No, I disabled Web Proxy under ISA
> > 2004\Myserver\Configuration\Network\Internal Network\Properties\Web
Proxy
> > 2. Are there any error messages in the System event log and
> > the
> > Application
> > event
> > log
> > ? Please
> > export
> > the
> > events
> > into
> > .evt
> > files
> > and
> > then
> > send
> > to
> > you
> > .
> > No, there are none.
> > Does that make more sense? I had to re-enable the Web Proxy for the
internal
> > network in ISA to do the testing you asked, Because I had turned it off.
> > After I turned it OFF, I could no longer use "Use this Proxy Server" in
IE,
> > because the proxy server was turned off. So I had to reconfigure IE to
just
> > Automatically detect the settings, so it would work with the web Proxy
> > turned off.
> > Does that make sense?
> > ""Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:WtYxiUObFHA.2184@xxxxxxxxxxxxxxxxxxxxxxxx
> >
> >>Hello Clever,
> >
> >
> >>Thank you for posting back.
> >
> >
> >>Please see my information below:
> >
> >
> >>1. If you disabled the Web Proxy, whatever you enabled "Automatically
> >>detect connection settings", IE will not directly pass the request to
the
> >>ISA. Instead, the Firewall Client will pass the IE requests to the ISA
so
> >>it works.
> >
> >
> >>2. To use "Automatically detect connection settings", we need to enable
> >>WPAD on the ISA. Please See:
> >
> >
> >>309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
> >>Windows 2000
> >>http://support.microsoft.com/?id=309814
> >
> >
> >>816320 How to configure firewall and Web proxy client Autodiscovery in
> >>Windows Server 2003
> >>http://support.microsoft.com/?id=816320
> >
> >
> >>Configuring DHCP and DNS for ISA automatic discovery
> >
> >
> > http
> > ://www
> > .isaserver
> > .org
> > /tutorials
> > /Configuring
> > -DHCP
> > -DNS
> > -automatic
> > -discovery
> > .
> >
> >>html
> >
> >
> >>We need to configure either on DHCP or on DNS for the WPAD record. For
the
> >>DHCP way, we do not recommend do that since there are many known issues.
> >>For the DNS way, it needs to use the port 80 on the internal NIC.
However,
> >>since the services on the SBS needs the port 80 on the internal NIC, we
> >
> > are
> >
> >>unable to use DNS to configure WPAD.
> >
> >
> >>As a conclusion, we are unable to enable "Automatically detect
connection
> >>settings" in a SBS environment. If you really want to do that, you must
> >
> > use
> >
> >>the DHCP way.
> >
> >
> >>3. In your scenario, you should always manually set SBS' internal NIC as
> >>the proxy in Internet options instead of enabling "Automatically detect
> >>connection settings"
> >
> >
> >>Hope the information helps. If anything is unclear, please let me know.
I
> >>am looking forward to hearing from you
> >
> >
> >>Best regards,
> >
> >
> >>Brandy Nee
> >
> >
> >>Microsoft CSS Online Newsgroup Support
> >
> >
> >>Get Secure! - www.microsoft.com/security
> >
> >
> >>=====================================================
> >>When responding to posts, please "Reply to Group" via your newsreader so
> >>that others may learn and benefit from your issue.
> >>=====================================================
> >
> >
> >>This posting is provided "AS IS" with no warranties, and confers no
> >
> > rights
> >
> >
> > .
> >
> > "clevere" <n...@xxxxxxxxx> wrote in message
> >
> >
> > news:uEBdCeRbFHA.584@xxxxxxxxxxxxxxxxxxxxxxx
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>I'm afraid you misunderstood what I was saying. I was doing what you
> >>recommended:
> >
> >
> >>I have received your email. After a long time research on your logs, I
> >>found there are some errors occur when the Firewall Clients pass the
> >>authentication to the ISA. Please try the following steps:
> >
> >
> >>1. On the problematic client, temporarily disable the Firewall Client.
> >
> >
> >>Done
> >
> >
> >>2. Close all IE windows.
> >
> >
> >>Done
> >
> >
> >>3. Open Internet Options | Connections tab | LAN Settings button,
> >
> > configure
> >
> >>the ISA's internal NIC as the proxy.
> >
> >
> >>Did that.
> >
> >
> >>4. Launch IE to access that URL again to see if the problem still
exists.
> >>Yes, the problem presists.
