REPOST: Firewall Client Disconnects

Here's the google'd version of my post.

Firewall Client disconnects?
All 17 messages in topic - view as tree
clevere May 30, 3:04 pm show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@sorry.net> - Find messages by this author
Date: Mon, 30 May 2005 12:04:05 -0700
Local: Mon,May 30 2005 3:04 pm
Subject: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Ok, in my strive to find out why I am having problems with just one URL, I
was attempting to make a transaction on this URL, and my firewall client
reported it was unable to connect to the ISA server.

The Firewall Client is for ISA 2004. I have manually select the ISA server
selected, with the server name. Just like I had with ISA 2000. The one thing
I find funny is that instead of having the firewall client manager in the
control panel, it's now in Programs (off the start menu). Is everyone elses
like that? Is there a way in ISA 2004 to find why I am getting disconnected?

Reply

"Brandy Nee [MSFT]" May 31, 6:45 am show options

Newsgroups: microsoft.public.windows.server.sbs
From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages by
this author
Date: Tue, 31 May 2005 10:45:19 GMT
Local: Tues,May 31 2005 6:45 am
Subject: RE: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hello Clevere,

Thank you for posting to the SBS Newsgroup.

From your post, I think your issue is your firewall clients cannot connect
to the ISA server. If I have misunderstood your issue, please let me know.

Before we go any further, I need to confirm with you for some information:

1. I am not quite clear your meaning "attempting to make a transaction on
this URL", please explain it in detailed.

2. I assume that your firewall clients are using ISA 2004, what is your ISA
server version, 2000 or 2004?

3. Does this issue happen to all the firewall clients or some of them?

4. Can you manually or automatically connect the firewall client to connect
to the ISA server? To do so,

a) On of the problematic client workstation, in the taskbar, double click
the Firewall Client icon, and Firewall Client Options comes out.

b) Check the box Automatically/Manually detect ISA server.

c) Click OK, and test whether it connects or not.

5. Also in the Firewall Client icon, make sure that you have typed the
right ISA Server address to connect. You can fill in the blank with the ISA
server FQDN or IP address, and test whether it is connected.

6. Make sure your ISA service is Started.

Thanks for your time. I am looking forward to hearing from you soon.

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

==============================*=================== ====
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================*=================== ====

This posting is provided "AS IS" with no warranties, and confers no rights.

Reply

clevere May 31, 7:39 pm show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@sorry.net> - Find messages by this author
Date: Tue, 31 May 2005 16:39:36 -0700
Local: Tues,May 31 2005 7:39 pm
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Brandy-
Here are you answers:

From your post, I think your issue is your firewall clients cannot connect
to the ISA server. If I have misunderstood your issue, please let me know.
Before we go any further, I need to confirm with you for some information:
1. I am not quite clear your meaning "attempting to make a transaction on
this URL", please explain it in detailed


..

I am attempting to connect to my online banking system. It's a CGI based
application that lets you access your bank information. I can email you the
URL, but I can't post it online. The first time I attempt to access the
feature of this site, (getting my account info), the page will not load, the
page can't be displayed. IE reports
Cannot find server or DNS Error
Internet Explorer
If I click back, and then click continue (on the webpage to access my
account information) everything works. If I attempt to access anything
internet related when the page won't load, my Firewall client software loses
it's connection with the ISA server.

2. I assume that your firewall clients are using ISA 2004, what is your ISA
server version, 2000 or 2004


?

ISA 2004 Firewall Client, ISA 2004 Server

3. Does this issue happen to all the firewall clients or some of them


?
I'm only testing this on one workstation at this time, but the URL access
problem happens across all the machines on the network. This was not a
problem with ISA 2000.

4. Can you manually or automatically connect the firewall client to connect
to the ISA server? To do so


,

I have it setup manually.

a) On of the problematic client workstation, in the taskbar, double click
the Firewall Client icon, and Firewall Client Options comes out.
b) Check the box Automatically/Manually detect ISA server.
c) Click OK, and test whether it connects or not.
5. Also in the Firewall Client icon, make sure that you have typed the
right ISA Server address to connect. You can fill in the blank with the ISA
server FQDN or IP address, and test whether it is connected


..

I've done this, works everytime. Except when the firewall client loses
connection to the ISA server. It then takes about 15 seconds before it can
find the ISA server

6. Make sure your ISA service is Started.
It's running on the SBS2K3 box .. quite happily...

Thanks for your time. I am looking forward to hearing from you soon


..

This is what my ISA 2004 log says when I attempt to connect to the web site
in question:

192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:29 w3proxy VOLE -
www.customwa.com 66.224.153.131 443 - 596 364 SSL-tunnel TCP -
www.customwa.com:443 - Inet 995 - SBS Internet Access Rule - Internal
External 0x8a Failed
192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
External 0x800 Allowed
192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
External 0x800 Allowed
192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:30 w3proxy VOLE -
www.customwa.com 66.224.153.131 443 - 594 341 SSL-tunnel TCP -
www.customwa.com:443 - Inet 64 - SBS Internet Access Rule - Internal
External 0x88 Failed

""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
news:...

- Hide quoted text -
- Show quoted text -
> Hello Clevere,

> Thank you for posting to the SBS Newsgroup.

> From your post, I think your issue is your firewall clients cannot connect
> to the ISA server. If I have misunderstood your issue, please let me know.

> Before we go any further, I need to confirm with you for some information:

> 1. I am not quite clear your meaning "attempting to make a transaction on
> this URL", please explain it in detailed.

> 2. I assume that your firewall clients are using ISA 2004, what is your
> ISA
> server version, 2000 or 2004?

> 3. Does this issue happen to all the firewall clients or some of them?

> 4. Can you manually or automatically connect the firewall client to
> connect
> to the ISA server? To do so,

> a) On of the problematic client workstation, in the taskbar, double click
> the Firewall Client icon, and Firewall Client Options comes out.

> b) Check the box Automatically/Manually detect ISA server.

> c) Click OK, and test whether it connects or not.

> 5. Also in the Firewall Client icon, make sure that you have typed the
> right ISA Server address to connect. You can fill in the blank with the
> ISA
> server FQDN or IP address, and test whether it is connected.

> 6. Make sure your ISA service is Started.

> Thanks for your time. I am looking forward to hearing from you soon.

> Best regards,

> Brandy Nee

> Microsoft CSS Online Newsgroup Support

> Get Secure! - www.microsoft.com/security

> ==============================*=================== ====
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==============================*=================== ====

> This posting is provided "AS IS" with no warranties, and confers no
> rights.


Reply

clevere Jun 1, 12:18 am show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@sorry.net> - Find messages by this author
Date: Tue, 31 May 2005 21:18:36 -0700
Local: Wed,Jun 1 2005 12:18 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hmm .. I made an interesting discovery. If I change the server name in the
firewall client to the server IP address, I get the slow page load, but I
can connect to that site without problem.

The firewall client is not able to find the ISA server every time I can't
access this web site. What does that indicate?

""

- Hide quoted text -
- Show quoted text -
Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
news:...
> Hello Clevere,

> Thank you for posting to the SBS Newsgroup.

> From your post, I think your issue is your firewall clients cannot connect
> to the ISA server. If I have misunderstood your issue, please let me know.

> Before we go any further, I need to confirm with you for some information:

> 1. I am not quite clear your meaning "attempting to make a transaction on
> this URL", please explain it in detailed.

> 2. I assume that your firewall clients are using ISA 2004, what is your
> ISA
> server version, 2000 or 2004?

> 3. Does this issue happen to all the firewall clients or some of them?

> 4. Can you manually or automatically connect the firewall client to
> connect
> to the ISA server? To do so,

> a) On of the problematic client workstation, in the taskbar, double click
> the Firewall Client icon, and Firewall Client Options comes out.

> b) Check the box Automatically/Manually detect ISA server.

> c) Click OK, and test whether it connects or not.

> 5. Also in the Firewall Client icon, make sure that you have typed the
> right ISA Server address to connect. You can fill in the blank with the
> ISA
> server FQDN or IP address, and test whether it is connected.

> 6. Make sure your ISA service is Started.

> Thanks for your time. I am looking forward to hearing from you soon.

> Best regards,

> Brandy Nee

> Microsoft CSS Online Newsgroup Support

> Get Secure! - www.microsoft.com/security

> ==============================*=================== ====
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==============================*=================== ====

> This posting is provided "AS IS" with no warranties, and confers no
> rights.


Reply

clevere Jun 1, 12:22 am show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@sorry.net> - Find messages by this author
Date: Tue, 31 May 2005 21:22:53 -0700
Local: Wed,Jun 1 2005 12:22 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

I may have spoken too soon on the finding the ISA server via the IP
address...

But the firewall client is losing connection or dropping it with the ISA
server.

"clevere" <n...@sorry.net> wrote in message


news:...

- Hide quoted text -
- Show quoted text -
> Hmm .. I made an interesting discovery. If I change the server name in the
> firewall client to the server IP address, I get the slow page load, but I
> can connect to that site without problem.

> The firewall client is not able to find the ISA server every time I can't
> access this web site. What does that indicate?

> ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> news:...
>> Hello Clevere,

>> Thank you for posting to the SBS Newsgroup.

>> From your post, I think your issue is your firewall clients cannot
>> connect
>> to the ISA server. If I have misunderstood your issue, please let me
>> know.

>> Before we go any further, I need to confirm with you for some
>> information:

>> 1. I am not quite clear your meaning "attempting to make a transaction on
>> this URL", please explain it in detailed.

>> 2. I assume that your firewall clients are using ISA 2004, what is your
>> ISA
>> server version, 2000 or 2004?

>> 3. Does this issue happen to all the firewall clients or some of them?

>> 4. Can you manually or automatically connect the firewall client to
>> connect
>> to the ISA server? To do so,

>> a) On of the problematic client workstation, in the taskbar, double click
>> the Firewall Client icon, and Firewall Client Options comes out.

>> b) Check the box Automatically/Manually detect ISA server.

>> c) Click OK, and test whether it connects or not.

>> 5. Also in the Firewall Client icon, make sure that you have typed the
>> right ISA Server address to connect. You can fill in the blank with the
>> ISA
>> server FQDN or IP address, and test whether it is connected.

>> 6. Make sure your ISA service is Started.

>> Thanks for your time. I am looking forward to hearing from you soon.

>> Best regards,

>> Brandy Nee

>> Microsoft CSS Online Newsgroup Support

>> Get Secure! - www.microsoft.com/security

>> ==============================*=================== ====
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> ==============================*=================== ====

>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.


Reply

"Brandy Nee [MSFT]" Jun 1, 7:04 am show options

Newsgroups: microsoft.public.windows.server.sbs
From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages by
this author
Date: Wed, 01 Jun 2005 11:04:51 GMT
Local: Wed,Jun 1 2005 7:04 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hello Clevere,

Thank you for posting back.

From your reply, I think this maybe is a very complicated issue. Please
understand that we may take time to do more further research, and we also
need your assistance to collect more error information.

1. Unlike ISA Server 2000, it is by design that the Firewall Client of ISA
2004 is listed in the Programs as you mentioned, so please do not worry
about it.

2. When the connection is rejected by the ISA, the Firewall Client will
temporarily display "not connected" for about 15 seconds.

3. Please configure ISA's internal NIC as the proxy in the IE | Internet
Options | Connections tab | LAN Settings button, and then test whether it
works now. To do so, type the IP address of the ISA internal NIC into the
proxy server name, and then type the Port of internal NIC that the ISA is
monitoring into the port box.

4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
come from the SBS 2K3 SP1 Premium Edition or from the retail version of the
ISA Server 2004?

Thanks for your time. I am looking forward to your reply.

Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
==============================*=================== ====
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================*=================== ====
This posting is provided "AS IS" with no warranties, and confers no rights


..

Reply

clevere Jun 1, 12:17 pm show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@sorry.net> - Find messages by this author
Date: Wed, 1 Jun 2005 09:17:33 -0700
Local: Wed,Jun 1 2005 12:17 pm
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hi Brandy-
Thanks for replying, I'd really like to know why ISA 2004 is killing my
connection

Here are you answers:

From your reply, I think this maybe is a very complicated issue. Please
understand that we may take time to do more further research, and we also
need your assistance to collect more error information.
1. Unlike ISA Server 2000, it is by design that the Firewall Client of ISA
2004 is listed in the Programs as you mentioned, so please do not worry
about it


..

Ok, no worries there then.

2. When the connection is rejected by the ISA, the Firewall Client will
temporarily display "not connected" for about 15 seconds


..

That explains something, that ISA is rejecting the connection from my
workstation, but why?

3. Please configure ISA's internal NIC as the proxy in the IE | Internet
Options | Connections tab | LAN Settings button, and then test whether it
works now. To do so, type the IP address of the ISA internal NIC into the
proxy server name, and then type the Port of internal NIC that the ISA is
monitoring into the port box


..

Did that, didn't change a thing. As soon as I try to access information on
www.customwaNOSPAM.com The firewall client loses connection with the server,
and poof, there goes my internet connection.

4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
come from the SBS 2K3 SP1 Premium Edition or from the retail version of the
ISA Server 2004


?

Yes, I installed SBS 2k3 SP1 Premium Edition. The ISA 2004 comes from the
SBS2K3 SP1 Premium CD set you order over the internet. I upgraded as
follows:

Downloaded SBS2K3 SP1 (per the Microsoft instructions) from the internet,
installed it, and was up and running with little trouble. Ordered my CD's,
got My CD's, and install ISA 2004... that's when the problem started to
happen. I don't know if you saw this in my last post, but this is what ISA
is saying when I attempt to access that web site:

192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:29 w3proxy VOLE -
www.customwa.com 66.224.153.131 443 - 596 364 SSL-tunnel TCP -
www.customwa.com:443 - Inet 995 - SBS Internet Access Rule - Internal
External 0x8a Failed
192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
External 0x800 Allowed
192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0


; Windows NT 5.1;
SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
www.customwa.com:443 - Inet 407 -

SBS Internet Access Rule - Internal
External 0x800 Allowed
192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE


6.0; Windows
NT 5.1;

SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:30 w3proxy VOLE -
www.customwa.com 66.224.153.131 443 - 594 341 SSL-tunnel TCP -
www.customwa.com:443 - Inet 64 - SBS Internet Access Rule - Internal
External 0x88 Failed


I am using IE, with the latest Service Pack install on Windows XP SP2.

Just out of curiousity, and from a recommendation from another SBS member, I
deleted all the ISA rules, and re-ran the Connect to the Internet Wizard. It
recreated all the appropriate ISA rules, but my problem still exists.

""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
news:ms%...

- Hide quoted text -
- Show quoted text -
> Hello Clevere,

> Thank you for posting back.

> From your reply, I think this maybe is a very complicated issue. Please
> understand that we may take time to do more further research, and we also
> need your assistance to collect more error information.

> 1. Unlike ISA Server 2000, it is by design that the Firewall Client of ISA
> 2004 is listed in the Programs as you mentioned, so please do not worry
> about it.

> 2. When the connection is rejected by the ISA, the Firewall Client will
> temporarily display "not connected" for about 15 seconds.

> 3. Please configure ISA's internal NIC as the proxy in the IE | Internet
> Options | Connections tab | LAN Settings button, and then test whether it
> works now. To do so, type the IP address of the ISA internal NIC into the
> proxy server name, and then type the Port of internal NIC that the ISA is
> monitoring into the port box.

> 4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
> come from the SBS 2K3 SP1 Premium Edition or from the retail version of
> the
> ISA Server 2004?

> Thanks for your time. I am looking forward to your reply.

> Best regards,

> Brandy Nee

> Microsoft CSS Online Newsgroup Support

> Get Secure! - www.microsoft.com/security

> ==============================*=================== ====
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==============================*=================== ====

> This posting is provided "AS IS" with no warranties, and confers no
> rights.


