Re: How to allow POP3 SSL connections w' ISA 2004

I've replied to you in line with your numbered list, Terence. Finally,
you ask for an ipconfig for the server, the output of isainfo, and 2
..w3c log files from ISA Server. I've created and zipped them and
e-mailed them to you.

Thanks, Terence.

Regards,
Mike

On Wed, 23 May 2007 08:28:01 GMT, Terence Liu [MSFT] wrote:

[snip]
According to your description, I understand that you can not receive mail
via SSL POP3 after you install ISA 2004 sp3 on your SBS. If I have
misunderstood the problem, please don't hesitate to let me know.

Based on my research, the rules that you created look correct. I suggest we
try the following steps to see if we can resolve this issue:

1. You have to rerun the CEICW to make sure your SBS 2003 server have right
network configuration. Go through the follow KB and Rerun CEICW again
carefully.

Done, including a reboot

[snip]
2. Increase the value of Connection limit
[snip]

Increased yesterday from 160 to 1000.
Also removed connection limits entirely and retried. No change. Set
connection limits back to 1000.

3. If the problem persists, please try to disable the POP Intrusion
Detection Filter
[snip]

Done, and restarted ISA Server. No change. Reset POP Intrusion Filter to
Enabled.

4. Please try to disable the ISA firewall client on the problematic client
computer, and then test this issue.

Disabled firewall client. No effect. Enabled firewall client.

If we can not resolve the issue after we perform the above steps, please
kindly help me collect some information for further investigation:

1. Run command "ipconfig /all > c:\ipconfig_sbs.txt" on SBS, send the files
c:\ipconfig_sbs.txt to me at v-terliu@xxxxxxxxxxxxx

1. Please help to gather the ISA Info:

1) Download the file from the following URL:

http://www.isatools.org/tools/isainfo.zip

2) Extract all files to a folder on ISA server.

3) Double click Isainfo.js. This will generate 2 files
ISAInfo2004-<computer-name>.log and ISAInfo2004-<computer-name>.xml in the
current folder.

4) Please send these files to me at v-terliu@xxxxxxxxxxxxx

2. Please also help to gather the ISA logs:

1) Schedule a down time.

2) Open ISA 2004 management console.

3) Expand the server node and highlight 'Monitoring'.

4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
Pane' is showed there.

5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.

6) Switch to the 'Fields' tab, click 'Select All', and then click OK.

7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.

8) Switch to the 'Fields' tab, click 'Select All', and then click OK.

9) Click 'Apply' to save changes and update the configuration.

10) Temporarily disable the Firewall service. To do that, please click
Monitoring | Services tab, and then right click 'Microsoft Firewall' to
choose 'Stop'.

11) Clear the current existing W3C logs. To do that, go to the log saving
directory and clean any existing .W3C logs. By default, the logs will be
saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may not
be able to deleted, that's normal.) You may backup them first and then
delete them.

12) Go back to the ISA 2004 management console, and then Start the stopped
'Microsoft Firewall' service.

13) Reproduce the problem, stop the service, and then gather the resulting
W3C files to me for analysis.

14) Please also let me know the IP address of the testing clients so that I
can filter the data.

Hope these steps will give you some help.
[snip]
.

Relevant Pages

  • RE: OWA page not displayed Outside
    ... Open the ISA Server management console, ... On the ISA Server computer, stop the Microsoft Firewall service. ...
    (microsoft.public.windows.server.sbs)
  • RE: OWA page not displayed Outside
    ... Open ISA 2006 management console. ... Expand the server node and highlight 'Monitoring'. ... Click 'Configure Firewall Logging'. ... |> internal client as both the web proxy client and firewall client? ...
    (microsoft.public.windows.server.sbs)
  • RE: Firewall service and remoteaccess service shut down frequently
    ... Do you have run the CEICW after installing the ISA components? ... please open SBS server management console, ... Click the Add Adapter button, and add your internal network adapter ... Meanwhile, from the subject, you said you the firewall service and RRAS ...
    (microsoft.public.windows.server.sbs)
  • Re: SMTP and POP3 through ISA 2004
    ... I've installed the Firewall Service and the error ... > You can not access the Firewall Service on the ISA unless you install the ... >> server available on the External public network ... >> to ge tthe following error from outlook when attempting to retrieve ...
    (microsoft.public.isa)
  • RE: ISA Server or Firewall Appliance?
    ... You are setting up your network for your newly established company. ... ISA Server or Firewall Appliance? ... ISA Server or Firewall Appliance? ...
    (Focus-Microsoft)
Loading