RE: http://companyweb /remote /backup /Monitoring HELP



Hi Mark,

Thanks for your update!

Please help me collect some information to isolate the issue:

1. How many network cards in your SBS server?

2. Have you installed router? And does it act as firewall? If so, please
contact your router vendor or follow the router user specifications to
configure and open port 80, 443 and 444 in the router.

If there is a hardware firewall or router between the external network
adapter of the SBS 2003 computer and the Internet, we should have the
routers allow traffic to pass through TCP port 80, 443 , 444 and support
protocol type 47. Protocol type 47 is the Generic Routing Encapsulation
(GRE) protocol.

If there is a hardware firewall or router, you will not see the firewall
page when you run CEICW. You must manually open that port in hardware
firewall.

3. What is your network physical topology?

4. Have you install ISA? What is the version? ISA 2000 or ISA 2004?

Please find your network scenario in the following KB article and follow
the guide to configure network connection.
825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

Generally you need open the ports as needed in the router.

You can refer to the following list, but it depends on your request.

TCP port Definition
25 Email (SMTP)
80 required for HTTP
requests for your site
443 required for HTTPS
requests using SSL, which secures communications from your server and a Web
browser
444 Companyweb
4125 Remote Web Workplace
1723 (plus GRE Protocol 47) VPN
3389 Terminal Services
21 FTP

You can refer to the following link to configure your network:
http://www.smallbizserver.net/Default.aspx?tabid=151

I appreciate your time and efforts to perform test. I am currently standing
by for you about the test result. I am always happy to be of further
assistance.

Have a nice day!