Reply

"Brandy Nee [MSFT]" Jun 2, 7:03 am show options

Newsgroups: microsoft.public.windows.server.sbs
From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages by
this author
Date: Thu, 02 Jun 2005 11:03:11 GMT
Local: Thurs,Jun 2 2005 7:03 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hello Clevere,

Thank you for posting back.

As I have stated in my last reply, this is a very complcated issue. To
perform more further research, please take your time and help us to gather
the following information:

[Note]: This information is very important for us to isolate and resolve
this issue.

1. IPCONFIG /ALL results on the SBS.

2. The network diagram that includes the IP addresses range for each
network.

3. ISA Info:

1) Download the file from the following URL:

http://www.isatools.org/isainf*o/ISAInfo.zip

2) Extract all files to a folder on ISA server.

3) Double click Isainfo.js. This will generate 2 files
ISAInfo2004-<computer-name>.lo*g and ISAInfo2004-<computer-name>.xm*l in the
current folder.

4) Attach the files and send it to v-bra...@microsoft.com

4. Gather the ISA logs:

1) Schedule a down time.

2) Open ISA 2004 management console.

3) Expand the server node and highlight 'Monitoring'.

4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
Pane' is showed there.

5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.

6) Switch to the 'Fields' tab, click 'Select All', and then click OK.

7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.

8) Switch to the 'Fields' tab, click 'Select All', and then click OK.

9) Click 'Apply' to save changes and update the configuration.

10) Temporarily disable the Firewall service. To do that, please click
Monitoring | Services tab, and then right click 'Microsoft Firewall' to
choose 'Stop'.

11) Clear the current existing W3C logs. To do that, go to the log saving
directory and clean any existing .W3C logs. By default, the logs will be
saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may not
be able to deleted, that's normal.) You may backup them first and then
delete them.

12) Go back to the ISA 2004 management console, and then Start the stopped
'Microsoft Firewall' service.

13) Reproduce the problem, stop the service, and then attach the resulting
W3C files to the newsgroup.

14) Please also let me know the IP address of the testing clients so that I
can filter the data.

Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
==============================*=================== ====
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================*=================== ====
This posting is provided "AS IS" with no warranties, and confers no rights


..

Reply

clevere Jun 3, 1:18 am show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@sorry.net> - Find messages by this author
Date: Thu, 2 Jun 2005 22:18:24 -0700
Local: Fri,Jun 3 2005 1:18 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Thanks for the reply Brandy, I'll start getting you this information
tomorrow in the AM!

""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
news:...

- Hide quoted text -
- Show quoted text -
> Hello Clevere,

> Thank you for posting back.

> As I have stated in my last reply, this is a very complcated issue. To
> perform more further research, please take your time and help us to
> gather
> the following information:

> [Note]: This information is very important for us to isolate and resolve
> this issue.

> 1. IPCONFIG /ALL results on the SBS.

> 2. The network diagram that includes the IP addresses range for each
> network.

> 3. ISA Info:

> 1) Download the file from the following URL:

> http://www.isatools.org/isainf*o/ISAInfo.zip

> 2) Extract all files to a folder on ISA server.

> 3) Double click Isainfo.js. This will generate 2 files
> ISAInfo2004-<computer-name>.lo*g and ISAInfo2004-<computer-name>.xm*l in
the
> current folder.

> 4) Attach the files and send it to v-bra...@microsoft.com

> 4. Gather the ISA logs:

> 1) Schedule a down time.

> 2) Open ISA 2004 management console.

> 3) Expand the server node and highlight 'Monitoring'.

> 4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
> Pane' is showed there.

> 5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
> Tasks', and then switch the 'log storage format' from 'MSDE database'
> (default) to 'File'.

> 6) Switch to the 'Fields' tab, click 'Select All', and then click OK.

> 7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
> Tasks', and then switch the 'log storage format' from 'MSDE database'
> (default) to 'File'.

> 8) Switch to the 'Fields' tab, click 'Select All', and then click OK.

> 9) Click 'Apply' to save changes and update the configuration.

> 10) Temporarily disable the Firewall service. To do that, please click
> Monitoring | Services tab, and then right click 'Microsoft Firewall' to
> choose 'Stop'.

> 11) Clear the current existing W3C logs. To do that, go to the log saving
> directory and clean any existing .W3C logs. By default, the logs will be
> saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
> not
> be able to deleted, that's normal.) You may backup them first and then
> delete them.

> 12) Go back to the ISA 2004 management console, and then Start the stopped
> 'Microsoft Firewall' service.

> 13) Reproduce the problem, stop the service, and then attach the resulting
> W3C files to the newsgroup.

> 14) Please also let me know the IP address of the testing clients so that
> I
> can filter the data.

> Best regards,

> Brandy Nee

> Microsoft CSS Online Newsgroup Support

> Get Secure! - www.microsoft.com/security

> ==============================*=================== ====
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==============================*=================== ====

> This posting is provided "AS IS" with no warranties, and confers no
> rights.


Reply

clevere Jun 3, 2:50 am show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@sorry.net> - Find messages by this author
Date: Thu, 2 Jun 2005 23:50:47 -0700
Local: Fri,Jun 3 2005 2:50 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Good morning Brandy-

Please check your email, you have some information from me.

""

- Hide quoted text -
- Show quoted text -
Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
news:...
> Hello Clevere,

> Thank you for posting back.

> As I have stated in my last reply, this is a very complcated issue. To
> perform more further research, please take your time and help us to
> gather
> the following information:

> [Note]: This information is very important for us to isolate and resolve
> this issue.

> 1. IPCONFIG /ALL results on the SBS.

> 2. The network diagram that includes the IP addresses range for each
> network.

> 3. ISA Info:

> 1) Download the file from the following URL:

> http://www.isatools.org/isainf*o/ISAInfo.zip

> 2) Extract all files to a folder on ISA server.

> 3) Double click Isainfo.js. This will generate 2 files
> ISAInfo2004-<computer-name>.lo*g and ISAInfo2004-<computer-name>.xm*l in
the
> current folder.

> 4) Attach the files and send it to v-bra...@microsoft.com

> 4. Gather the ISA logs:

> 1) Schedule a down time.

> 2) Open ISA 2004 management console.

> 3) Expand the server node and highlight 'Monitoring'.

> 4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
> Pane' is showed there.

> 5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
> Tasks', and then switch the 'log storage format' from 'MSDE database'
> (default) to 'File'.

> 6) Switch to the 'Fields' tab, click 'Select All', and then click OK.

> 7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
> Tasks', and then switch the 'log storage format' from 'MSDE database'
> (default) to 'File'.

> 8) Switch to the 'Fields' tab, click 'Select All', and then click OK.

> 9) Click 'Apply' to save changes and update the configuration.

> 10) Temporarily disable the Firewall service. To do that, please click
> Monitoring | Services tab, and then right click 'Microsoft Firewall' to
> choose 'Stop'.

> 11) Clear the current existing W3C logs. To do that, go to the log saving
> directory and clean any existing .W3C logs. By default, the logs will be
> saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
> not
> be able to deleted, that's normal.) You may backup them first and then
> delete them.

> 12) Go back to the ISA 2004 management console, and then Start the stopped
> 'Microsoft Firewall' service.

> 13) Reproduce the problem, stop the service, and then attach the resulting
> W3C files to the newsgroup.

> 14) Please also let me know the IP address of the testing clients so that
> I
> can filter the data.

> Best regards,

> Brandy Nee

> Microsoft CSS Online Newsgroup Support

> Get Secure! - www.microsoft.com/security

> ==============================*=================== ====
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==============================*=================== ====

> This posting is provided "AS IS" with no warranties, and confers no
> rights.


Reply

clevere Jun 5, 3:09 am show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@sorry.net> - Find messages by this author
Date: Sun, 5 Jun 2005 00:09:09 -0700
Local: Sun,Jun 5 2005 3:09 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

While waiting for Brandy to reply to me, I discovered something interesting.
If I disable ISA 2004's Web Proxy, everything works as you should expect
(all be it a little slower)..
Anyone got a take on that?

"clevere" <n...@sorry.net> wrote in message


news:...

- Hide quoted text -
- Show quoted text -
> Ok, in my strive to find out why I am having problems with just one URL, I
> was attempting to make a transaction on this URL, and my firewall client
> reported it was unable to connect to the ISA server.

> The Firewall Client is for ISA 2004. I have manually select the ISA server
> selected, with the server name. Just like I had with ISA 2000. The one
> thing I find funny is that instead of having the firewall client manager
> in the control panel, it's now in Programs (off the start menu). Is
> everyone elses like that? Is there a way in ISA 2004 to find why I am
> getting disconnected?


Reply

"Brandy Nee [MSFT]" Jun 6, 6:32 am show options

Newsgroups: microsoft.public.windows.server.sbs
From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages by
this author
Date: Mon, 06 Jun 2005 10:32:39 GMT
Local: Mon,Jun 6 2005 6:32 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hello Clevere,

Thank you for posting back.

I have received your logs. Please be patient that I am doing researching on
your issue now. To better filter your issue, I would like to know what
exactly the URL you failed to access. Can you please paste the URL link to
my email address?

Thanks for your cooperation and time. I am looking forward to hearing from
you.

Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
==============================*=================== ====
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================*=================== ====
This posting is provided "AS IS" with no warranties, and confers no rights


..

Reply

"Brandy Nee [MSFT]" Jun 7, 6:31 am show options

Newsgroups: microsoft.public.windows.server.sbs
From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages by
this author
Date: Tue, 07 Jun 2005 10:31:04 GMT
Local: Tues,Jun 7 2005 6:31 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hello Clevere,

Thank you for posting back.

I have received your email. After a long time research on your logs, I
found there are some errors occur when the Firewall Clients pass the
authentication to the ISA. Please try the following steps:

1. On the problematic client, temporarily disable the Firewall Client.

2. Close all IE windows.

3. Open Internet Options | Connections tab | LAN Settings button, configure
the ISA's internal NIC as the proxy.

4. Launch IE to access that URL again to see if the problem still exists.

If this issue persists, please help to gather the following information:

1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out the
steps how you did that? Do you mean that you disabled HTTP Filter under
Internet Security & Acceleration Server
2004\Yourserver\Configuration\*Add-in?

2. Are there any error messages in the System event log and the Application
event log? Please export the events into .evt files and then send to you.

I am greatly appreciated your time and cooperation. If anything unclear,
please let me know.

I am looking forward to hearing from you!
Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www
..microsoft.com/security
==============================*=================== ====
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================*=================== ====
This posting is provided "AS IS" with no warranties, and confers no rights


..

Reply

clevere Jun 8, 4:20 am show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@sorry.net> - Find messages by this author
Date: Wed, 8 Jun 2005 01:20:27 -0700
Local: Wed,Jun 8 2005 4:20 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hi Brandy-
Alright, this is odd.

I had to re-enable Web Proxy, for my network (I turned it off). I did they
by Going to the ISA manager, clicking in Networks, right-clicking on the
Internal network, and disabling Web Proxy.

With the web proxy enabled, I disabled the firewall client, and put in IE to
use my server, at port 8080 for the proxy server.

I was unable to access the website in question. I turned on the Firewall
Client, told IE to just "Auto matically detect connection settings" (so that
it no longer used Proxy Server), and I could access the web site.

With the "Web Proxy" running, some sites seem to be having problems loading,
but that could be because SBS is doing it's mid-week backup. This I can
continue to test, I'll leave the Web Proxy turned on for now, and see how it
performs during the day.

As far as IE goes, shouldn't I be able to tell it to use this proxy server,
and be good to go? Do you need any logs?

There are no event ID's in the event viewer.

""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
news:...

- Hide quoted text -
- Show quoted text -
> Hello Clevere,

> Thank you for posting back.

> I have received your logs. Please be patient that I am doing researching
> on
> your issue now. To better filter your issue, I would like to know what
> exactly the URL you failed to access. Can you please paste the URL link to
> my email address?

> Thanks for your cooperation and time. I am looking forward to hearing from
> you.

> Best regards,

> Brandy Nee

> Microsoft CSS Online Newsgroup Support

> Get Secure! - www.microsoft.com/security

> ==============================*=================== ====
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==============================*=================== ====

> This posting is provided "AS IS" with no warranties, and confers no
> rights.


Reply

"Brandy Nee [MSFT]" Jun 9, 7:19 am show options

Newsgroups: microsoft.public.windows.server.sbs
From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages by
this author
Date: Thu, 09 Jun 2005 11:19:41 GMT
Local: Thurs,Jun 9 2005 7:19 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

Hello Clever,

Thank you for posting back.

Please see my information below:

1. If you disabled the Web Proxy, whatever you enabled "Automatically
detect connection settings", IE will not directly pass the request to the
ISA. Instead, the Firewall Client will pass the IE requests to the ISA so
it works.

2. To use "Automatically detect connection settings", we need to enable
WPAD on the ISA. Please See:

309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
Windows 2000
http://support.microsoft.com/?*id=309814

816320 How to configure firewall and Web proxy client Autodiscovery in
Windows Server 2003
http://support.microsoft.com/?*id=816320

Configuring DHCP and DNS for ISA automatic discovery
http://www.isaserver.org/tutor*ials/...auto*matic-dis....
html

We need to configure either on DHCP or on DNS for the WPAD record. For the
DHCP way, we do not recommend do that since there are many known issues.
For the DNS way, it needs to use the port 80 on the internal NIC. However,
since the services on the SBS needs the port 80 on the internal NIC, we are
unable to use DNS to configure WPAD.

As a conclusion, we are unable to enable "Automatically detect connection
settings" in a SBS environment. If you really want to do that, you must use
the DHCP way.

3. In your scenario, you should always manually set SBS' internal NIC as
the proxy in Internet options instead of enabling "Automatically detect
connection settings"

Hope the information helps. If anything is

unclear, please let me know. I
am looking forward to hearing from you
Best regards,
Brandy Nee
Microsoft CSS Online Newsgroup Support
Get Secure! - www
..microsoft.com/security
==============================*=================== ====
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==============================*=================== ====
This posting is provided "AS IS" with no warranties, and confers no rights


..

Reply

clevere Jun 9, 1:20 pm show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@noway.net> - Find messages by this author
Date: Thu, 9 Jun 2005 10:20:15 -0700
Local: Thurs,Jun 9 2005 1:20 pm
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

I'm afraid you misunderstood what I was saying. I was doing what you
recommended:

I have received your email. After a long time research on your logs, I
found there are some errors occur when the Firewall Clients pass the
authentication to the ISA. Please try the following steps:
1. On the problematic client, temporarily disable the Firewall Client


..

Done

2. Close all IE windows.

Done

3. Open Internet Options | Connections tab | LAN Settings button, configure
the ISA's internal NIC as the proxy


..

Did that.

4. Launch IE to access that URL again to see if the problem still exists


..
Yes, the problem presists.

If this issue persists, please help to gather the following information:
1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out the
steps how you did that? Do you mean that you disabled HTTP Filter under
Internet Security & Acceleration Server
2004\Yourserver\Configuration\*Add-in


?

No, I disabled Web Proxy under ISA
2004\Myserver\Configuration\Ne*twork\Internal Network\Properties\Web Proxy

2. Are there any error messages in the System event log and the Application
event log? Please export the events into .evt files and then send to you


..

No, there are none.

Does that make more sense? I had to re-enable the Web Proxy for the internal
network in ISA to do the testing you asked, Because I had turned it off.
After I turned it OFF, I could no longer use "Use this Proxy Server" in IE,
because the proxy server was turned off. So I had to reconfigure IE to just
Automatically detect the settings, so it would work with the web Proxy
turned off.

Does that make sense?

""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
news:...

- Hide quoted text -
- Show quoted text -
> Hello Clever,

> Thank you for posting back.

> Please see my information below:

> 1. If you disabled the Web Proxy, whatever you enabled "Automatically
> detect connection settings", IE will not directly pass the request to the
> ISA. Instead, the Firewall Client will pass the IE requests to the ISA so
> it works.

