RE: Proxy Server in SBS 2000

Hello Customer,

Thank you for posting here.

From your post, I understand that the internal client can't access web
sites through port 443. If I am off base, please feel free to let me know.

I understand you have already run the ICW Wizard, however, to ensure the
network is correctly configured, I would like to suggest you refer to this
step-by-step article to rerun this wizard:

How to Configure Small Business Server for Full Time Internet Access with
Two Network Adapters
http://support.microsoft.com/kb/306802/en-us

If you install ISA 2000 on the SBS 2000 server, you should ensure the
client have correct proxy configuration:

Please open IE on workstations, click Tools->Internet Options, and click
Connections->LAN Settings, tick the Use proxy server for your LAN, and then
fill in SBS internal IP address and port 8080( by default)

If the issue persists, please kindly help me collect some information for
further investigation:

1. What IP address and port do you specify in client IE's proxy box?

2. Is ISA 2000 installed on the SBS Server?

3. What detail error message do you receive when the clients fail to access
the HTTPS site?

4. Does the problem occur on all Internet SSL websites? What about
https://www.microsoft.com?

5. Post Please send me the output of the ipconfig/all from the client
computer and SBS server.

6. Help to gather the ISAinfo:
You can download this utility from:
http://www.isatools.org/isainfo.vbe
Run it on the ISA server. Then attach the ISAINFO report to me at your
earliest convenience.

You can send ISAinfo and ISA logs directly to my mailbox:
v-terliu@xxxxxxxxxxxxx

7. Please help to gather the ISA Logs:

1) Open ISA Management, and then point to Monitoring Configuration | Logs

2) Double click ISA Server Firewall Service in the right pane, click to
select Enable Logging for this service, click Fields tab, click Select All,
and then click OK.

3) Please repeat Step 2) to enable logging IP Packet Filter and Web Proxy
Services.

4) Run command "net stop isactrl" (without the quotation marks) to stop all
ISA Services.

5) Backup all files in the folder C:\Program Files\Microsoft ISA
Server\ISALogs, and then delete them.

6) In ISA Management | <server name> | Monitoring | Services, start all ISA
services.

7) Reproduce the issue.

8) Wait for about 3 minutes, and then send me that day's firewall, web
proxy and IP Packet filter log in C:\Program Files\Microsoft ISA
Server\ISALogs. You can compress logs into .zip file.

Firewall log: FWSEXTDyyyymmdd.log
Web Proxy log: WEBEXTDyyyymmdd.log
IP Packet Filter log: IPPEXTDyyyymmdd.log

Please also let me know the IP address of the testing client.

Hope these steps will give you some help. Please let me know the results so
that I can provide further assistance on this problem. I am looking forward
to your reply. Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Proxy Server in SBS 2000
| thread-index: AccCgbs6C/p+STwXSv22IMMVOnmDFg==
| X-WBNR-Posting-Host: 89.241.24.144
| From: =?Utf-8?B?TWF1cmljZURTdGFudG9u?=
<MauriceDStanton@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: Proxy Server in SBS 2000
| Date: Tue, 7 Nov 2006 07:31:01 -0800
| Lines: 14
| Message-ID: <81254293-DC6B-41D5-A6A3-406BFD12CBD8@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGXA01.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:310899
| NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| I changed the ISP of a SBS 2000 server recently. Once I got the ICW
sorted
| out, all went OK except for opening web sites that flow through Port 443.
I
| felt that this was probably due to the Proxy Server, which was set up by
| somebody else before I took responsibility for the server.
|
| I felt that if I stopped the Proxy Server by unticking it in the LAN
| Settings under Connections in the Internet Properties, that would solve
the
| problem. However, that made matters worse because then no web sites
would
| open, regardless of the Port.
|
| Can anybody advise me how I can change the ISP setting in the Proxy
Server
| from the old broadband ISP to the new ISP.
|
| Thanks for any help.
|

.

Relevant Pages

  • RE: ISA access rules, help
    ... please let me know whether you're using ISA 2000 or ISA 2004 ... (SBS SP0 or SBS SP1). ... the ISA server will not be used as a proxy server. ... Since SBS already used port 80, ...
    (microsoft.public.windows.server.sbs)
  • RE: Remote Web Workplace not completely working.
    ... In order to allow a remote desktop connection to a client computer through ... TS requests through a firewall on TCP port 4125, ... To open the port 4125 on ISA, we can re-run CEICW to confirm it. ... server certificate) and then click Next. ...
    (microsoft.public.windows.server.sbs)
  • RE: How to add a Citrix Server
    ... ISA about the second address (how do I attach a second IP address to the NIC ... the ISA server to handle the incoming traffic that needs to go to the Citrix ... How would I forward the traffic coming in on the new port to port ... that the newsgroups are staffed weekdays by Microsoft Support professionals ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA 2004 & companyweb
    ... Server, the traffic will still be handled by the ISA Server because the ... "Bypass proxy server for local addresses" option is disabled, ...
    (microsoft.public.windows.server.sbs)
  • Re: HTTPS Using Web Proxy
    ... The ISA log displays the following on the error. ... HTTP Method = ... I created a HTPPS 444 protocol set to TCP port 444 and assigned it to my ... At first I was getting a error code: 502 Proxy Error and fixed that by ...
    (microsoft.public.isa)
Loading