RE: allowed web site.

Help!@ I'm having the exact same issue. I'm using IPSEC to manange internet
access from the system. All works except for FEDEX website. I'm thinking
that there must be other addresses that its trying to retrieve but with the
current policy, it cannot access those addresses.

"Robert Li [MSFT]" wrote:

Hi,

Thanks for your reply.

Please try the following:

1. In Internet Explorer, click Internet Options on the Tools menu .
2. General tab, click Delete Cookies, Delete Files, Clear History.
3. On Security tab, highlight Internet/Local intranet/Trusted
sites/Restricted sites one by one, and click Default Level button. Then add
Sites\Advanced to http://www.fedex.com into trusted sites for Local
intranet and Trusted Sites.

Then please check if the problem is resolved.

If the problem persists, please help me collect the following information:

1. How did you create the IPSec policy?

2. If you create IPSec policy using Group Policy, please export the GPO and
I need to reproduce the issue on my side.

1) Open Group Policy Management.
2) Go to Domain.local\Group Policy Objects.
3) Right click GPO you created and select Backup.
4) Click Browse to select location, then click Backup.
5) Find the backup, the folder name is characters like
{96E64D29-4A2C-4001-A693-5368D4E52FBD}.
6) Zip the folder and send to me.

3. Give me the screen shot of IE when you visit FedEx website.

4. What's the network topology of your CorpNET?

Please send the information to v-robeli@xxxxxxxxxxxxx with subject: allowed
web site.

I am looking forward to hear from you.