> 2. To use "Automatically detect connection settings", we need to enable
> WPAD on the ISA. Please See:

> 309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
> Windows 2000
> http://support.microsoft.com/?*id=309814

> 816320 How to configure firewall and Web proxy client Autodiscovery in
> Windows Server 2003
> http://support.microsoft.com/?*id=816320

> Configuring DHCP and DNS for ISA automatic discovery

http://www.isaserver.org/tutor*ials/...auto*matic-dis....
> html

> We need to configure either on DHCP or on DNS for the WPAD record. For the
> DHCP way, we do not recommend do that since there are many known issues.
> For the DNS way, it needs to use the port 80 on the internal NIC. However,
> since the services on the SBS needs the port 80 on the internal NIC, we
are
> unable to use DNS to configure WPAD.

> As a conclusion, we are unable to enable "Automatically detect connection
> settings" in a SBS environment. If you really want to do that, you must
use
> the DHCP way.

> 3. In your scenario, you should always manually set SBS' internal NIC as
> the proxy in Internet options instead of enabling "Automatically detect
> connection settings"

> Hope the information helps. If anything is unclear, please let me know. I
> am looking forward to hearing from you

> Best regards,

> Brandy Nee

> Microsoft CSS Online Newsgroup Support

> Get Secure! - www.microsoft.com/security

> ==============================*=================== ====
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==============================*=================== ====

> This posting is provided "AS IS" with no warranties, and confers no
rights


..

- Hide quoted text -
- Show quoted text -


Reply

clevere Jun 13, 10:43 am show options

Newsgroups: microsoft.public.windows.server.sbs
From: "clevere" <n...@noway.net> - Find messages by this author
Date: Mon, 13 Jun 2005 07:43:13 -0700
Local: Mon,Jun 13 2005 10:43 am
Subject: Re: Firewall Client disconnects?
Reply | Reply to Author | Forward | Print | Individual Message | Show
original | Report Abuse

I'm afraid you misunderstood what I was saying. I was doing what you
recommended


, and your answers are below:

- Hide quoted text -
- Show quoted text -
I have received your email. After a long time research on your logs
, I
found
there
are
some
errors
occur
when
the
Firewall
Clients
pass
the
authentication
to
the
ISA
.. Please
try
the
following
steps
:
1
.. On
the
problematic
client
, temporarily
disable
the
Firewall
Client
..
Done
2. Close all IE windows.
Done
3. Open Internet Options | Connections tab | LAN Settings button, configure
the ISA's
internal
NIC
as
the
proxy
..
Did that.
4. Launch IE to access that URL again to see if the
problem
still
exists
..
Yes, the problem presists.
If this issue persists, please help to gather the following information:
1
.. You
mentioned
"disable
ISA
2004's
Web
Proxy
". Please
fully
give
out
the
steps
how
you
did
that
? Do
you
mean
that
you
disabled
HTTP
Filter
under
Internet
Security
& Acceleration
Server
2004
\Yourserver
\Configuration
\Add
-in
?
No, I disabled Web Proxy under ISA
2004\Myserver\Configuration\Ne*twork\Internal Network\Properties\Web Proxy
2. Are there any error messages in the System event log and
the
Application
event
log
? Please
export
the
events
into
.evt
files
and
then
send
to
you
..
No, there are none.
Does that make more sense? I had to re-enable the Web Proxy for the internal
network in ISA to do the testing you asked, Because I had turned it off.
After I turned it OFF, I could no longer use "Use this Proxy Server" in IE,
because the proxy server was turned off. So I had to reconfigure IE to just
Automatically detect the settings, so it would work with the web Proxy
turned off.
Does that make sense?
""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
news:...
> Hello Clever,

> Thank you for posting back.

> Please see my information below:

> 1. If you disabled the Web Proxy, whatever you enabled "Automatically
> detect connection settings", IE will not directly pass the request to the
> ISA. Instead, the Firewall Client will pass the IE requests to the ISA so
> it works.

> 2. To use "Automatically detect connection settings", we need to enable
> WPAD on the ISA. Please See:

> 309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
> Windows 2000
> http://support.microsoft.com/?*id=309814

> 816320 How to configure firewall and Web proxy client Autodiscovery in
> Windows Server 2003
> http://support.microsoft.com/?*id=816320

> Configuring DHCP and DNS for ISA automatic discovery

http
://www
..isaserver
..org
/tutorials
/Configuring
-DHCP
-DNS
-automatic
-discovery
..
> html

> We need to configure either on DHCP or on DNS for the WPAD record. For the
> DHCP way, we do not recommend do that since there are many known issues.
> For the DNS way, it needs to use the port 80 on the internal NIC. However,
> since the services on the SBS needs the port 80 on the internal NIC, we
are
> unable to use DNS to configure WPAD.

> As a conclusion, we are unable to enable "Automatically detect connection
> settings" in a SBS environment. If you really want to do that, you must
use
> the DHCP way.

> 3. In your scenario, you should always manually set SBS' internal NIC as
> the proxy in Internet options instead of enabling "Automatically detect
> connection settings"

> Hope the information helps. If anything is unclear, please let me know. I
> am looking forward to hearing from you

> Best regards,

> Brandy Nee

> Microsoft CSS Online Newsgroup Support

> Get Secure! - www.microsoft.com/security

> ==============================*=================== ====
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==============================*=================== ====

> This posting is provided "AS IS" with no warranties, and confers no
rights


..

"clevere" <n...@noway.net> wrote in message


news:...

- Hide quoted text -
- Show quoted text -
> I'm afraid you misunderstood what I was saying. I was doing what you
> recommended:

> I have received your email. After a long time research on your logs, I
> found there are some errors occur when the Firewall Clients pass the
> authentication to the ISA. Please try the following steps:

> 1. On the problematic client, temporarily disable the Firewall Client.

> Done

> 2. Close all IE windows.

> Done

> 3. Open Internet Options | Connections tab | LAN Settings button,
configure
> the ISA's internal NIC as the proxy.

> Did that.

> 4. Launch IE to access that URL again to see if the problem still exists.
> Yes, the problem presists.

> If this issue persists, please help to gather the following information:

> 1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out the
> steps how you did that? Do you mean that you disabled HTTP Filter under
> Internet Security & Acceleration Server
> 2004\Yourserver\Configuration\*Add-in?

> No, I disabled Web Proxy under ISA
> 2004\Myserver\Configuration\Ne*twork\Internal Network\Properties\Web Proxy

> 2. Are there any error messages in the System event log and the
Application
> event log? Please export the events into .evt files and then send to you.

> No, there are none.

> Does that make more sense? I had to re-enable the Web Proxy for the
internal
> network in ISA to do the testing you asked, Because I had turned it off.
> After I turned it OFF, I could no longer use "Use this Proxy Server" in
IE,
> because the proxy server was turned off. So I had to reconfigure IE to
just
> Automatically detect the settings, so it would work with the web Proxy
> turned off.

> Does that make sense?

> ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> news:...
> > Hello Clever,

> > Thank you for posting back.

> > Please see my information below:

> > 1. If you disabled the Web Proxy, whatever you enabled "Automatically
> > detect connection settings", IE will not directly pass the request to
the
> > ISA. Instead, the Firewall Client will pass the IE requests to the ISA
so
> > it works.

> > 2. To use "Automatically detect connection settings", we need to enable
> > WPAD on the ISA. Please See:

> > 309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
> > Windows 2000
> > http://support.microsoft.com/?*id=309814

> > 816320 How to configure firewall and Web proxy client Autodiscovery in
> > Windows Server 2003
> > http://support.microsoft.com/?*id=816320

> > Configuring DHCP and DNS for ISA automatic discovery


http://www.isaserver.org/tutor*ials/...auto*matic-dis....

- Hide quoted text -
- Show quoted text -
> > html

> > We need to configure either on DHCP or on DNS for the WPAD record. For
the
> > DHCP way, we do not recommend do that since there are many known issues.
> > For the DNS way, it needs to use the port 80 on the internal NIC.
However,
> > since the services on the SBS needs the port 80 on the internal NIC, we
> are
> > unable to use DNS to configure WPAD.

> > As a conclusion, we are unable to enable "Automatically detect
connection
> > settings" in a SBS environment. If you really want to do that, you must
> use
> > the DHCP way.

> > 3. In your scenario, you should always manually set SBS' internal NIC as
> > the proxy in Internet options instead of enabling "Automatically detect
> > connection settings"

> > Hope the information helps. If anything is unclear, please let me know.
I
> > am looking forward to hearing from you

> > Best regards,

> > Brandy Nee

> > Microsoft CSS Online Newsgroup Support

> > Get Secure! - www.microsoft.com/security

> > ==============================*=================== ====
> > When responding to posts, please "Reply to Group" via your newsreader so
> > that others may learn and benefit from your issue.
> > ==============================*=================== ====

> > This posting is provided "AS IS" with no warranties, and confers no
> rights.


Reply

Charlie Russel is saying the same thing.

-> ISA Server
-> Configuration
-> General
-> Define Connection Limits
-> Connection Limit
-> Limit the number of connection
-> Connection limit per client (TCP and non-TCP)

Do me a favor and check what value is there?

If 40...try 160 for grins.


