Re: Microsoft SBS 2000 Internet Permissions Problem



Hello Customer,

Thank you for kind update. And I'm sorry for the misunderstanding of your
concern.

The web site logon page is access via HTTPS port 85:
https://bvweb2.broadviewnet.com:85/htm/ecc/login.htm

If Microsoft Internet Explorer is configured to reference a server that is
running Microsoft Internet Security and Acceleration (ISA) Server as a Web
proxy server, when you try to view a Secure Sockets Layer (SSL) Web site on
the Internet by using a port other than 443, a blank page may appear with
"Page cannot be displayed" in the title bar. Or, you may receive the
following error message:

page cannot be displayed

Note: Connections to the Microsoft Windows Small Business Server 2003,
Premium Edition https://companyweb are also affected because
https://companyweb is configured to use port 444 for SSL connections
instead of the standard SSL port 443.

Note The VBScript uses a COM application programming interface that is
supported by ISA Server to create the required settings in ISA storage. ISA
maintains storage differently based on the ISA version, as follows:

a. ISA Server 2000 Standard Edition, ISA Server 2000 Enterprise Edition
(Standalone mode), and ISA Server 2004 Standard Edition: ISA storage is
maintained in the registry.

b. ISA Server 2000 Enterprise Edition: ISA Storage is maintained in Active
Directory

c. ISA Server 2004 Enterprise Edition: ISA Storage is maintained in Active
Directory Application mode (Configuration Storage Server)
Manually editing ISA storage where COM APIs that are supported by ISA
Server exist is not supported.

A separate GUID is listed for each tunnel port.

With Secure Socket Layer (SSL) tunneling, a client can establish a tunnel
through ISA Server directly to the Web server by using the requested HTTPS
object. Whenever a client browser requests an HTTPS object through ISA
Server, it uses SSL tunneling. SSL tunneling works by default for outgoing
client requests to ports 443 and 563. You can add SSL tunneling for
additional ports by setting the FPCTunnelPortRange object, an ISA Server
Admin COM object.

The FPCTunnelPortRange object provides access to the tunnel port range. A
tunnel port enables ISA Server to work as a data pump for communication to
particular ports on an external server. This process effectively bypasses
ISA Server protocol rules and ensures that the external port ranges for
which this is possible, are set by default to 443-443 for the single port
443 (SSL), and to 563-563 for the single port 563 (NNTP). You can use the
FPCTunnelPortRange object to change the port range in which a tunnel port
can be created.

The following Visual Basic Scripting Edition script (VBScript) is an
example of how to add ports to the tunnel port range:
================
set isa=CreateObject("FPC.Root")
set
tprange=isa.Arrays.GetContainingArray.ArrayPolicy.WebProxy.TunnelPortRanges
set tmp=tprange.AddRange("SSL 9443", 9443, 9443)
tprange.Save
================
Restart the Microsoft ISA Server Control service after you run the script.

For detail info:

Blank page or page cannot be displayed when you view SSL sites through ISA
Server
http://support.microsoft.com/?id=283284

Hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: cypherus <fbsdguy@xxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Re: Microsoft SBS 2000 Internet Permissions Problem
| Date: Mon, 11 Jun 2007 07:31:43 -0700
| Organization: http://groups.google.com
| Lines: 152
| Message-ID: <1181572303.159559.300480@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <1181248140.649751.217420@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
| <1181314629.082250.138090@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| <UJ7zDGBrHHA.3656@xxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 70.91.2.182
| Mime-Version: 1.0
| Content-Type: text/plain; charset="us-ascii"
| X-Trace: posting.google.com 1181572303 1490 127.0.0.1 (11 Jun 2007
14:31:43 GMT)
| X-Complaints-To: groups-abuse@xxxxxxxxxx
| NNTP-Posting-Date: Mon, 11 Jun 2007 14:31:43 +0000 (UTC)
| In-Reply-To: <UJ7zDGBrHHA.3656@xxxxxxxxxxxxxxxxxxxxxx>
| User-Agent: G2/1.0
| X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
rv:1.8.1.4) Gecko/20070515 Firefox/2.0.0.4,gzip(gfe),gzip(gfe)
| Complaints-To: groups-abuse@xxxxxxxxxx
| Injection-Info: p77g2000hsh.googlegroups.com; posting-host=70.91.2.182;
| posting-account=-vSGMA0AAAA0fGCzdl1Xs2N5WFc6ePn5
| Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!newsfeed0
0.sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!nntp.giganews.co
m!out03b.usenetserver.com!news.usenetserver.com!in02.usenetserver.com!news.u
senetserver.com!postnews.google.com!p77g2000hsh.googlegroups.com!not-for-mai
l
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:43105
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Thanks for replying, no this is not what I want to do. If you read my
| first post I said:
|
| I guess what I'm asking is where would I go to edit the permissions to
| allow whatever secure connections are happening when he tries to log
| into the website? I also am new to working with a network, but we are
| getting a new server in a month and I will be working close with
| someone skilled in setting up servers. Any help would be great.
|
| On Jun 11, 6:15 am, v-ter...@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])
| wrote:
| > Hello Josh,
| >
| > Thank you for posting here.
| >
| > According to your description, I understand that you want to move
yourSBS2000toSBS2003. If I have misunderstood theproblem, please don't
| > hesitate to let me know.
| >
| > Based on my research, I suggest we try the following steps:
| >
| > To migrate your server from Small Business Server2000to Windows Small
| > Business Server 2003 with SP1, see:
| >
| > Migrating from Small Business Server2000or Windows2000Server to Windows
| > Small Business Server 2003http://go.microsoft.com/fwlink/?LinkId=16414
| >
| > Additional info for your reference:
| > Pricing for Windows Small Business Server 2003
R2http://www.microsoft.com/windowsserver2003/sbs/howtobuy/pricing.mspx
| >
| > Windows Small Business Server 2003 R2 Getting Started
Guidehttp://www.microsoft.com/technet/prodtechnol/sbs/2003/support/documen..
.



Relevant Pages

  • RE: Simple ISA 2004 questions
    ... You'd better create a new GPO for IE proxy, ... Run "gpmc.msc" in SBS server, ... ISA Server 2004 Query can give you some help. ... In the Microsoft Internet Security and Acceleration Server 2004 console, ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA 2006 Basic Configuration
    ... Troubleshooting Client Authentication on Access Rules in ISA Server 2004 ... Microsoft Internet Security & Acceleration Server: ... Microsoft ISA Server Partners: Partner Hardware Solutions ... The routing table for the network adapter Internal ...
    (microsoft.public.isa.configuration)
  • Re: open port in isa 2004 ?
    ... thank you for using Microsoft newsgroup. ... | Subject: Re: open port in isa 2004? ... |> How to configure networks in ISA Server 2004 ...
    (microsoft.public.windows.server.sbs)
  • RE: Port Forwarding With 2 NIC Configuration
    ... Can SBS do 1-to-1 Natting? ... > and incoming/outgoing port, ... > automatically redirected from the SBS server to port 81 of the internal ... > Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: Remote server management unavailable after installing latest hotfix
    ... other process listening on port 80. ... do you encountered any issue when accessing the SBS server from RWW ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)