Best Regards,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Thread-Topic: http://companyweb /remote /backup /Monitoring HELP
>thread-index: AcWopOlYoxqVe3LiTwGUhwfbePRZ8g==
>X-WBNR-Posting-Host: 66.11.8.174
>From: "=?Utf-8?B?TWFyaw==?=" <Mark@xxxxxxxxxxxxxxxxxxxxxxxxx>
>References: <20BB0B57-3C76-4516-ACBD-734B97D64039@xxxxxxxxxxxxx>
<cdz4#TLpFHA.3472@xxxxxxxxxxxxxxxxxxxxx>
<750F9E20-D9FC-460F-B922-028271A5BF7F@xxxxxxxxxxxxx>
<Co4rSA5pFHA.2152@xxxxxxxxxxxxxxxxxxxxx>
>Subject: RE: http://companyweb /remote /backup /Monitoring HELP
>Date: Wed, 24 Aug 2005 05:11:09 -0700
>Lines: 308
>Message-ID: <19F9E960-711D-4415-8E12-DAC60FF81E55@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:147330
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Jenny,
>
>There is no option for firewall settings.. it asks me for my connection
type
>I choose do not modify and then it goes directly to the page where it asks
>about which webs are going to be accessible.
>
>""Jenny wu [MSFT]"" wrote:
>
>> Hi Mark,
>>
>> Thanks for your update!
>>
>> I am sorry for the delayed response due to weekend. Please understand
that
>> the newsgroups are staffed weekdays by Microsoft Support professionals
to
>> answer your systems and applications questions. Your understanding is
>> greatly appreciated!
>>
>> When you run CEICW (email and internet connection wizard), on the
Firewall
>> page please select "Enable firewall" and click Next to follow the guide
to
>> finish configuration. The enable firewall action will launch some
>> operations that SBS do automatically according to your scenario. Please
>> read the KB article, it is give a detail description about CEICW:
>>
>> 825763 How to configure Internet access in Windows Small Business Server
>> 2003
>> http://support.microsoft.com/?id=825763
>>
>> Please kindly perform some tests to collect some information and
isolate
>> the issue:
>>
>> We also performed some other tests based on the FQDN wdmcxxxx.com and
the
>> following is the test results:
>>
>> 1. Pinging FDQN, what is IP address returned?
>>
>> 2. Telnet FQDN or IP address on port 80, 443, 444, how about the result?
If
>> some fail, which means that the router cannot forward the port xxx
traffic
>> to the internal SBS server or the xxx port is blocked.
>>
>> 3. How many NICs are installed on the SBS server, 1 or 2?
>>
>> 4. Is ISA installed and enabled on the server? Which version? ISA 2004
or
>> ISA 2000. If not, do you use RRAS as the Basic Firewall or just use a
>> hardware route/firewall (which is in front of the SBS server)?
>>
>> 5. In the SBS Lan network, can you access the RWW by using
http://''Server
>> Netbios name''/remote?
>>
>> 6. On the SBS server, please open https://localhost/remote, could you
visit
>> the remote site?
>>
>> I appreciate your time and effort to perform test. I am looking forward
to
>> you!
>>
>> Have a nice day!
>>
>> Best Regards,
>>
>> Jenny Wu
>> Microsoft CSS Online Newsgroup Support
>> Get Secure! - www.microsoft.com/security
>> ======================================================
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
the
>> "Notify me of replies" box to receive e-mail notifications when there
are
>> any updates in your thread. When responding to posts via your
newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly.
Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ======================================================
>> This posting is provided "AS IS" with no warranties, and confers no
rights.
>>
>> --------------------
>> >Thread-Topic: http://companyweb /remote /backup /Monitoring HELP
>> >thread-index: AcWl34F5EfZlUJrXQ72gP9jsxxxsjw==
>> >X-WBNR-Posting-Host: 68.15.149.204
>> >From: "=?Utf-8?B?TWFyaw==?=" <Mark@xxxxxxxxxxxxxxxxxxxxxxxxx>
>> >References: <20BB0B57-3C76-4516-ACBD-734B97D64039@xxxxxxxxxxxxx>
>> <cdz4#TLpFHA.3472@xxxxxxxxxxxxxxxxxxxxx>
>> >Subject: RE: http://companyweb /remote /backup /Monitoring HELP
>> >Date: Sat, 20 Aug 2005 16:33:02 -0700
>> >Lines: 157
>> >Message-ID: <750F9E20-D9FC-460F-B922-028271A5BF7F@xxxxxxxxxxxxx>
>> >MIME-Version: 1.0
>> >Content-Type: text/plain;
>> > charset="Utf-8"
>> >Content-Transfer-Encoding: 7bit
>> >X-Newsreader: Microsoft CDO for Windows 2000
>> >Content-Class: urn:content-classes:message
>> >Importance: normal
>> >Priority: normal
>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >Newsgroups: microsoft.public.windows.server.sbs
>> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
>> >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:146290
>> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >
>> >Jenny,
>> >
>> >I appreicate the help. However, the solutions you provided did not
>> resolve
>> >the issue. I reran the email and internet connection wizard. I was
NOT
>> able
>> >to connect to http://localhost/Remote or http://FQDN/remote.
>> > One thing that might be of interest to you is that when i ran the
>> connect
>> >to internet and email wizard I was not prompted about the firewall like
>> your
>> >post and many others I have read. However it does try to configure it
and
>> it
>> >always fails. HOwever it does continue through with every thing else
>> fine.
>> >Do you have any other suggestions for getting this to work? Right now
it
>> >gives a http: 403 error You are not authorized to view this page. I
>> would
>> >appreicate any assistance with you can offer.
>> >
>> >
>> >
>> >
>> >""Jenny wu [MSFT]"" wrote:
>> >
>> >> Hi Mark,
>> >>
>> >> Thanks for posting here!
>> >>
>> >> For your description, I understand that you got the 403 error when
you
>> >> access http://Companyweb/remote. If I am off base, please don't
hesitate
>> to
>> >> let me know.
>> >>
>> >> If ISA installed
>> >>
>> >> This issue can occur if the URL you use in the Web browser to access
>> >> companyweb, RWW and other web sites that does not match the name in
ISA
>> >> server web publishing rules. To resolve this issue, we must run CEICW
>> and
>> >> specify the FQDN that you will use to access the sites as the web
server
>> >> certificate. To do so:
>> >>
>> >> 1. On the SBS 2003 Server open the Server Management console. Go to
>> >> Standard Management\To Do List.
>> >>
>> >> 2. Click the "Connect to the Internet" link.
>> >>
>> >> 3. Choose not to change the connection type and click Next. On the
>> Firewall
>> >> page, select "Enable firewall" and click Next (I suppose you have 2
>> network
>> >> adapters in SBS 2003).
>> >>
>> >> 4. On the "Services Configuration" page, select all the items and
then
>> >> click Next.
>> >>
>> >> 5. On the "Web Services Configuration" page, make sure "Allow access
to
>> the