clevere wrote:
> Here's the google'd version of my post.
>
> Firewall Client disconnects?
> All 17 messages in topic - view as tree
> clevere May 30, 3:04 pm show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: "clevere" <n...@sorry.net> - Find messages by this author
> Date: Mon, 30 May 2005 12:04:05 -0700
> Local: Mon,May 30 2005 3:04 pm
> Subject: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> Ok, in my strive to find out why I am having problems with just one URL, I
> was attempting to make a transaction on this URL, and my firewall client
> reported it was unable to connect to the ISA server.
>
> The Firewall Client is for ISA 2004. I have manually select the ISA server
> selected, with the server name. Just like I had with ISA 2000. The one thing
> I find funny is that instead of having the firewall client manager in the
> control panel, it's now in Programs (off the start menu). Is everyone elses
> like that? Is there a way in ISA 2004 to find why I am getting disconnected?
>
> Reply
>
> "Brandy Nee [MSFT]" May 31, 6:45 am show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages by
> this author
> Date: Tue, 31 May 2005 10:45:19 GMT
> Local: Tues,May 31 2005 6:45 am
> Subject: RE: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> Hello Clevere,
>
> Thank you for posting to the SBS Newsgroup.
>
> From your post, I think your issue is your firewall clients cannot connect
> to the ISA server. If I have misunderstood your issue, please let me know.
>
> Before we go any further, I need to confirm with you for some information:
>
> 1. I am not quite clear your meaning "attempting to make a transaction on
> this URL", please explain it in detailed.
>
> 2. I assume that your firewall clients are using ISA 2004, what is your ISA
> server version, 2000 or 2004?
>
> 3. Does this issue happen to all the firewall clients or some of them?
>
> 4. Can you manually or automatically connect the firewall client to connect
> to the ISA server? To do so,
>
> a) On of the problematic client workstation, in the taskbar, double click
> the Firewall Client icon, and Firewall Client Options comes out.
>
> b) Check the box Automatically/Manually detect ISA server.
>
> c) Click OK, and test whether it connects or not.
>
> 5. Also in the Firewall Client icon, make sure that you have typed the
> right ISA Server address to connect. You can fill in the blank with the ISA
> server FQDN or IP address, and test whether it is connected.
>
> 6. Make sure your ISA service is Started.
>
> Thanks for your time. I am looking forward to hearing from you soon.
>
> Best regards,
>
> Brandy Nee
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> ==============================*=================== ====
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==============================*=================== ====
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> Reply
>
> clevere May 31, 7:39 pm show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: "clevere" <n...@sorry.net> - Find messages by this author
> Date: Tue, 31 May 2005 16:39:36 -0700
> Local: Tues,May 31 2005 7:39 pm
> Subject: Re: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> Brandy-
> Here are you answers:
>
> From your post, I think your issue is your firewall clients cannot connect
> to the ISA server. If I have misunderstood your issue, please let me know.
> Before we go any further, I need to confirm with you for some information:
> 1. I am not quite clear your meaning "attempting to make a transaction on
> this URL", please explain it in detailed
>
>
> .
>
> I am attempting to connect to my online banking system. It's a CGI based
> application that lets you access your bank information. I can email you the
> URL, but I can't post it online. The first time I attempt to access the
> feature of this site, (getting my account info), the page will not load, the
> page can't be displayed. IE reports
> Cannot find server or DNS Error
> Internet Explorer
> If I click back, and then click continue (on the webpage to access my
> account information) everything works. If I attempt to access anything
> internet related when the page won't load, my Firewall client software loses
> it's connection with the ISA server.
>
> 2. I assume that your firewall clients are using ISA 2004, what is your ISA
> server version, 2000 or 2004
>
>
> ?
>
> ISA 2004 Firewall Client, ISA 2004 Server
>
> 3. Does this issue happen to all the firewall clients or some of them
>
>
> ?
> I'm only testing this on one workstation at this time, but the URL access
> problem happens across all the machines on the network. This was not a
> problem with ISA 2000.
>
> 4. Can you manually or automatically connect the firewall client to connect
> to the ISA server? To do so
>
>
> ,
>
> I have it setup manually.
>
> a) On of the problematic client workstation, in the taskbar, double click
> the Firewall Client icon, and Firewall Client Options comes out.
> b) Check the box Automatically/Manually detect ISA server.
> c) Click OK, and test whether it connects or not.
> 5. Also in the Firewall Client icon, make sure that you have typed the
> right ISA Server address to connect. You can fill in the blank with the ISA
> server FQDN or IP address, and test whether it is connected
>
>
> .
>
> I've done this, works everytime. Except when the firewall client loses
> connection to the ISA server. It then takes about 15 seconds before it can
> find the ISA server
>
> 6. Make sure your ISA service is Started.
> It's running on the SBS2K3 box .. quite happily...
>
> Thanks for your time. I am looking forward to hearing from you soon
>
>
> .
>
> This is what my ISA 2004 log says when I attempt to connect to the web site
> in question:
>
> 192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0; Windows
> NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:29 w3proxy VOLE -
> www.customwa.com 66.224.153.131 443 - 596 364 SSL-tunnel TCP -
> www.customwa.com:443 - Inet 995 - SBS Internet Access Rule - Internal
> External 0x8a Failed
> 192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
> SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
> www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
> www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
> External 0x800 Allowed
> 192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
> SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
> www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
> www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
> External 0x800 Allowed
> 192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0; Windows
> NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:30 w3proxy VOLE -
> www.customwa.com 66.224.153.131 443 - 594 341 SSL-tunnel TCP -
> www.customwa.com:443 - Inet 64 - SBS Internet Access Rule - Internal
> External 0x88 Failed
>
> ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> news:...
>
> - Hide quoted text -
> - Show quoted text -
>
>>Hello Clevere,
>
>
>>Thank you for posting to the SBS Newsgroup.
>
>
>>From your post, I think your issue is your firewall clients cannot connect
>>to the ISA server. If I have misunderstood your issue, please let me know.
>
>
>>Before we go any further, I need to confirm with you for some information:
>
>
>>1. I am not quite clear your meaning "attempting to make a transaction on
>>this URL", please explain it in detailed.
>
>
>>2. I assume that your firewall clients are using ISA 2004, what is your
>>ISA
>>server version, 2000 or 2004?
>
>
>>3. Does this issue happen to all the firewall clients or some of them?
>
>
>>4. Can you manually or automatically connect the firewall client to
>>connect
>>to the ISA server? To do so,
>
>
>>a) On of the problematic client workstation, in the taskbar, double click
>>the Firewall Client icon, and Firewall Client Options comes out.
>
>
>>b) Check the box Automatically/Manually detect ISA server.
>
>
>>c) Click OK, and test whether it connects or not.
>
>
>>5. Also in the Firewall Client icon, make sure that you have typed the
>>right ISA Server address to connect. You can fill in the blank with the
>>ISA
>>server FQDN or IP address, and test whether it is connected.
>
>
>>6. Make sure your ISA service is Started.
>
>
>>Thanks for your time. I am looking forward to hearing from you soon.
>
>
>>Best regards,
>
>
>>Brandy Nee
>
>
>>Microsoft CSS Online Newsgroup Support
>
>
>>Get Secure! - www.microsoft.com/security
>
>
>>==============================*================= ======
>>When responding to posts, please "Reply to Group" via your newsreader so
>>that others may learn and benefit from your issue.
>>==============================*================= ======
>
>
>>This posting is provided "AS IS" with no warranties, and confers no
>>rights.
>
>
>
> Reply
>
> clevere Jun 1, 12:18 am show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: "clevere" <n...@sorry.net> - Find messages by this author
> Date: Tue, 31 May 2005 21:18:36 -0700
> Local: Wed,Jun 1 2005 12:18 am
> Subject: Re: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> Hmm .. I made an interesting discovery. If I change the server name in the
> firewall client to the server IP address, I get the slow page load, but I
> can connect to that site without problem.
>
> The firewall client is not able to find the ISA server every time I can't
> access this web site. What does that indicate?
>
> ""
>
> - Hide quoted text -
> - Show quoted text -
> Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> news:...
>
>>Hello Clevere,
>
>
>>Thank you for posting to the SBS Newsgroup.
>
>
>>From your post, I think your issue is your firewall clients cannot connect
>>to the ISA server. If I have misunderstood your issue, please let me know.
>
>
>>Before we go any further, I need to confirm with you for some information:
>
>
>>1. I am not quite clear your meaning "attempting to make a transaction on
>>this URL", please explain it in detailed.
>
>
>>2. I assume that your firewall clients are using ISA 2004, what is your
>>ISA
>>server version, 2000 or 2004?
>
>
>>3. Does this issue happen to all the firewall clients or some of them?
>
>
>>4. Can you manually or automatically connect the firewall client to
>>connect
>>to the ISA server? To do so,
>
>
>>a) On of the problematic client workstation, in the taskbar, double click
>>the Firewall Client icon, and Firewall Client Options comes out.
>
>
>>b) Check the box Automatically/Manually detect ISA server.
>
>
>>c) Click OK, and test whether it connects or not.
>
>
>>5. Also in the Firewall Client icon, make sure that you have typed the
>>right ISA Server address to connect. You can fill in the blank with the
>>ISA
>>server FQDN or IP address, and test whether it is connected.
>
>
>>6. Make sure your ISA service is Started.
>
>
>>Thanks for your time. I am looking forward to hearing from you soon.
>
>
>>Best regards,
>
>
>>Brandy Nee
>
>
>>Microsoft CSS Online Newsgroup Support
>
>
>>Get Secure! - www.microsoft.com/security
>
>
>>==============================*================= ======
>>When responding to posts, please "Reply to Group" via your newsreader so
>>that others may learn and benefit from your issue.
>>==============================*================= ======
>
>
>>This posting is provided "AS IS" with no warranties, and confers no
>>rights.
>
>
>
> Reply
>
> clevere Jun 1, 12:22 am show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: "clevere" <n...@sorry.net> - Find messages by this author
> Date: Tue, 31 May 2005 21:22:53 -0700
> Local: Wed,Jun 1 2005 12:22 am
> Subject: Re: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> I may have spoken too soon on the finding the ISA server via the IP
> address...
>
> But the firewall client is losing connection or dropping it with the ISA
> server.
>
> "clevere" <n...@sorry.net> wrote in message
>
>
> news:...
>
> - Hide quoted text -
> - Show quoted text -
>
>>Hmm .. I made an interesting discovery. If I change the server name in the
>>firewall client to the server IP address, I get the slow page load, but I
>>can connect to that site without problem.
>
>
>>The firewall client is not able to find the ISA server every time I can't
>>access this web site. What does that indicate?
>
>
>>""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
>>news:...
>>
>>>Hello Clevere,
>
>
>>>Thank you for posting to the SBS Newsgroup.
>
>
>>>From your post, I think your issue is your firewall clients cannot
>>>connect
>>>to the ISA server. If I have misunderstood your issue, please let me
>>>know.
>
>
>>>Before we go any further, I need to confirm with you for some
>>>information:
>
>
>>>1. I am not quite clear your meaning "attempting to make a transaction on
>>>this URL", please explain it in detailed.
>
>
>>>2. I assume that your firewall clients are using ISA 2004, what is your
>>>ISA
>>>server version, 2000 or 2004?
>
>
>>>3. Does this issue happen to all the firewall clients or some of them?
>
>
>>>4. Can you manually or automatically connect the firewall client to
>>>connect
>>>to the ISA server? To do so,
>
>
>>>a) On of the problematic client workstation, in the taskbar, double click
>>>the Firewall Client icon, and Firewall Client Options comes out.
>
>
>>>b) Check the box Automatically/Manually detect ISA server.
>
>
>>>c) Click OK, and test whether it connects or not.
>
>
>>>5. Also in the Firewall Client icon, make sure that you have typed the
>>>right ISA Server address to connect. You can fill in the blank with the
>>>ISA
>>>server FQDN or IP address, and test whether it is connected.
>
>
>>>6. Make sure your ISA service is Started.
>
>
>>>Thanks for your time. I am looking forward to hearing from you soon.
>
>
>>>Best regards,
>
>
>>>Brandy Nee
>
>
>>>Microsoft CSS Online Newsgroup Support
>
>
>>>Get Secure! - www.microsoft.com/security
>
>
>>>==============================*================ =======
>>>When responding to posts, please "Reply to Group" via your newsreader so
>>>that others may learn and benefit from your issue.
>>>==============================*================ =======
>
>
>>>This posting is provided "AS IS" with no warranties, and confers no
>>>rights.
>
>
>
> Reply
>
> "Brandy Nee [MSFT]" Jun 1, 7:04 am show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages by
> this author
> Date: Wed, 01 Jun 2005 11:04:51 GMT
> Local: Wed,Jun 1 2005 7:04 am
> Subject: Re: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> Hello Clevere,
>
> Thank you for posting back.
>
> From your reply, I think this maybe is a very complicated issue. Please
> understand that we may take time to do more further research, and we also
> need your assistance to collect more error information.
>
> 1. Unlike ISA Server 2000, it is by design that the Firewall Client of ISA
> 2004 is listed in the Programs as you mentioned, so please do not worry
> about it.
>
> 2. When the connection is rejected by the ISA, the Firewall Client will
> temporarily display "not connected" for about 15 seconds.
>
> 3. Please configure ISA's internal NIC as the proxy in the IE | Internet
> Options | Connections tab | LAN Settings button, and then test whether it
> works now. To do so, type the IP address of the ISA internal NIC into the
> proxy server name, and then type the Port of internal NIC that the ISA is
> monitoring into the port box.
>
> 4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
> come from the SBS 2K3 SP1 Premium Edition or from the retail version of the
> ISA Server 2004?
>
> Thanks for your time. I am looking forward to your reply.
>
> Best regards,
> Brandy Nee
> Microsoft CSS Online Newsgroup Support
> Get Secure! - www.microsoft.com/security
> ==============================*=================== ====
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==============================*=================== ====
> This posting is provided "AS IS" with no warranties, and confers no rights
>
>
> .
>
> Reply
>
> clevere Jun 1, 12:17 pm show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: "clevere" <n...@sorry.net> - Find messages by this author
> Date: Wed, 1 Jun 2005 09:17:33 -0700
> Local: Wed,Jun 1 2005 12:17 pm
> Subject: Re: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> Hi Brandy-
> Thanks for replying, I'd really like to know why ISA 2004 is killing my
> connection
>
> Here are you answers:
>
> From your reply, I think this maybe is a very complicated issue. Please
> understand that we may take time to do more further research, and we also
> need your assistance to collect more error information.
> 1. Unlike ISA Server 2000, it is by design that the Firewall Client of ISA
> 2004 is listed in the Programs as you mentioned, so please do not worry
> about it
>
>
> .
>
> Ok, no worries there then.
>
> 2. When the connection is rejected by the ISA, the Firewall Client will
> temporarily display "not connected" for about 15 seconds
>
>
> .
>
> That explains something, that ISA is rejecting the connection from my
> workstation, but why?
>
> 3. Please configure ISA's internal NIC as the proxy in the IE | Internet
> Options | Connections tab | LAN Settings button, and then test whether it
> works now. To do so, type the IP address of the ISA internal NIC into the
> proxy server name, and then type the Port of internal NIC that the ISA is
> monitoring into the port box
>
>
> .
>
> Did that, didn't change a thing. As soon as I try to access information on
> www.customwaNOSPAM.com The firewall client loses connection with the server,
> and poof, there goes my internet connection.
>
> 4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