> >
> >
> >>If this issue persists, please help to gather the following information:
> >
> >
> >>1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out
the
> >>steps how you did that? Do you mean that you disabled HTTP Filter under
> >>Internet Security & Acceleration Server
> >>2004\Yourserver\Configuration\Add-in?
> >
> >
> >>No, I disabled Web Proxy under ISA
> >>2004\Myserver\Configuration\Network\Internal Network\Properties\Web
Proxy
> >
> >
> >>2. Are there any error messages in the System event log and the
> >
> > Application
> >
> >>event log? Please export the events into .evt files and then send to
you.
> >
> >
> >>No, there are none.
> >
> >
> >>Does that make more sense? I had to re-enable the Web Proxy for the
> >
> > internal
> >
> >>network in ISA to do the testing you asked, Because I had turned it off.
> >>After I turned it OFF, I could no longer use "Use this Proxy Server" in
> >
> > IE,
> >
> >>because the proxy server was turned off. So I had to reconfigure IE to
> >
> > just
> >
> >>Automatically detect the settings, so it would work with the web Proxy
> >>turned off.
> >
> >
> >>Does that make sense?
> >
> >
> >>""Brandy Nee [MSFT]"" <v-bra...@xxxxxxxxxxxxxxxxxxxx> wrote in message
> >>news:WtYxiUObFHA.2184@xxxxxxxxxxxxxxxxxxxxxxxx
> >>
> >>>Hello Clever,
> >
> >
> >>>Thank you for posting back.
> >
> >
> >>>Please see my information below:
> >
> >
> >>>1. If you disabled the Web Proxy, whatever you enabled "Automatically
> >>>detect connection settings", IE will not directly pass the request to
> >
> > the
> >
> >>>ISA. Instead, the Firewall Client will pass the IE requests to the ISA
> >
> > so
> >
> >>>it works.
> >
> >
> >>>2. To use "Automatically detect connection settings", we need to enable
> >>>WPAD on the ISA. Please See:
> >
> >
> >>>309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
> >>>Windows 2000
> >>>http://support.microsoft.com/?id=309814
> >
> >
> >>>816320 How to configure firewall and Web proxy client Autodiscovery in
> >>>Windows Server 2003
> >>>http://support.microsoft.com/?id=816320
> >
> >
> >>>Configuring DHCP and DNS for ISA automatic discovery
> >
> >
> >
> >
http://www.isaserver.org/tutorials/Configuring-DHCP-DNS-automatic-dis....
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>>html
> >
> >
> >>>We need to configure either on DHCP or on DNS for the WPAD record. For
> >
> > the
> >
> >>>DHCP way, we do not recommend do that since there are many known
issues.
> >>>For the DNS way, it needs to use the port 80 on the internal NIC.
> >
> > However,
> >
> >>>since the services on the SBS needs the port 80 on the internal NIC, we
> >>
> >>are
> >>
> >>>unable to use DNS to configure WPAD.
> >
> >
> >>>As a conclusion, we are unable to enable "Automatically detect
> >
> > connection
> >
> >>>settings" in a SBS environment. If you really want to do that, you must
> >>
> >>use
> >>
> >>>the DHCP way.
> >
> >
> >>>3. In your scenario, you should always manually set SBS' internal NIC
as
> >>>the proxy in Internet options instead of enabling "Automatically detect
> >>>connection settings"
> >
> >
> >>>Hope the information helps. If anything is unclear, please let me know.
> >
> > I
> >
> >>>am looking forward to hearing from you
> >
> >
> >>>Best regards,
> >
> >
> >>>Brandy Nee
> >
> >
> >>>Microsoft CSS Online Newsgroup Support
> >
> >
> >>>Get Secure! - www.microsoft.com/security
> >
> >
> >>>=====================================================
> >>>When responding to posts, please "Reply to Group" via your newsreader
so
> >>>that others may learn and benefit from your issue.
> >>>=====================================================
> >
> >
> >>>This posting is provided "AS IS" with no warranties, and confers no
> >>
> >>rights.
> >
> >
> >
> > Reply
> >
> >
.
- References:
- REPOST: Firewall Client Disconnects
- From: clevere
- Re: REPOST: Firewall Client Disconnects
- From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
- REPOST: Firewall Client Disconnects
- Prev by Date: Re: ISA 2004 SQL instance eating RAM and increasing
- Next by Date: Re: Problem With Windows Backup software
- Previous by thread: Re: REPOST: Firewall Client Disconnects
- Next by thread: Re: REPOST: Firewall Client Disconnects
- Index(es):
Relevant Pages
|