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<Thread-Topic: allowed web site.
<thread-index: AcfYPqfnFjMFgwCaQ+6rOZBZpVfmgA==
<X-WBNR-Posting-Host: 207.46.193.207
<From: =?Utf-8?B?SVREVURFMjc=?= <ITDUDE27@xxxxxxxxxxxxxxxxxxxxxxxxx>
<References: <C017CED9-5289-4EDB-99A0-1562DBE9F578@xxxxxxxxxxxxx>
<x#gQHmb1HHA.6140@xxxxxxxxxxxxxxxxxxxxxx>
<2A33E888-3495-48D9-A682-540477BB8C83@xxxxxxxxxxxxx>
<UTD0MtB2HHA.360@xxxxxxxxxxxxxxxxxxxxxx>
<Subject: RE: allowed web site.
<Date: Mon, 6 Aug 2007 08:30:01 -0700
<Lines: 211
<Message-ID: <E5BE5455-CF33-4EF4-ABE4-AA1AD0ADB2EB@xxxxxxxxxxxxx>
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 7bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
<Newsgroups: microsoft.public.windows.server.sbs
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:54734
<NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<
<Mr Li.
<
<Thanks for the response.
<The problem can be reproduce on other computer that are part of the OU.
<The images are on the FedEx site and I don't have the problem if I disable
<IPsec.
<
<"Robert Li [MSFT]" wrote:
<
<> Hi,
<>
<> Thanks for your reply.
<>
<> I am sorry for the delay due to the weekend.
<>
<> Please take the following steps to narrow down this problem:
<>
<> 1. Please ensure the missing links and images are all within fedex.com,
not
<> from other websites.
<> 2. Please logon a different client computer, can the problem be
reproduced?
<> 3. Please temporally disable the IPSec, check if the problem can be
<> reproduced.
<>
<> I am looking forward to hear from you.
<>
<> If you need further assistance, please don't hesitate to let me know.
<>
<> Best regards,
<>
<> Robert Li(MSFT)
<>
<> Microsoft CSS Online Newsgroup Support
<>
<> Get Secure! - www.microsoft.com/security
<>
<> =====================================================
<>
<> This newsgroup only focuses on SBS technical issues. If you have issues
<> regarding other Microsoft products, you'd better post in the
corresponding
<> newsgroups so that they can be resolved in an efficient and timely
manner.
<> You can locate the newsgroup here:
<> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<>
<> When opening a new thread via the web interface, we recommend you check
the
<> "Notify me of replies" box to receive e-mail notifications when there
are
<> any updates in your thread. When responding to posts via your
newsreader,
<> please "Reply to Group" so that others may learn and benefit from your
<> issue.
<>
<> Microsoft engineers can only focus on one issue per thread. Although we
<> provide other information for your reference, we recommend you post
<> different incidents in different threads to keep the thread clean. In
doing
<> so, it will ensure your issues are resolved in a timely manner.
<>
<> For urgent issues, you may want to contact Microsoft CSS directly.
Please
<> check http://support.microsoft.com for regional support phone numbers.
<>
<> Any input or comments in this thread are highly appreciated.
<>
<> =====================================================
<>
<> This posting is provided "AS IS" with no warranties, and confers no
rights.
<>
<> --------------------
<> <Thread-Topic: allowed web site.
<> <thread-index: AcfVy2ne/2JM8lQFQpqvW3V+AZ1/4A==
<> <X-WBNR-Posting-Host: 207.46.192.207
<> <From: =?Utf-8?B?SVREVURFMjc=?= <ITDUDE27@xxxxxxxxxxxxxxxxxxxxxxxxx>
<> <References: <C017CED9-5289-4EDB-99A0-1562DBE9F578@xxxxxxxxxxxxx>
<> <x#gQHmb1HHA.6140@xxxxxxxxxxxxxxxxxxxxxx>
<> <Subject: RE: allowed web site.
<> <Date: Fri, 3 Aug 2007 05:40:03 -0700
<> <Lines: 108
<> <Message-ID: <2A33E888-3495-48D9-A682-540477BB8C83@xxxxxxxxxxxxx>
<> <MIME-Version: 1.0
<> <Content-Type: text/plain;
<> < charset="Utf-8"
<> <Content-Transfer-Encoding: 7bit
<> <X-Newsreader: Microsoft CDO for Windows 2000
<> <Content-Class: urn:content-classes:message
<> <Importance: normal
<> <Priority: normal
<> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826
<> <Newsgroups: microsoft.public.windows.server.sbs
<> <Path: TK2MSFTNGHUB02.phx.gbl
<> <Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:54283
<> <NNTP-Posting-Host: tk2msftsbfm01.phx.gbl 10.40.244.148
<> <X-Tomcat-NG: microsoft.public.windows.server.sbs
<> <
<> <Mr Li.
<> <
<> <1- FedEx is not hosted by me. I'm trying to permit access to the
website.
<> <2- No
<> <3- No
<> <4- I don't have ISA installed.
<> <5- I can ping the website with no problem. The page comes up, it just
does
<> <not load the images and some of the links on there.
<> <6- I configured IPsec to allow allow ups.com, dhl.com, yellow.com and
<> <fedex.com
<> <also my intranet. all the other websites work fine with the exception
of
<> <fedex.com.
<> <
<> <Thanks in advance.
<> <
<> <> 1. Is the fexdex site hosted on your SBS server or third party
website?
<> <> 2. If fexdex is website of your company, why don't you change it to
<> <> SSL-enabled, which is more easy to configure and secur?
<> <> 3. Do you have ISA installed?
<> <> 4. How do you limit the users to visit the website, using Group
Policy
<> or
<> <> ISA rules?
<> <> 5. Can you ping the website successfully?
<> <> 6. How did you configure the IPSEC?
<> <>
<> <> More info:
<> <>
<> <> How to implement SSL in IIS
<> <> http://support.microsoft.com/kb/299875
<> <>
<> <> I am looking forward to hear from you.
<> <>
<> <> If you need further assistance, please don't hesitate to let me know.
<> <>
<> <> Best regards,
<> <>
<> <> Robert Li(MSFT)
<> <>
<> <> Microsoft CSS Online Newsgroup Support
<> <>
<> <> Get Secure! - www.microsoft.com/security
<> <>
<> <> =====================================================
<> <>
<> <> This newsgroup only focuses on SBS technical issues. If you have
issues
<> <> regarding other Microsoft products, you'd better post in the
<> corresponding
<> <> newsgroups so that they can be resolved in an efficient and timely
<> manner.
<> <> You can locate the newsgroup here:
<> <> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
<> <>
<> <> When opening a new thread via the web interface, we recommend you
check
<> the
<> <> "Notify me of replies" box to receive e-mail notifications when there
<> are
<> <> any updates in your thread. When responding to posts via your
<> newsreader,
<> <> please "Reply to Group" so that others may learn and benefit from
your
<> <> issue.
<> <>
<> <> Microsoft engineers can only focus on one issue per thread. Although
we
<> <> provide other information for your reference, we recommend you post
<> <> different incidents in different threads to keep the thread clean. In
<> doing
<> <> so, it will ensure your issues are resolved in a timely manner.
<> <>
<> <> For urgent issues, you may want to contact Microsoft CSS directly.
<> Please
<> <> check http://support.microsoft.com for regional support phone numbers.
<> <>
<> <> Any input or comments in this thread are highly appreciated.
<> <>
<> <> =====================================================
<> <>
<> <> This posting is provided "AS IS" with no warranties, and confers no
<> rights.
<> <>
<> <> --------------------
<> <> <Thread-Topic: allowed web site.
<> <> <thread-index: AcfVQfMFyycUey7WQp+1jYOnozU0DA==
<> <> <X-WBNR-Posting-Host: 207.46.19.197
<> <> <From: =?Utf-8?B?SVREVURFMjc=?= <ITDUDE27@xxxxxxxxxxxxxxxxxxxxxxxxx>
<> <> <Subject: allowed web site.
<> <> <Date: Thu, 2 Aug 2007 13:16:03 -0700
<> <> <Lines: 10
.