> come from the SBS 2K3 SP1 Premium Edition or from the retail version of the
> ISA Server 2004
>
>
> ?
>
> Yes, I installed SBS 2k3 SP1 Premium Edition. The ISA 2004 comes from the
> SBS2K3 SP1 Premium CD set you order over the internet. I upgraded as
> follows:
>
> Downloaded SBS2K3 SP1 (per the Microsoft instructions) from the internet,
> installed it, and was up and running with little trouble. Ordered my CD's,
> got My CD's, and install ISA 2004... that's when the problem started to
> happen. I don't know if you saw this in my last post, but this is what ISA
> is saying when I attempt to access that web site:
>
> 192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0; Windows
> NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:29 w3proxy VOLE -
> www.customwa.com 66.224.153.131 443 - 596 364 SSL-tunnel TCP -
> www.customwa.com:443 - Inet 995 - SBS Internet Access Rule - Internal
> External 0x8a Failed
> 192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
> SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
> www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
> www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
> External 0x800 Allowed
> 192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0
>
>
> ; Windows NT 5.1;
> SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
> www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
> www.customwa.com:443 - Inet 407 -
>
> SBS Internet Access Rule - Internal
> External 0x800 Allowed
> 192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE
>
>
> 6.0; Windows
> NT 5.1;
>
> SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:30 w3proxy VOLE -
> www.customwa.com 66.224.153.131 443 - 594 341 SSL-tunnel TCP -
> www.customwa.com:443 - Inet 64 - SBS Internet Access Rule - Internal
> External 0x88 Failed
>
>
> I am using IE, with the latest Service Pack install on Windows XP SP2.
>
> Just out of curiousity, and from a recommendation from another SBS member, I
> deleted all the ISA rules, and re-ran the Connect to the Internet Wizard. It
> recreated all the appropriate ISA rules, but my problem still exists.
>
> ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> news:ms%...
>
> - Hide quoted text -
> - Show quoted text -
>
>>Hello Clevere,
>
>
>>Thank you for posting back.
>
>
>>From your reply, I think this maybe is a very complicated issue. Please
>>understand that we may take time to do more further research, and we also
>>need your assistance to collect more error information.
>
>
>>1. Unlike ISA Server 2000, it is by design that the Firewall Client of ISA
>>2004 is listed in the Programs as you mentioned, so please do not worry
>>about it.
>
>
>>2. When the connection is rejected by the ISA, the Firewall Client will
>>temporarily display "not connected" for about 15 seconds.
>
>
>>3. Please configure ISA's internal NIC as the proxy in the IE | Internet
>>Options | Connections tab | LAN Settings button, and then test whether it
>>works now. To do so, type the IP address of the ISA internal NIC into the
>>proxy server name, and then type the Port of internal NIC that the ISA is
>>monitoring into the port box.
>
>
>>4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
>>come from the SBS 2K3 SP1 Premium Edition or from the retail version of
>>the
>>ISA Server 2004?
>
>
>>Thanks for your time. I am looking forward to your reply.
>
>
>>Best regards,
>
>
>>Brandy Nee
>
>
>>Microsoft CSS Online Newsgroup Support
>
>
>>Get Secure! - www.microsoft.com/security
>
>
>>==============================*================= ======
>>When responding to posts, please "Reply to Group" via your newsreader so
>>that others may learn and benefit from your issue.
>>==============================*================= ======
>
>
>>This posting is provided "AS IS" with no warranties, and confers no
>>rights.
>
>
>
> Reply
>
> "Brandy Nee [MSFT]" Jun 2, 7:03 am show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages by
> this author
> Date: Thu, 02 Jun 2005 11:03:11 GMT
> Local: Thurs,Jun 2 2005 7:03 am
> Subject: Re: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> Hello Clevere,
>
> Thank you for posting back.
>
> As I have stated in my last reply, this is a very complcated issue. To
> perform more further research, please take your time and help us to gather
> the following information:
>
> [Note]: This information is very important for us to isolate and resolve
> this issue.
>
> 1. IPCONFIG /ALL results on the SBS.
>
> 2. The network diagram that includes the IP addresses range for each
> network.
>
> 3. ISA Info:
>
> 1) Download the file from the following URL:
>
> http://www.isatools.org/isainf*o/ISAInfo.zip
>
> 2) Extract all files to a folder on ISA server.
>
> 3) Double click Isainfo.js. This will generate 2 files
> ISAInfo2004-<computer-name>.lo*g and ISAInfo2004-<computer-name>.xm*l in the
> current folder.
>
> 4) Attach the files and send it to v-bra...@microsoft.com
>
> 4. Gather the ISA logs:
>
> 1) Schedule a down time.
>
> 2) Open ISA 2004 management console.
>
> 3) Expand the server node and highlight 'Monitoring'.
>
> 4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
> Pane' is showed there.
>
> 5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
> Tasks', and then switch the 'log storage format' from 'MSDE database'
> (default) to 'File'.
>
> 6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
>
> 7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
> Tasks', and then switch the 'log storage format' from 'MSDE database'
> (default) to 'File'.
>
> 8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
>
> 9) Click 'Apply' to save changes and update the configuration.
>
> 10) Temporarily disable the Firewall service. To do that, please click
> Monitoring | Services tab, and then right click 'Microsoft Firewall' to
> choose 'Stop'.
>
> 11) Clear the current existing W3C logs. To do that, go to the log saving
> directory and clean any existing .W3C logs. By default, the logs will be
> saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may not
> be able to deleted, that's normal.) You may backup them first and then
> delete them.
>
> 12) Go back to the ISA 2004 management console, and then Start the stopped
> 'Microsoft Firewall' service.
>
> 13) Reproduce the problem, stop the service, and then attach the resulting
> W3C files to the newsgroup.
>
> 14) Please also let me know the IP address of the testing clients so that I
> can filter the data.
>
> Best regards,
> Brandy Nee
> Microsoft CSS Online Newsgroup Support
> Get Secure! - www.microsoft.com/security
> ==============================*=================== ====
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==============================*=================== ====
> This posting is provided "AS IS" with no warranties, and confers no rights
>
>
> .
>
> Reply
>
> clevere Jun 3, 1:18 am show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: "clevere" <n...@sorry.net> - Find messages by this author
> Date: Thu, 2 Jun 2005 22:18:24 -0700
> Local: Fri,Jun 3 2005 1:18 am
> Subject: Re: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> Thanks for the reply Brandy, I'll start getting you this information
> tomorrow in the AM!
>
> ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> news:...
>
> - Hide quoted text -
> - Show quoted text -
>
>>Hello Clevere,
>
>
>>Thank you for posting back.
>
>
>>As I have stated in my last reply, this is a very complcated issue. To
>>perform more further research, please take your time and help us to
>>gather
>>the following information:
>
>
>>[Note]: This information is very important for us to isolate and resolve
>>this issue.
>
>
>>1. IPCONFIG /ALL results on the SBS.
>
>
>>2. The network diagram that includes the IP addresses range for each
>>network.
>
>
>>3. ISA Info:
>
>
>>1) Download the file from the following URL:
>
>
>>http://www.isatools.org/isainf*o/ISAInfo.zip
>
>
>>2) Extract all files to a folder on ISA server.
>
>
>>3) Double click Isainfo.js. This will generate 2 files
>>ISAInfo2004-<computer-name>.lo*g and ISAInfo2004-<computer-name>.xm*l in
>
> the
>
>>current folder.
>
>
>>4) Attach the files and send it to v-bra...@microsoft.com
>
>
>>4. Gather the ISA logs:
>
>
>>1) Schedule a down time.
>
>
>>2) Open ISA 2004 management console.
>
>
>>3) Expand the server node and highlight 'Monitoring'.
>
>
>>4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
>>Pane' is showed there.
>
>
>>5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
>>Tasks', and then switch the 'log storage format' from 'MSDE database'
>>(default) to 'File'.
>
>
>>6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
>
>
>>7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
>>Tasks', and then switch the 'log storage format' from 'MSDE database'
>>(default) to 'File'.
>
>
>>8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
>
>
>>9) Click 'Apply' to save changes and update the configuration.
>
>
>>10) Temporarily disable the Firewall service. To do that, please click
>>Monitoring | Services tab, and then right click 'Microsoft Firewall' to
>>choose 'Stop'.
>
>
>>11) Clear the current existing W3C logs. To do that, go to the log saving
>>directory and clean any existing .W3C logs. By default, the logs will be
>>saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
>>not
>>be able to deleted, that's normal.) You may backup them first and then
>>delete them.
>
>
>>12) Go back to the ISA 2004 management console, and then Start the stopped
>>'Microsoft Firewall' service.
>
>
>>13) Reproduce the problem, stop the service, and then attach the resulting
>>W3C files to the newsgroup.
>
>
>>14) Please also let me know the IP address of the testing clients so that
>>I
>>can filter the data.
>
>
>>Best regards,
>
>
>>Brandy Nee
>
>
>>Microsoft CSS Online Newsgroup Support
>
>
>>Get Secure! - www.microsoft.com/security
>
>
>>==============================*================= ======
>>When responding to posts, please "Reply to Group" via your newsreader so
>>that others may learn and benefit from your issue.
>>==============================*================= ======
>
>
>>This posting is provided "AS IS" with no warranties, and confers no
>>rights.
>
>
>
> Reply
>
> clevere Jun 3, 2:50 am show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: "clevere" <n...@sorry.net> - Find messages by this author
> Date: Thu, 2 Jun 2005 23:50:47 -0700
> Local: Fri,Jun 3 2005 2:50 am
> Subject: Re: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> Good morning Brandy-
>
> Please check your email, you have some information from me.
>
> ""
>
> - Hide quoted text -
> - Show quoted text -
> Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> news:...
>
>>Hello Clevere,
>
>
>>Thank you for posting back.
>
>
>>As I have stated in my last reply, this is a very complcated issue. To
>>perform more further research, please take your time and help us to
>>gather
>>the following information:
>
>
>>[Note]: This information is very important for us to isolate and resolve
>>this issue.
>
>
>>1. IPCONFIG /ALL results on the SBS.
>
>
>>2. The network diagram that includes the IP addresses range for each
>>network.
>
>
>>3. ISA Info:
>
>
>>1) Download the file from the following URL:
>
>
>>http://www.isatools.org/isainf*o/ISAInfo.zip
>
>
>>2) Extract all files to a folder on ISA server.
>
>
>>3) Double click Isainfo.js. This will generate 2 files
>>ISAInfo2004-<computer-name>.lo*g and ISAInfo2004-<computer-name>.xm*l in
>
> the
>
>>current folder.
>
>
>>4) Attach the files and send it to v-bra...@microsoft.com
>
>
>>4. Gather the ISA logs:
>
>
>>1) Schedule a down time.
>
>
>>2) Open ISA 2004 management console.
>
>
>>3) Expand the server node and highlight 'Monitoring'.
>
>
>>4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
>>Pane' is showed there.
>
>
>>5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
>>Tasks', and then switch the 'log storage format' from 'MSDE database'
>>(default) to 'File'.
>
>
>>6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
>
>
>>7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
>>Tasks', and then switch the 'log storage format' from 'MSDE database'
>>(default) to 'File'.
>
>
>>8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
>
>
>>9) Click 'Apply' to save changes and update the configuration.
>
>
>>10) Temporarily disable the Firewall service. To do that, please click
>>Monitoring | Services tab, and then right click 'Microsoft Firewall' to
>>choose 'Stop'.
>
>
>>11) Clear the current existing W3C logs. To do that, go to the log saving
>>directory and clean any existing .W3C logs. By default, the logs will be
>>saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
>>not
>>be able to deleted, that's normal.) You may backup them first and then
>>delete them.
>
>
>>12) Go back to the ISA 2004 management console, and then Start the stopped
>>'Microsoft Firewall' service.
>
>
>>13) Reproduce the problem, stop the service, and then attach the resulting
>>W3C files to the newsgroup.
>
>
>>14) Please also let me know the IP address of the testing clients so that
>>I
>>can filter the data.
>
>
>>Best regards,
>
>
>>Brandy Nee
>
>
>>Microsoft CSS Online Newsgroup Support
>
>
>>Get Secure! - www.microsoft.com/security
>
>
>>==============================*================= ======
>>When responding to posts, please "Reply to Group" via your newsreader so
>>that others may learn and benefit from your issue.
>>==============================*================= ======
>
>
>>This posting is provided "AS IS" with no warranties, and confers no
>>rights.
>
>
>
> Reply
>
> clevere Jun 5, 3:09 am show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: "clevere" <n...@sorry.net> - Find messages by this author
> Date: Sun, 5 Jun 2005 00:09:09 -0700
> Local: Sun,Jun 5 2005 3:09 am
> Subject: Re: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> While waiting for Brandy to reply to me, I discovered something interesting.
> If I disable ISA 2004's Web Proxy, everything works as you should expect
> (all be it a little slower)..
> Anyone got a take on that?
>
> "clevere" <n...@sorry.net> wrote in message
>
>
> news:...
>
> - Hide quoted text -
> - Show quoted text -
>
>>Ok, in my strive to find out why I am having problems with just one URL, I
>>was attempting to make a transaction on this URL, and my firewall client
>>reported it was unable to connect to the ISA server.
>
>
>>The Firewall Client is for ISA 2004. I have manually select the ISA server
>>selected, with the server name. Just like I had with ISA 2000. The one
>>thing I find funny is that instead of having the firewall client manager
>>in the control panel, it's now in Programs (off the start menu). Is
>>everyone elses like that? Is there a way in ISA 2004 to find why I am
>>getting disconnected?
>
>
>
> Reply
>
> "Brandy Nee [MSFT]" Jun 6, 6:32 am show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages by
> this author
> Date: Mon, 06 Jun 2005 10:32:39 GMT
> Local: Mon,Jun 6 2005 6:32 am
> Subject: Re: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> Hello Clevere,
>
> Thank you for posting back.
>
> I have received your logs. Please be patient that I am doing researching on
> your issue now. To better filter your issue, I would like to know what
> exactly the URL you failed to access. Can you please paste the URL link to
> my email address?
>
> Thanks for your cooperation and time. I am looking forward to hearing from
> you.
>
> Best regards,
> Brandy Nee
> Microsoft CSS Online Newsgroup Support
> Get Secure! - www.microsoft.com/security
> ==============================*=================== ====
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==============================*=================== ====
> This posting is provided "AS IS" with no warranties, and confers no rights
>
>
> .
>
> Reply
>
> "Brandy Nee [MSFT]" Jun 7, 6:31 am show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages by
> this author
> Date: Tue, 07 Jun 2005 10:31:04 GMT
> Local: Tues,Jun 7 2005 6:31 am
> Subject: Re: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> Hello Clevere,
>
> Thank you for posting back.
>
> I have received your email. After a long time research on your logs, I
> found there are some errors occur when the Firewall Clients pass the
> authentication to the ISA. Please try the following steps:
>
> 1. On the problematic client, temporarily disable the Firewall Client.
>
> 2. Close all IE windows.
>
> 3. Open Internet Options | Connections tab | LAN Settings button, configure
> the ISA's internal NIC as the proxy.
>
> 4. Launch IE to access that URL again to see if the problem still exists.
>
> If this issue persists, please help to gather the following information:
>
> 1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out the
> steps how you did that? Do you mean that you disabled HTTP Filter under
> Internet Security & Acceleration Server
> 2004\Yourserver\Configuration\*Add-in?
>
> 2. Are there any error messages in the System event log and the Application
> event log? Please export the events into .evt files and then send to you.
>
> I am greatly appreciated your time and cooperation. If anything unclear,
> please let me know.
>
> I am looking forward to hearing from you!
> Best regards,
> Brandy Nee
> Microsoft CSS Online Newsgroup Support
> Get Secure! - www
> .microsoft.com/security
> ==============================*=================== ====
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==============================*=================== ====
> This posting is provided "AS IS" with no warranties, and confers no rights
>
>
> .
>
> Reply