>> >> entire Web site from the Internet" is selected. If you select "Allow
>> access
>> >> to only the following Web site services from the Internet", make sure
>> the
>> >> corresponding web site items are selected. Click Next.
>> >>
>> >> 6. On the "Web Server Certificate" page, choose to create a new Web
>> server
>> >> certificate and then type the public FQDN that you will use to access
>> the
>> >> websites (for example, if your public FQDN that you use to access the
>> sites
>> >> is www.domain.com, you should type www.domain.com as the new
certificate
>> >> name). If you already requested a certificate with the name
>> >> "www.domain.com" from a third party CA, you can choose "Use a Web
server
>> >> certificate from a trusted authority" and then import the
certificate.
>> >>
>> >> 7. Go through the remaining steps. The wizard will automatically
>> configure
>> >> the SBS 2003 Basic Firewall to securely publish the websites.
>> >>
>> >> 8. If you have a router or hardware firewall, configure it to forward
>> >> inbound traffic on TCP port 80, 443 and 444 to the SBS server's
external
>> >> address.
>> >>
>> >> You can refer to the following KB article to configure network
>> connection:
>> >>
>> >> 825763 How to configure Internet access in Windows Small Business
Server
>> >> 2003
>> >> http://support.microsoft.com/?id=825763
>> >>
>> >> If this issue still cannot be resolved, I would like to collect
>> following
>> >> information for further troubleshooting.
>> >>
>> >> 1. On the SBS server, please open https://localhost/remote and so on,
>> could
>> >> you visit the remote site?
>> >>
>> >> 2. Could you access the remote web workplace from the internal
clients?
>> >>
>> >> 3. Please try to access the RWW from the internet client and then,
>> please
>> >> capture a screenshot of the error message, so that I can have a clear
>> idea
>> >> of the error. Note: please ensure that you have disable "Show
friendly
>> HTTP
>> >> error message" in the Advanced tab of IE option on the client
>> workstation.
>> >> 4. Can you find any error event log in Event viewer? If so, please
paste
>> me
>> >> the accurate error log in the newsgroup.
>> >>
>> >> I appreciate you time and effort. I am currently standing by for you
>> about
>> >> the test result. I am always happy to be of further assistance.
>> >>
>> >> Have a nice day!
>> >>
>> >> Best Regards,
>> >>
>> >> Jenny Wu
>> >> Microsoft CSS Online Newsgroup Support
>> >> Get Secure! - www.microsoft.com/security
>> >> ======================================================
>> >> This newsgroup only focuses on SBS technical issues. If you have
issues
>> >> regarding other Microsoft products, you'd better post in the
>> corresponding
>> >> newsgroups so that they can be resolved in an efficient and timely
>> manner.
>> >> You can locate the newsgroup here:
>> >> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>> >>
>> >> When opening a new thread via the web interface, we recommend you
check
>> the
>> >> "Notify me of replies" box to receive e-mail notifications when there
>> are
>> >> any updates in your thread. When responding to posts via your
>> newsreader,
>> >> please "Reply to Group" so that others may learn and benefit from
your
>> >> issue.
>> >>
>> >> Microsoft engineers can only focus on one issue per thread. Although
we
>> >> provide other information for your reference, we recommend you post
>> >> different incidents in different threads to keep the thread clean. In
>> doing
>> >> so, it will ensure your issues are resolved in a timely manner.
>> >>
>> >> For urgent issues, you may want to contact Microsoft CSS directly.
>> Please
>> >> check http://support.microsoft.com for regional support phone numbers.
>> >>
>> >> Any input or comments in this thread are highly appreciated.
>> >> ======================================================
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> >>
>> >> --------------------
>> >> >Thread-Topic: http://companyweb /remote /backup /Monitoring HELP
>> >> >thread-index: AcWj6kYaoFh9rXgcSkSsj80EhQRvAw==
>> >> >X-WBNR-Posting-Host: 66.11.8.174
>> >> >From: "=?Utf-8?B?TWFyaw==?=" <Mark@xxxxxxxxxxxxxxxxxxxxxxxxx>
>> >> >Subject: http://companyweb /remote /backup /Monitoring HELP
>> >> >Date: Thu, 18 Aug 2005 04:45:04 -0700
>> >> >Lines: 7
>> >> >Message-ID: <20BB0B57-3C76-4516-ACBD-734B97D64039@xxxxxxxxxxxxx>
>> >> >MIME-Version: 1.0
>> >> >Content-Type: text/plain;
>> >> > charset="Utf-8"
>> >> >Content-Transfer-Encoding: 7bit
>> >> >X-Newsreader: Microsoft CDO for Windows 2000
>> >> >Content-Class: urn:content-classes:message
>> >> >Importance: normal
>> >> >Priority: normal
>> >> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >> >Newsgroups: microsoft.public.windows.server.sbs
>> >> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >> >Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>> >> >Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.sbs:145495
>> >> >X-Tomcat-NG: microsoft.public.windows.server.sbs
>> >> >
>> >> >I have been having all kinds of problems with the companyweb.
>> >> >
>> >> >I can gain access to the companyweb through the FDQN and the
IPADDRESS.
>>
>> >> >However, when I try to go into one of the areas that use ASP.NET
like
>> >> /Remote
>> >> >or /Monitoring I get a 403 error. Does anyone have any suggestions?
>> >> >
>> >> >
>> >> >
>> >>
>> >>
>> >
>>
>>
>

.



Relevant Pages

  • Re: How do I turn off SP2 firewal Group Policy setting
    ... firewall setting on the server side, it is a client side policy, you do not ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Did that turn off the windows firewall on the server too? ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN disconnection
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... <I have disabled the router firewall on the client side (including DDOS ...
    (microsoft.public.windows.server.sbs)
  • Re: Firewall on Clients
    ... thanks for using SBS newsgroup. ... Microsoft CSS Online Newsgroup Support ... |> Can I assume you are referring to the Windows Firewall on the XP SP2 ... |> client computers. ...
    (microsoft.public.windows.server.sbs)
  • RE: Internet and remote access
    ... example, Remote Desktop, RWW, VPN, etc? ... and paste the full result the Newsgroup. ... Since there is a router installed in front of the SBS server, ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: External Access to Companyweb Fails
    ... issue may be caused by the incorrect time zone on router and it may prevent ... thank you for using Microsoft newsgroup. ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)

Loading