>
> clevere Jun 8, 4:20 am show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: "clevere" <n...@sorry.net> - Find messages by this author
> Date: Wed, 8 Jun 2005 01:20:27 -0700
> Local: Wed,Jun 8 2005 4:20 am
> Subject: Re: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> Hi Brandy-
> Alright, this is odd.
>
> I had to re-enable Web Proxy, for my network (I turned it off). I did they
> by Going to the ISA manager, clicking in Networks, right-clicking on the
> Internal network, and disabling Web Proxy.
>
> With the web proxy enabled, I disabled the firewall client, and put in IE to
> use my server, at port 8080 for the proxy server.
>
> I was unable to access the website in question. I turned on the Firewall
> Client, told IE to just "Auto matically detect connection settings" (so that
> it no longer used Proxy Server), and I could access the web site.
>
> With the "Web Proxy" running, some sites seem to be having problems loading,
> but that could be because SBS is doing it's mid-week backup. This I can
> continue to test, I'll leave the Web Proxy turned on for now, and see how it
> performs during the day.
>
> As far as IE goes, shouldn't I be able to tell it to use this proxy server,
> and be good to go? Do you need any logs?
>
> There are no event ID's in the event viewer.
>
> ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> news:...
>
> - Hide quoted text -
> - Show quoted text -
>
>>Hello Clevere,
>
>
>>Thank you for posting back.
>
>
>>I have received your logs. Please be patient that I am doing researching
>>on
>>your issue now. To better filter your issue, I would like to know what
>>exactly the URL you failed to access. Can you please paste the URL link to
>>my email address?
>
>
>>Thanks for your cooperation and time. I am looking forward to hearing from
>>you.
>
>
>>Best regards,
>
>
>>Brandy Nee
>
>
>>Microsoft CSS Online Newsgroup Support
>
>
>>Get Secure! - www.microsoft.com/security
>
>
>>==============================*================= ======
>>When responding to posts, please "Reply to Group" via your newsreader so
>>that others may learn and benefit from your issue.
>>==============================*================= ======
>
>
>>This posting is provided "AS IS" with no warranties, and confers no
>>rights.
>
>
>
> Reply
>
> "Brandy Nee [MSFT]" Jun 9, 7:19 am show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages by
> this author
> Date: Thu, 09 Jun 2005 11:19:41 GMT
> Local: Thurs,Jun 9 2005 7:19 am
> Subject: Re: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> Hello Clever,
>
> Thank you for posting back.
>
> Please see my information below:
>
> 1. If you disabled the Web Proxy, whatever you enabled "Automatically
> detect connection settings", IE will not directly pass the request to the
> ISA. Instead, the Firewall Client will pass the IE requests to the ISA so
> it works.
>
> 2. To use "Automatically detect connection settings", we need to enable
> WPAD on the ISA. Please See:
>
> 309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
> Windows 2000
> http://support.microsoft.com/?*id=309814
>
> 816320 How to configure firewall and Web proxy client Autodiscovery in
> Windows Server 2003
> http://support.microsoft.com/?*id=816320
>
> Configuring DHCP and DNS for ISA automatic discovery
> http://www.isaserver.org/tutor*ials/...auto*matic-dis....
> html
>
> We need to configure either on DHCP or on DNS for the WPAD record. For the
> DHCP way, we do not recommend do that since there are many known issues.
> For the DNS way, it needs to use the port 80 on the internal NIC. However,
> since the services on the SBS needs the port 80 on the internal NIC, we are
> unable to use DNS to configure WPAD.
>
> As a conclusion, we are unable to enable "Automatically detect connection
> settings" in a SBS environment. If you really want to do that, you must use
> the DHCP way.
>
> 3. In your scenario, you should always manually set SBS' internal NIC as
> the proxy in Internet options instead of enabling "Automatically detect
> connection settings"
>
> Hope the information helps. If anything is
>
> unclear, please let me know. I
> am looking forward to hearing from you
> Best regards,
> Brandy Nee
> Microsoft CSS Online Newsgroup Support
> Get Secure! - www
> .microsoft.com/security
> ==============================*=================== ====
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ==============================*=================== ====
> This posting is provided "AS IS" with no warranties, and confers no rights
>
>
> .
>
> Reply
>
> clevere Jun 9, 1:20 pm show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: "clevere" <n...@noway.net> - Find messages by this author
> Date: Thu, 9 Jun 2005 10:20:15 -0700
> Local: Thurs,Jun 9 2005 1:20 pm
> Subject: Re: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> I'm afraid you misunderstood what I was saying. I was doing what you
> recommended:
>
> I have received your email. After a long time research on your logs, I
> found there are some errors occur when the Firewall Clients pass the
> authentication to the ISA. Please try the following steps:
> 1. On the problematic client, temporarily disable the Firewall Client
>
>
> .
>
> Done
>
> 2. Close all IE windows.
>
> Done
>
> 3. Open Internet Options | Connections tab | LAN Settings button, configure
> the ISA's internal NIC as the proxy
>
>
> .
>
> Did that.
>
> 4. Launch IE to access that URL again to see if the problem still exists
>
>
> .
> Yes, the problem presists.
>
> If this issue persists, please help to gather the following information:
> 1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out the
> steps how you did that? Do you mean that you disabled HTTP Filter under
> Internet Security & Acceleration Server
> 2004\Yourserver\Configuration\*Add-in
>
>
> ?
>
> No, I disabled Web Proxy under ISA
> 2004\Myserver\Configuration\Ne*twork\Internal Network\Properties\Web Proxy
>
> 2. Are there any error messages in the System event log and the Application
> event log? Please export the events into .evt files and then send to you
>
>
> .
>
> No, there are none.
>
> Does that make more sense? I had to re-enable the Web Proxy for the internal
> network in ISA to do the testing you asked, Because I had turned it off.
> After I turned it OFF, I could no longer use "Use this Proxy Server" in IE,
> because the proxy server was turned off. So I had to reconfigure IE to just
> Automatically detect the settings, so it would work with the web Proxy
> turned off.
>
> Does that make sense?
>
> ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> news:...
>
> - Hide quoted text -
> - Show quoted text -
>
>>Hello Clever,
>
>
>>Thank you for posting back.
>
>
>>Please see my information below:
>
>
>>1. If you disabled the Web Proxy, whatever you enabled "Automatically
>>detect connection settings", IE will not directly pass the request to the
>>ISA. Instead, the Firewall Client will pass the IE requests to the ISA so
>>it works.
>
>
>>2. To use "Automatically detect connection settings", we need to enable
>>WPAD on the ISA. Please See:
>
>
>>309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
>>Windows 2000
>>http://support.microsoft.com/?*id=309814
>
>
>>816320 How to configure firewall and Web proxy client Autodiscovery in
>>Windows Server 2003
>>http://support.microsoft.com/?*id=816320
>
>
>>Configuring DHCP and DNS for ISA automatic discovery
>
>
> http://www.isaserver.org/tutor*ials/...auto*matic-dis....
>
>>html
>
>
>>We need to configure either on DHCP or on DNS for the WPAD record. For the
>>DHCP way, we do not recommend do that since there are many known issues.
>>For the DNS way, it needs to use the port 80 on the internal NIC. However,
>>since the services on the SBS needs the port 80 on the internal NIC, we
>
> are
>
>>unable to use DNS to configure WPAD.
>
>
>>As a conclusion, we are unable to enable "Automatically detect connection
>>settings" in a SBS environment. If you really want to do that, you must
>
> use
>
>>the DHCP way.
>
>
>>3. In your scenario, you should always manually set SBS' internal NIC as
>>the proxy in Internet options instead of enabling "Automatically detect
>>connection settings"
>
>
>>Hope the information helps. If anything is unclear, please let me know. I
>>am looking forward to hearing from you
>
>
>>Best regards,
>
>
>>Brandy Nee
>
>
>>Microsoft CSS Online Newsgroup Support
>
>
>>Get Secure! - www.microsoft.com/security
>
>
>>==============================*================= ======
>>When responding to posts, please "Reply to Group" via your newsreader so
>>that others may learn and benefit from your issue.
>>==============================*================= ======
>
>
>>This posting is provided "AS IS" with no warranties, and confers no
>
> rights
>
>
> .
>
> - Hide quoted text -
> - Show quoted text -
>
>
> Reply
>
> clevere Jun 13, 10:43 am show options
>
> Newsgroups: microsoft.public.windows.server.sbs
> From: "clevere" <n...@noway.net> - Find messages by this author
> Date: Mon, 13 Jun 2005 07:43:13 -0700
> Local: Mon,Jun 13 2005 10:43 am
> Subject: Re: Firewall Client disconnects?
> Reply | Reply to Author | Forward | Print | Individual Message | Show
> original | Report Abuse
>
> I'm afraid you misunderstood what I was saying. I was doing what you
> recommended
>
>
> , and your answers are below:
>
> - Hide quoted text -
> - Show quoted text -
> I have received your email. After a long time research on your logs
> , I
> found
> there
> are
> some
> errors
> occur
> when
> the
> Firewall
> Clients
> pass
> the
> authentication
> to
> the
> ISA
> . Please
> try
> the
> following
> steps
> :
> 1
> . On
> the
> problematic
> client
> , temporarily
> disable
> the
> Firewall
> Client
> .
> Done
> 2. Close all IE windows.
> Done
> 3. Open Internet Options | Connections tab | LAN Settings button, configure
> the ISA's
> internal
> NIC
> as
> the
> proxy
> .
> Did that.
> 4. Launch IE to access that URL again to see if the
> problem
> still
> exists
> .
> Yes, the problem presists.
> If this issue persists, please help to gather the following information:
> 1
> . You
> mentioned
> "disable
> ISA
> 2004's
> Web
> Proxy
> ". Please
> fully
> give
> out
> the
> steps
> how
> you
> did
> that
> ? Do
> you
> mean
> that
> you
> disabled
> HTTP
> Filter
> under
> Internet
> Security
> & Acceleration
> Server
> 2004
> \Yourserver
> \Configuration
> \Add
> -in
> ?
> No, I disabled Web Proxy under ISA
> 2004\Myserver\Configuration\Ne*twork\Internal Network\Properties\Web Proxy
> 2. Are there any error messages in the System event log and
> the
> Application
> event
> log
> ? Please
> export
> the
> events
> into
> .evt
> files
> and
> then
> send
> to
> you
> .
> No, there are none.
> Does that make more sense? I had to re-enable the Web Proxy for the internal
> network in ISA to do the testing you asked, Because I had turned it off.
> After I turned it OFF, I could no longer use "Use this Proxy Server" in IE,
> because the proxy server was turned off. So I had to reconfigure IE to just
> Automatically detect the settings, so it would work with the web Proxy
> turned off.
> Does that make sense?
> ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> news:...
>
>>Hello Clever,
>
>
>>Thank you for posting back.
>
>
>>Please see my information below:
>
>
>>1. If you disabled the Web Proxy, whatever you enabled "Automatically
>>detect connection settings", IE will not directly pass the request to the
>>ISA. Instead, the Firewall Client will pass the IE requests to the ISA so
>>it works.
>
>
>>2. To use "Automatically detect connection settings", we need to enable
>>WPAD on the ISA. Please See:
>
>
>>309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
>>Windows 2000
>>http://support.microsoft.com/?*id=309814
>
>
>>816320 How to configure firewall and Web proxy client Autodiscovery in
>>Windows Server 2003
>>http://support.microsoft.com/?*id=816320
>
>
>>Configuring DHCP and DNS for ISA automatic discovery
>
>
> http
> ://www
> .isaserver
> .org
> /tutorials
> /Configuring
> -DHCP
> -DNS
> -automatic
> -discovery
> .
>
>>html
>
>
>>We need to configure either on DHCP or on DNS for the WPAD record. For the
>>DHCP way, we do not recommend do that since there are many known issues.
>>For the DNS way, it needs to use the port 80 on the internal NIC. However,
>>since the services on the SBS needs the port 80 on the internal NIC, we
>
> are
>
>>unable to use DNS to configure WPAD.
>
>
>>As a conclusion, we are unable to enable "Automatically detect connection
>>settings" in a SBS environment. If you really want to do that, you must
>
> use
>
>>the DHCP way.
>
>
>>3. In your scenario, you should always manually set SBS' internal NIC as
>>the proxy in Internet options instead of enabling "Automatically detect
>>connection settings"
>
>
>>Hope the information helps. If anything is unclear, please let me know. I
>>am looking forward to hearing from you
>
>
>>Best regards,
>
>
>>Brandy Nee
>
>
>>Microsoft CSS Online Newsgroup Support
>
>
>>Get Secure! - www.microsoft.com/security
>
>
>>==============================*================= ======
>>When responding to posts, please "Reply to Group" via your newsreader so
>>that others may learn and benefit from your issue.
>>==============================*================= ======
>
>
>>This posting is provided "AS IS" with no warranties, and confers no
>
> rights
>
>
> .
>
> "clevere" <n...@noway.net> wrote in message
>
>
> news:...
>
> - Hide quoted text -
> - Show quoted text -
>
>>I'm afraid you misunderstood what I was saying. I was doing what you
>>recommended:
>
>
>>I have received your email. After a long time research on your logs, I
>>found there are some errors occur when the Firewall Clients pass the
>>authentication to the ISA. Please try the following steps:
>
>
>>1. On the problematic client, temporarily disable the Firewall Client.
>
>
>>Done
>
>
>>2. Close all IE windows.
>
>
>>Done
>
>
>>3. Open Internet Options | Connections tab | LAN Settings button,
>
> configure
>
>>the ISA's internal NIC as the proxy.
>
>
>>Did that.
>
>
>>4. Launch IE to access that URL again to see if the problem still exists.
>>Yes, the problem presists.
>
>
>>If this issue persists, please help to gather the following information:
>
>
>>1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out the
>>steps how you did that? Do you mean that you disabled HTTP Filter under
>>Internet Security & Acceleration Server
>>2004\Yourserver\Configuration\*Add-in?
>
>
>>No, I disabled Web Proxy under ISA
>>2004\Myserver\Configuration\Ne*twork\Internal Network\Properties\Web Proxy
>
>
>>2. Are there any error messages in the System event log and the
>
> Application
>
>>event log? Please export the events into .evt files and then send to you.
>
>
>>No, there are none.
>
>
>>Does that make more sense? I had to re-enable the Web Proxy for the
>
> internal
>
>>network in ISA to do the testing you asked, Because I had turned it off.
>>After I turned it OFF, I could no longer use "Use this Proxy Server" in
>
> IE,
>
>>because the proxy server was turned off. So I had to reconfigure IE to
>
> just
>
>>Automatically detect the settings, so it would work with the web Proxy
>>turned off.
>
>
>>Does that make sense?
>
>
>>""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
>>news:...
>>
>>>Hello Clever,
>
>
>>>Thank you for posting back.
>
>
>>>Please see my information below:
>
>
>>>1. If you disabled the Web Proxy, whatever you enabled "Automatically
>>>detect connection settings", IE will not directly pass the request to
>
> the
>
>>>ISA. Instead, the Firewall Client will pass the IE requests to the ISA
>
> so
>
>>>it works.
>
>
>>>2. To use "Automatically detect connection settings", we need to enable
>>>WPAD on the ISA. Please See:
>
>
>>>309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
>>>Windows 2000
>>>http://support.microsoft.com/?*id=309814
>
>
>>>816320 How to configure firewall and Web proxy client Autodiscovery in
>>>Windows Server 2003
>>>http://support.microsoft.com/?*id=816320
>
>
>>>Configuring DHCP and DNS for ISA automatic discovery
>
>
>
> http://www.isaserver.org/tutor*ials/...auto*matic-dis....
>
> - Hide quoted text -
> - Show quoted text -
>
>>>html
>
>
>>>We need to configure either on DHCP or on DNS for the WPAD record. For
>
> the
>
>>>DHCP way, we do not recommend do that since there are many known issues.
>>>For the DNS way, it needs to use the port 80 on the internal NIC.
>
> However,
>
>>>since the services on the SBS needs the port 80 on the internal NIC, we
>>
>>are
>>
>>>unable to use DNS to configure WPAD.
>
>
>>>As a conclusion, we are unable to enable "Automatically detect
>
> connection
>
>>>settings" in a SBS environment. If you really want to do that, you must
>>
>>use
>>
>>>the DHCP way.
>
>
>>>3. In your scenario, you should always manually set SBS' internal NIC as
>>>the proxy in Internet options instead of enabling "Automatically detect
>>>connection settings"
>
>
>>>Hope the information helps. If anything is unclear, please let me know.
>
> I
>
>>>am looking forward to hearing from you
>
>
>>>Best regards,
>
>
>>>Brandy Nee
>
>
>>>Microsoft CSS Online Newsgroup Support
>
>
>>>Get Secure! - www.microsoft.com/security
>
>
>>>==============================*================ =======
>>>When responding to posts, please "Reply to Group" via your newsreader so
>>>that others may learn and benefit from your issue.
>>>==============================*================ =======
>
>
>>>This posting is provided "AS IS" with no warranties, and confers no
>>
>>rights.
>
>
>
> Reply
>
>

Thanks Susan

I'll give it whirl after the office folk take off.



"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <>
wrote in message news:...
> Charlie Russel is saying the same thing.
>
> -> ISA Server
> -> Configuration
> -> General
> -> Define Connection Limits
> -> Connection Limit
> -> Limit the number of connection
> -> Connection limit per client (TCP and non-TCP)
>
> Do me a favor and check what value is there?
>
> If 40...try 160 for grins.
>
>
> clevere wrote:
> > Here's the google'd version of my post.
> >
> > Firewall Client disconnects?
> > All 17 messages in topic - view as tree
> > clevere May 30, 3:04 pm show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@sorry.net> - Find messages by this author
> > Date: Mon, 30 May 2005 12:04:05 -0700
> > Local: Mon,May 30 2005 3:04 pm
> > Subject: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Ok, in my strive to find out why I am having problems with just one URL,
I
> > was attempting to make a transaction on this URL, and my firewall client
> > reported it was unable to connect to the ISA server.
> >
> > The Firewall Client is for ISA 2004. I have manually select the ISA
server
> > selected, with the server name. Just like I had with ISA 2000. The one
thing
> > I find funny is that instead of having the firewall client manager in
the
> > control panel, it's now in Programs (off the start menu). Is everyone
elses
> > like that? Is there a way in ISA 2004 to find why I am getting
disconnected?
> >
> > Reply
> >
> > "Brandy Nee [MSFT]" May 31, 6:45 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find
messages by
> > this author
> > Date: Tue, 31 May 2005 10:45:19 GMT
> > Local: Tues,May 31 2005 6:45 am
> > Subject: RE: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hello Clevere,
> >
> > Thank you for posting to the SBS Newsgroup.
> >
> > From your post, I think your issue is your firewall clients cannot
connect
> > to the ISA server. If I have misunderstood your issue, please let me
know.
> >
> > Before we go any further, I need to confirm with you for some
information:
> >
> > 1. I am not quite clear your meaning "attempting to make a transaction
on
> > this URL", please explain it in detailed.
> >
> > 2. I assume that your firewall clients are using ISA 2004, what is your
ISA
> > server version, 2000 or 2004?
> >
> > 3. Does this issue happen to all the firewall clients or some of them?
> >
> > 4. Can you manually or automatically connect the firewall client to
connect
> > to the ISA server? To do so,
> >
> > a) On of the problematic client workstation, in the taskbar, double
click
> > the Firewall Client icon, and Firewall Client Options comes out.
> >
> > b) Check the box Automatically/Manually detect ISA server.
> >
> > c) Click OK, and test whether it connects or not.
> >
> > 5. Also in the Firewall Client icon, make sure that you have typed the
> > right ISA Server address to connect. You can fill in the blank with the
ISA
> > server FQDN or IP address, and test whether it is connected.
> >
> > 6. Make sure your ISA service is Started.
> >
> > Thanks for your time. I am looking forward to hearing from you soon.
> >
> > Best regards,
> >
> > Brandy Nee
> >
> > Microsoft CSS Online Newsgroup Support
> >
> > Get Secure! - www.microsoft.com/security
> >
> > ==============================*=================== ====
> > When responding to posts, please "Reply to Group" via your newsreader so
> > that others may learn and benefit from your issue.
> > ==============================*=================== ====
> >
> > This posting is provided "AS IS" with no warranties, and confers no
rights.
> >
> > Reply
> >
> > clevere May 31, 7:39 pm show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@sorry.net> - Find messages by this author
> > Date: Tue, 31 May 2005 16:39:36 -0700
> > Local: Tues,May 31 2005 7:39 pm
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Brandy-
> > Here are you answers:
> >
> > From your post, I think your issue is your firewall clients cannot
connect
> > to the ISA server. If I have misunderstood your issue, please let me
know.
> > Before we go any further, I need to confirm with you for some
information:
> > 1. I am not quite clear your meaning "attempting to make a transaction
on
> > this URL", please explain it in detailed
> >
> >
> > .
> >
> > I am attempting to connect to my online banking system. It's a CGI based
> > application that lets you access your bank information. I can email you
the
> > URL, but I can't post it online. The first time I attempt to access the
> > feature of this site, (getting my account info), the page will not load,
the
> > page can't be displayed. IE reports
> > Cannot find server or DNS Error
> > Internet Explorer
> > If I click back, and then click continue (on the webpage to access my
> > account information) everything works. If I attempt to access anything
> > internet related when the page won't load, my Firewall client software
loses
> > it's connection with the ISA server.
> >
> > 2. I assume that your firewall clients are using ISA 2004, what is your
ISA
> > server version, 2000 or 2004
> >
> >
> > ?
> >
> > ISA 2004 Firewall Client, ISA 2004 Server
> >
> > 3. Does this issue happen to all the firewall clients or some of them
> >
> >
> > ?
> > I'm only testing this on one workstation at this time, but the URL
access
> > problem happens across all the machines on the network. This was not a
> > problem with ISA 2000.
> >
> > 4. Can you manually or automatically connect the firewall client to
connect
> > to the ISA server? To do so
> >
> >
> > ,
> >
> > I have it setup manually.
> >
> > a) On of the problematic client workstation, in the taskbar, double
click
> > the Firewall Client icon, and Firewall Client Options comes out.
> > b) Check the box Automatically/Manually detect ISA server.
> > c) Click OK, and test whether it connects or not.
> > 5. Also in the Firewall Client icon, make sure that you have typed the
> > right ISA Server address to connect. You can fill in the blank with the
ISA
> > server FQDN or IP address, and test whether it is connected
> >
> >
> > .
> >
> > I've done this, works everytime. Except when the firewall client loses
> > connection to the ISA server. It then takes about 15 seconds before it
can
> > find the ISA server
> >
> > 6. Make sure your ISA service is Started.
> > It's running on the SBS2K3 box .. quite happily...
> >
> > Thanks for your time. I am looking forward to hearing from you soon
> >
> >
> > .
> >
> > This is what my ISA 2004 log says when I attempt to connect to the web
site
> > in question:
> >
> > 192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0;
Windows
> > NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:29 w3proxy VOLE -
> > www.customwa.com 66.224.153.131 443 - 596 364 SSL-tunnel TCP -
> > www.customwa.com:443 - Inet 995 - SBS Internet Access Rule - Internal
> > External 0x8a Failed
> > 192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1;
> > SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
> > www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
> > www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
> > External 0x800 Allowed
> > 192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1;
> > SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
> > www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
> > www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
> > External 0x800 Allowed
> > 192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0;
Windows
> > NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:30 w3proxy VOLE -
> > www.customwa.com 66.224.153.131 443 - 594 341 SSL-tunnel TCP -
> > www.customwa.com:443 - Inet 64 - SBS Internet Access Rule - Internal
> > External 0x88 Failed
> >
> > ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> > news:...
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>Hello Clevere,
> >
> >
> >>Thank you for posting to the SBS Newsgroup.
> >
> >
> >>From your post, I think your issue is your firewall clients cannot
connect
> >>to the ISA server. If I have misunderstood your issue, please let me
know.
> >
> >
> >>Before we go any further, I need to confirm with you for some
information:
> >
> >
> >>1. I am not quite clear your meaning "attempting to make a transaction
on
> >>this URL", please explain it in detailed.
> >
> >
> >>2. I assume that your firewall clients are using ISA 2004, what is your
> >>ISA
> >>server version, 2000 or 2004?
> >
> >
> >>3. Does this issue happen to all the firewall clients or some of them?
> >
> >
> >>4. Can you manually or automatically connect the firewall client to
> >>connect
> >>to the ISA server? To do so,
> >
> >
> >>a) On of the problematic client workstation, in the taskbar, double
click
> >>the Firewall Client icon, and Firewall Client Options comes out.
> >
> >
> >>b) Check the box Automatically/Manually detect ISA server.
> >
> >
> >>c) Click OK, and test whether it connects or not.
> >
> >
> >>5. Also in the Firewall Client icon, make sure that you have typed the
> >>right ISA Server address to connect. You can fill in the blank with the
> >>ISA
> >>server FQDN or IP address, and test whether it is connected.
> >
> >
> >>6. Make sure your ISA service is Started.
> >
> >
> >>Thanks for your time. I am looking forward to hearing from you soon.
> >
> >
> >>Best regards,
> >
> >
> >>Brandy Nee
> >
> >
> >>Microsoft CSS Online Newsgroup Support
> >
> >
> >>Get Secure! - www.microsoft.com/security
> >
> >
> >>==============================*================= ======
> >>When responding to posts, please "Reply to Group" via your newsreader so
> >>that others may learn and benefit from your issue.
> >>==============================*================= ======
> >
> >
> >>This posting is provided "AS IS" with no warranties, and confers no
> >>rights.
> >
> >
> >
> > Reply
> >
> > clevere Jun 1, 12:18 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@sorry.net> - Find messages by this author
> > Date: Tue, 31 May 2005 21:18:36 -0700
> > Local: Wed,Jun 1 2005 12:18 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hmm .. I made an interesting discovery. If I change the server name in
the
> > firewall client to the server IP address, I get the slow page load, but
I
> > can connect to that site without problem.
> >
> > The firewall client is not able to find the ISA server every time I
can't
> > access this web site. What does that indicate?
> >
> > ""
> >
> > - Hide quoted text -
> > - Show quoted text -
> > Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> > news:...
> >
> >>Hello Clevere,
> >
> >
> >>Thank you for posting to the SBS Newsgroup.
> >
> >
> >>From your post, I think your issue is your firewall clients cannot
connect
> >>to the ISA server. If I have misunderstood your issue, please let me
know.
> >
> >
> >>Before we go any further, I need to confirm with you for some
information:
> >
> >
> >>1. I am not quite clear your meaning "attempting to make a transaction
on
> >>this URL", please explain it in detailed.
> >
> >
> >>2. I assume that your firewall clients are using ISA 2004, what is your
> >>ISA
> >>server version, 2000 or 2004?
> >
> >
> >>3. Does this issue happen to all the firewall clients or some of them?
> >
> >
> >>4. Can you manually or automatically connect the firewall client to
> >>connect
> >>to the ISA server? To do so,
> >
> >
> >>a) On of the problematic client workstation, in the taskbar, double
click
> >>the Firewall Client icon, and Firewall Client Options comes out.
> >
> >
> >>b) Check the box Automatically/Manually detect ISA server.
> >
> >
> >>c) Click OK, and test whether it connects or not.
> >
> >
> >>5. Also in the Firewall Client icon, make sure that you have typed the
> >>right ISA Server address to connect. You can fill in the blank with the
> >>ISA
> >>server FQDN or IP address, and test whether it is connected.
> >
> >
> >>6. Make sure your ISA service is Started.
> >
> >
> >>Thanks for your time. I am looking forward to hearing from you soon.
> >
> >
> >>Best regards,
> >
> >
> >>Brandy Nee
> >
> >
> >>Microsoft CSS Online Newsgroup Support
> >
> >
> >>Get Secure! - www.microsoft.com/security
> >
> >
> >>==============================*================= ======
> >>When responding to posts, please "Reply to Group" via your newsreader so
> >>that others may learn and benefit from your issue.
> >>==============================*================= ======
> >
> >
> >>This posting is provided "AS IS" with no warranties, and confers no
> >>rights.
> >
> >
> >
> > Reply
> >
> > clevere Jun 1, 12:22 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@sorry.net> - Find messages by this author
> > Date: Tue, 31 May 2005 21:22:53 -0700
> > Local: Wed,Jun 1 2005 12:22 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > I may have spoken too soon on the finding the ISA server via the IP
> > address...
> >
> > But the firewall client is losing connection or dropping it with the ISA
> > server.
> >
> > "clevere" <n...@sorry.net> wrote in message
> >
> >
> > news:...
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>Hmm .. I made an interesting discovery. If I change the server name in
the
> >>firewall client to the server IP address, I get the slow page load, but
I
> >>can connect to that site without problem.
> >
> >
> >>The firewall client is not able to find the ISA server every time I
can't
> >>access this web site. What does that indicate?
> >
> >
> >>""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> >>news:...
> >>
> >>>Hello Clevere,
> >
> >
> >>>Thank you for posting to the SBS Newsgroup.
> >
> >
> >>>From your post, I think your issue is your firewall clients cannot
> >>>connect
> >>>to the ISA server. If I have misunderstood your issue, please let me
> >>>know.
> >
> >
> >>>Before we go any further, I need to confirm with you for some
> >>>information:
> >
> >
> >>>1. I am not quite clear your meaning "attempting to make a transaction
on
> >>>this URL", please explain it in detailed.
> >
> >
> >>>2. I assume that your firewall clients are using ISA 2004, what is your
> >>>ISA
> >>>server version, 2000 or 2004?
> >
> >
> >>>3. Does this issue happen to all the firewall clients or some of them?
> >
> >
> >>>4. Can you manually or automatically connect the firewall client to
> >>>connect
> >>>to the ISA server? To do so,
> >
> >
> >>>a) On of the problematic client workstation, in the taskbar, double
click
> >>>the Firewall Client icon, and Firewall Client Options comes out.
> >
> >
> >>>b) Check the box Automatically/Manually detect ISA server.
> >
> >
> >>>c) Click OK, and test whether it connects or not.
> >
> >
> >>>5. Also in the Firewall Client icon, make sure that you have typed the
> >>>right ISA Server address to connect. You can fill in the blank with the
> >>>ISA
> >>>server FQDN or IP address, and test whether it is connected.
> >
> >
> >>>6. Make sure your ISA service is Started.
> >
> >
> >>>Thanks for your time. I am looking forward to hearing from you soon.
> >
> >
> >>>Best regards,
> >
> >
> >>>Brandy Nee
> >
> >
> >>>Microsoft CSS Online Newsgroup Support
> >
> >
> >>>Get Secure! - www.microsoft.com/security
> >
> >
> >>>==============================*================ =======
> >>>When responding to posts, please "Reply to Group" via your newsreader
so
> >>>that others may learn and benefit from your issue.
> >>>==============================*================ =======
> >
> >
> >>>This posting is provided "AS IS" with no warranties, and confers no
> >>>rights.
> >
> >
> >
> > Reply
> >
> > "Brandy Nee [MSFT]" Jun 1, 7:04 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find
messages by
> > this author
> > Date: Wed, 01 Jun 2005 11:04:51 GMT
> > Local: Wed,Jun 1 2005 7:04 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hello Clevere,
> >
> > Thank you for posting back.
> >
> > From your reply, I think this maybe is a very complicated issue. Please
> > understand that we may take time to do more further research, and we
also
> > need your assistance to collect more error information.
> >
> > 1. Unlike ISA Server 2000, it is by design that the Firewall Client of
ISA
> > 2004 is listed in the Programs as you mentioned, so please do not worry
> > about it.
> >
> > 2. When the connection is rejected by the ISA, the Firewall Client will
> > temporarily display "not connected" for about 15 seconds.
> >
> > 3. Please configure ISA's internal NIC as the proxy in the IE | Internet
> > Options | Connections tab | LAN Settings button, and then test whether
it
> > works now. To do so, type the IP address of the ISA internal NIC into
the
> > proxy server name, and then type the Port of internal NIC that the ISA
is
> > monitoring into the port box.
> >
> > 4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
> > come from the SBS 2K3 SP1 Premium Edition or from the retail version of
the
> > ISA Server 2004?
> >
> > Thanks for your time. I am looking forward to your reply.
> >
> > Best regards,
> > Brandy Nee
> > Microsoft CSS Online Newsgroup Support
> > Get Secure! - www.microsoft.com/security
> > ==============================*=================== ====
> > When responding to posts, please "Reply to Group" via your newsreader so
> > that others may learn and benefit from your issue.
> > ==============================*=================== ====
> > This posting is provided "AS IS" with no warranties, and confers no
rights
> >
> >
> > .
> >
> > Reply
> >
> > clevere Jun 1, 12:17 pm show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@sorry.net> - Find messages by this author
> > Date: Wed, 1 Jun 2005 09:17:33 -0700
> > Local: Wed,Jun 1 2005 12:17 pm
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hi Brandy-
> > Thanks for replying, I'd really like to know why ISA 2004 is killing
my
> > connection
> >
> > Here are you answers:
> >
> > From your reply, I think this maybe is a very complicated issue. Please
> > understand that we may take time to do more further research, and we
also
> > need your assistance to collect more error information.
> > 1. Unlike ISA Server 2000, it is by design that the Firewall Client of
ISA
> > 2004 is listed in the Programs as you mentioned, so please do not worry
> > about it
> >
> >
> > .
> >
> > Ok, no worries there then.
> >
> > 2. When the connection is rejected by the ISA, the Firewall Client will
> > temporarily display "not connected" for about 15 seconds
> >
> >
> > .
> >
> > That explains something, that ISA is rejecting the connection from my
> > workstation, but why?
> >
> > 3. Please configure ISA's internal NIC as the proxy in the IE | Internet
> > Options | Connections tab | LAN Settings button, and then test whether
it
> > works now. To do so, type the IP address of the ISA internal NIC into
the
> > proxy server name, and then type the Port of internal NIC that the ISA
is
> > monitoring into the port box
> >
> >
> > .
> >
> > Did that, didn't change a thing. As soon as I try to access information
on
> > www.customwaNOSPAM.com The firewall client loses connection with the
server,
> > and poof, there goes my internet connection.
> >
> > 4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
> > come from the SBS 2K3 SP1 Premium Edition or from the retail version of
the
> > ISA Server 2004
> >
> >
> > ?
> >
> > Yes, I installed SBS 2k3 SP1 Premium Edition. The ISA 2004 comes from
the
> > SBS2K3 SP1 Premium CD set you order over the internet. I upgraded as
> > follows:
> >
> > Downloaded SBS2K3 SP1 (per the Microsoft instructions) from the
internet,
> > installed it, and was up and running with little trouble. Ordered my
CD's,
> > got My CD's, and install ISA 2004... that's when the problem started to
> > happen. I don't know if you saw this in my last post, but this is what
ISA
> > is saying when I attempt to access that web site:
> >
> > 192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0;
Windows
> > NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:29 w3proxy VOLE -
> > www.customwa.com 66.224.153.131 443 - 596 364 SSL-tunnel TCP -
> > www.customwa.com:443 - Inet 995 - SBS Internet Access Rule - Internal
> > External 0x8a Failed
> > 192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1;
> > SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
> > www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
> > www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
> > External 0x800 Allowed
> > 192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0
> >
> >
> > ; Windows NT 5.1;
> > SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
> > www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
> > www.customwa.com:443 - Inet 407 -
> >
> > SBS Internet Access Rule - Internal
> > External 0x800 Allowed
> > 192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE
> >
> >
> > 6.0; Windows
> > NT 5.1;
> >
> > SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:30 w3proxy VOLE -
> > www.customwa.com 66.224.153.131 443 - 594 341 SSL-tunnel TCP -
> > www.customwa.com:443 - Inet 64 - SBS Internet Access Rule - Internal
> > External 0x88 Failed
> >
> >
> > I am using IE, with the latest Service Pack install on Windows XP SP2.
> >
> > Just out of curiousity, and from a recommendation from another SBS
member, I
> > deleted all the ISA rules, and re-ran the Connect to the Internet
Wizard. It
> > recreated all the appropriate ISA rules, but my problem still exists.
> >
> > ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> > news:ms%...
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>Hello Clevere,
> >
> >
> >>Thank you for posting back.
> >
> >
> >>From your reply, I think this maybe is a very complicated issue. Please
> >>understand that we may take time to do more further research, and we
also
> >>need your assistance to collect more error information.
> >
> >
> >>1. Unlike ISA Server 2000, it is by design that the Firewall Client of
ISA
> >>2004 is listed in the Programs as you mentioned, so please do not worry
> >>about it.
> >
> >
> >>2. When the connection is rejected by the ISA, the Firewall Client will
> >>temporarily display "not connected" for about 15 seconds.
> >
> >
> >>3. Please configure ISA's internal NIC as the proxy in the IE | Internet
> >>Options | Connections tab | LAN Settings button, and then test whether
it
> >>works now. To do so, type the IP address of the ISA internal NIC into
the
> >>proxy server name, and then type the Port of internal NIC that the ISA
is
> >>monitoring into the port box.
> >
> >
> >>4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
> >>come from the SBS 2K3 SP1 Premium Edition or from the retail version of
> >>the
> >>ISA Server 2004?
> >
> >
> >>Thanks for your time. I am looking forward to your reply.
> >
> >
> >>Best regards,
> >
> >
> >>Brandy Nee
> >
> >
> >>Microsoft CSS Online Newsgroup Support
> >
> >
> >>Get Secure! - www.microsoft.com/security
> >
> >
> >>==============================*================= ======
> >>When responding to posts, please "Reply to Group" via your newsreader so
> >>that others may learn and benefit from your issue.
> >>==============================*================= ======
> >
> >
> >>This posting is provided "AS IS" with no warranties, and confers no
> >>rights.
> >
> >
> >
> > Reply
> >
> > "Brandy Nee [MSFT]" Jun 2, 7:03 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find
messages by
> > this author
> > Date: Thu, 02 Jun 2005 11:03:11 GMT
> > Local: Thurs,Jun 2 2005 7:03 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hello Clevere,
> >
> > Thank you for posting back.
> >
> > As I have stated in my last reply, this is a very complcated issue. To
> > perform more further research, please take your time and help us to
gather
> > the following information:
> >
> > [Note]: This information is very important for us to isolate and resolve
> > this issue.
> >
> > 1. IPCONFIG /ALL results on the SBS.
> >
> > 2. The network diagram that includes the IP addresses range for each
> > network.
> >
> > 3. ISA Info:
> >
> > 1) Download the file from the following URL:
> >
> > http://www.isatools.org/isainf*o/ISAInfo.zip
> >
> > 2) Extract all files to a folder on ISA server.
> >
> > 3) Double click Isainfo.js. This will generate 2 files
> > ISAInfo2004-<computer-name>.lo*g and ISAInfo2004-<computer-name>.xm*l in
the
> > current folder.
> >
> > 4) Attach the files and send it to v-bra...@microsoft.com
> >
> > 4. Gather the ISA logs:
> >
> > 1) Schedule a down time.
> >
> > 2) Open ISA 2004 management console.
> >
> > 3) Expand the server node and highlight 'Monitoring'.
> >
> > 4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
> > Pane' is showed there.
> >
> > 5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
> > Tasks', and then switch the 'log storage format' from 'MSDE database'
> > (default) to 'File'.
> >
> > 6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
> >
> > 7) In the 'Task Pane', click 'Configure Web Proxy Logging' under
'Logging
> > Tasks', and then switch the 'log storage format' from 'MSDE database'
> > (default) to 'File'.
> >
> > 8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
> >
> > 9) Click 'Apply' to save changes and update the configuration.
> >
> > 10) Temporarily disable the Firewall service. To do that, please click
> > Monitoring | Services tab, and then right click 'Microsoft Firewall' to
> > choose 'Stop'.
> >
> > 11) Clear the current existing W3C logs. To do that, go to the log
saving
> > directory and clean any existing .W3C logs. By default, the logs will be
> > saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
not
> > be able to deleted, that's normal.) You may backup them first and then
> > delete them.
> >
> > 12) Go back to the ISA 2004 management console, and then Start the
stopped
> > 'Microsoft Firewall' service.
> >
> > 13) Reproduce the problem, stop the service, and then attach the
resulting
> > W3C files to the newsgroup.
> >
> > 14) Please also let me know the IP address of the testing clients so
that I
> > can filter the data.
> >
> > Best regards,
> > Brandy Nee
> > Microsoft CSS Online Newsgroup Support
> > Get Secure! - www.microsoft.com/security
> > ==============================*=================== ====
> > When responding to posts, please "Reply to Group" via your newsreader so
> > that others may learn and benefit from your issue.
> > ==============================*=================== ====
> > This posting is provided "AS IS" with no warranties, and confers no
rights
> >
> >
> > .
> >
> > Reply
> >
> > clevere Jun 3, 1:18 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@sorry.net> - Find messages by this author
> > Date: Thu, 2 Jun 2005 22:18:24 -0700
> > Local: Fri,Jun 3 2005 1:18 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Thanks for the reply Brandy, I'll start getting you this information
> > tomorrow in the AM!
> >
> > ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> > news:...
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>Hello Clevere,
> >
> >
> >>Thank you for posting back.
> >
> >
> >>As I have stated in my last reply, this is a very complcated issue. To
> >>perform more further research, please take your time and help us to
> >>gather
> >>the following information:
> >
> >
> >>[Note]: This information is very important for us to isolate and resolve
> >>this issue.
> >
> >
> >>1. IPCONFIG /ALL results on the SBS.
> >
> >
> >>2. The network diagram that includes the IP addresses range for each
> >>network.
> >
> >
> >>3. ISA Info:
> >
> >
> >>1) Download the file from the following URL:
> >
> >
> >>http://www.isatools.org/isainf*o/ISAInfo.zip
> >
> >
> >>2) Extract all files to a folder on ISA server.
> >
> >
> >>3) Double click Isainfo.js. This will generate 2 files
> >>ISAInfo2004-<computer-name>.lo*g and ISAInfo2004-<computer-name>.xm*l in
> >
> > the
> >
> >>current folder.
> >
> >
> >>4) Attach the files and send it to v-bra...@microsoft.com
> >
> >
> >>4. Gather the ISA logs:
> >
> >
> >>1) Schedule a down time.
> >
> >
> >>2) Open ISA 2004 management console.
> >
> >
> >>3) Expand the server node and highlight 'Monitoring'.
> >
> >
> >>4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
> >>Pane' is showed there.
> >
> >
> >>5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
> >>Tasks', and then switch the 'log storage format' from 'MSDE database'
> >>(default) to 'File'.
> >
> >
> >>6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
> >
> >
> >>7) In the 'Task Pane', click 'Configure Web Proxy Logging' under
'Logging
> >>Tasks', and then switch the 'log storage format' from 'MSDE database'
> >>(default) to 'File'.
> >
> >
> >>8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
> >
> >
> >>9) Click 'Apply' to save changes and update the configuration.
> >
> >
> >>10) Temporarily disable the Firewall service. To do that, please click
> >>Monitoring | Services tab, and then right click 'Microsoft Firewall' to
> >>choose 'Stop'.
> >
> >
> >>11) Clear the current existing W3C logs. To do that, go to the log
saving
> >>directory and clean any existing .W3C logs. By default, the logs will be
> >>saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
> >>not
> >>be able to deleted, that's normal.) You may backup them first and then
> >>delete them.
> >
> >
> >>12) Go back to the ISA 2004 management console, and then Start the
stopped
> >>'Microsoft Firewall' service.
> >
> >
> >>13) Reproduce the problem, stop the service, and then attach the
resulting
> >>W3C files to the newsgroup.
> >
> >
> >>14) Please also let me know the IP address of the testing clients so
that
> >>I
> >>can filter the data.
> >
> >
> >>Best regards,
> >
> >
> >>Brandy Nee
> >
> >
> >>Microsoft CSS Online Newsgroup Support
> >
> >
> >>Get Secure! - www.microsoft.com/security
> >
> >
> >>==============================*================= ======
> >>When responding to posts, please "Reply to Group" via your newsreader so
> >>that others may learn and benefit from your issue.
> >>==============================*================= ======
> >
> >
> >>This posting is provided "AS IS" with no warranties, and confers no
> >>rights.
> >
> >
> >
> > Reply
> >
> > clevere Jun 3, 2:50 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@sorry.net> - Find messages by this author
> > Date: Thu, 2 Jun 2005 23:50:47 -0700
> > Local: Fri,Jun 3 2005 2:50 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Good morning Brandy-
> >
> > Please check your email, you have some information from me.
> >
> > ""
> >
> > - Hide quoted text -
> > - Show quoted text -
> > Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> > news:...
> >
> >>Hello Clevere,
> >
> >
> >>Thank you for posting back.
> >
> >
> >>As I have stated in my last reply, this is a very complcated issue. To
> >>perform more further research, please take your time and help us to
> >>gather
> >>the following information:
> >
> >
> >>[Note]: This information is very important for us to isolate and resolve
> >>this issue.
> >
> >
> >>1. IPCONFIG /ALL results on the SBS.
> >
> >
> >>2. The network diagram that includes the IP addresses range for each
> >>network.
> >
> >
> >>3. ISA Info:
> >
> >
> >>1) Download the file from the following URL:
> >
> >
> >>http://www.isatools.org/isainf*o/ISAInfo.zip
> >
> >
> >>2) Extract all files to a folder on ISA server.
> >
> >
> >>3) Double click Isainfo.js. This will generate 2 files
> >>ISAInfo2004-<computer-name>.lo*g and ISAInfo2004-<computer-name>.xm*l in
> >
> > the
> >
> >>current folder.
> >
> >
> >>4) Attach the files and send it to v-bra...@microsoft.com
> >
> >
> >>4. Gather the ISA logs:
> >
> >
> >>1) Schedule a down time.
> >
> >
> >>2) Open ISA 2004 management console.
> >
> >
> >>3) Expand the server node and highlight 'Monitoring'.
> >
> >
> >>4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
> >>Pane' is showed there.
> >
> >
> >>5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
> >>Tasks', and then switch the 'log storage format' from 'MSDE database'
> >>(default) to 'File'.
> >
> >
> >>6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
> >
> >
> >>7) In the 'Task Pane', click 'Configure Web Proxy Logging' under
'Logging
> >>Tasks', and then switch the 'log storage format' from 'MSDE database'
> >>(default) to 'File'.
> >
> >
> >>8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
> >
> >
> >>9) Click 'Apply' to save changes and update the configuration.
> >
> >
> >>10) Temporarily disable the Firewall service. To do that, please click
> >>Monitoring | Services tab, and then right click 'Microsoft Firewall' to
> >>choose 'Stop'.
> >
> >
> >>11) Clear the current existing W3C logs. To do that, go to the log
saving
> >>directory and clean any existing .W3C logs. By default, the logs will be
> >>saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
> >>not
> >>be able to deleted, that's normal.) You may backup them first and then
> >>delete them.
> >
> >
> >>12) Go back to the ISA 2004 management console, and then Start the
stopped
> >>'Microsoft Firewall' service.
> >
> >
> >>13) Reproduce the problem, stop the service, and then attach the
resulting
> >>W3C files to the newsgroup.
> >
> >
> >>14) Please also let me know the IP address of the testing clients so
that
> >>I
> >>can filter the data.
> >
> >
> >>Best regards,
> >
> >
> >>Brandy Nee
> >
> >
> >>Microsoft CSS Online Newsgroup Support
> >
> >
> >>Get Secure! - www.microsoft.com/security
> >
> >
> >>==============================*================= ======
> >>When responding to posts, please "Reply to Group" via your newsreader so
> >>that others may learn and benefit from your issue.
> >>==============================*================= ======
> >
> >
> >>This posting is provided "AS IS" with no warranties, and confers no
> >>rights.
> >
> >
> >
> > Reply
> >
> > clevere Jun 5, 3:09 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@sorry.net> - Find messages by this author
> > Date: Sun, 5 Jun 2005 00:09:09 -0700
> > Local: Sun,Jun 5 2005 3:09 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > While waiting for Brandy to reply to me, I discovered something
interesting.
> > If I disable ISA 2004's Web Proxy, everything works as you should expect
> > (all be it a little slower)..
> > Anyone got a take on that?
> >
> > "clevere" <n...@sorry.net> wrote in message
> >
> >
> > news:...
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>Ok, in my strive to find out why I am having problems with just one URL,
I
> >>was attempting to make a transaction on this URL, and my firewall client
> >>reported it was unable to connect to the ISA server.
> >
> >
> >>The Firewall Client is for ISA 2004. I have manually select the ISA
server
> >>selected, with the server name. Just like I had with ISA 2000. The one
> >>thing I find funny is that instead of having the firewall client manager
> >>in the control panel, it's now in Programs (off the start menu). Is
> >>everyone elses like that? Is there a way in ISA 2004 to find why I am
> >>getting disconnected?
> >
> >
> >
> > Reply
> >
> > "Brandy Nee [MSFT]" Jun 6, 6:32 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find
messages by
> > this author
> > Date: Mon, 06 Jun 2005 10:32:39 GMT
> > Local: Mon,Jun 6 2005 6:32 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hello Clevere,
> >
> > Thank you for posting back.
> >
> > I have received your logs. Please be patient that I am doing researching
on
> > your issue now. To better filter your issue, I would like to know what
> > exactly the URL you failed to access. Can you please paste the URL link
to
> > my email address?
> >
> > Thanks for your cooperation and time. I am looking forward to hearing
from
> > you.
> >
> > Best regards,
> > Brandy Nee
> > Microsoft CSS Online Newsgroup Support
> > Get Secure! - www.microsoft.com/security
> > ==============================*=================== ====
> > When responding to posts, please "Reply to Group" via your newsreader so
> > that others may learn and benefit from your issue.
> > ==============================*=================== ====
> > This posting is provided "AS IS" with no warranties, and confers no
rights
> >
> >
> > .
> >
> > Reply
> >
> > "Brandy Nee [MSFT]" Jun 7, 6:31 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find
messages by
> > this author
> > Date: Tue, 07 Jun 2005 10:31:04 GMT
> > Local: Tues,Jun 7 2005 6:31 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hello Clevere,
> >
> > Thank you for posting back.
> >
> > I have received your email. After a long time research on your logs, I
> > found there are some errors occur when the Firewall Clients pass the
> > authentication to the ISA. Please try the following steps:
> >
> > 1. On the problematic client, temporarily disable the Firewall Client.
> >
> > 2. Close all IE windows.
> >
> > 3. Open Internet Options | Connections tab | LAN Settings button,
configure
> > the ISA's internal NIC as the proxy.
> >
> > 4. Launch IE to access that URL again to see if the problem still
exists.
> >
> > If this issue persists, please help to gather the following information:
> >
> > 1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out
the
> > steps how you did that? Do you mean that you disabled HTTP Filter under
> > Internet Security & Acceleration Server
> > 2004\Yourserver\Configuration\*Add-in?
> >
> > 2. Are there any error messages in the System event log and the
Application
> > event log? Please export the events into .evt files and then send to
you.
> >
> > I am greatly appreciated your time and cooperation. If anything unclear,
> > please let me know.
> >
> > I am looking forward to hearing from you!
> > Best regards,
> > Brandy Nee
> > Microsoft CSS Online Newsgroup Support
> > Get Secure! - www
> > .microsoft.com/security
> > ==============================*=================== ====
> > When responding to posts, please "Reply to Group" via your newsreader so
> > that others may learn and benefit from your issue.
> > ==============================*=================== ====
> > This posting is provided "AS IS" with no warranties, and confers no
rights
> >
> >
> > .
> >
> > Reply
> >
> > clevere Jun 8, 4:20 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@sorry.net> - Find messages by this author
> > Date: Wed, 8 Jun 2005 01:20:27 -0700
> > Local: Wed,Jun 8 2005 4:20 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hi Brandy-
> > Alright, this is odd.
> >
> > I had to re-enable Web Proxy, for my network (I turned it off). I did
they
> > by Going to the ISA manager, clicking in Networks, right-clicking on the
> > Internal network, and disabling Web Proxy.
> >
> > With the web proxy enabled, I disabled the firewall client, and put in
IE to
> > use my server, at port 8080 for the proxy server.
> >
> > I was unable to access the website in question. I turned on the Firewall
> > Client, told IE to just "Auto matically detect connection settings" (so
that
> > it no longer used Proxy Server), and I could access the web site.
> >
> > With the "Web Proxy" running, some sites seem to be having problems
loading,
> > but that could be because SBS is doing it's mid-week backup. This I can
> > continue to test, I'll leave the Web Proxy turned on for now, and see
how it
> > performs during the day.
> >
> > As far as IE goes, shouldn't I be able to tell it to use this proxy
server,
> > and be good to go? Do you need any logs?
> >
> > There are no event ID's in the event viewer.
> >
> > ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> > news:...
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>Hello Clevere,
> >
> >
> >>Thank you for posting back.
> >
> >
> >>I have received your logs. Please be patient that I am doing researching
> >>on
> >>your issue now. To better filter your issue, I would like to know what
> >>exactly the URL you failed to access. Can you please paste the URL link
to
> >>my email address?
> >
> >
> >>Thanks for your cooperation and time. I am looking forward to hearing
from
> >>you.
> >
> >
> >>Best regards,
> >
> >
> >>Brandy Nee
> >
> >
> >>Microsoft CSS Online Newsgroup Support
> >
> >
> >>Get Secure! - www.microsoft.com/security
> >
> >
> >>==============================*================= ======
> >>When responding to posts, please "Reply to Group" via your newsreader so
> >>that others may learn and benefit from your issue.
> >>==============================*================= ======
> >
> >
> >>This posting is provided "AS IS" with no warranties, and confers no
> >>rights.
> >
> >
> >
> > Reply
> >
> > "Brandy Nee [MSFT]" Jun 9, 7:19 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find
messages by
> > this author
> > Date: Thu, 09 Jun 2005 11:19:41 GMT
> > Local: Thurs,Jun 9 2005 7:19 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > Hello Clever,
> >
> > Thank you for posting back.
> >
> > Please see my information below:
> >
> > 1. If you disabled the Web Proxy, whatever you enabled "Automatically
> > detect connection settings", IE will not directly pass the request to
the
> > ISA. Instead, the Firewall Client will pass the IE requests to the ISA
so
> > it works.
> >
> > 2. To use "Automatically detect connection settings", we need to enable
> > WPAD on the ISA. Please See:
> >
> > 309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
> > Windows 2000
> > http://support.microsoft.com/?*id=309814
> >
> > 816320 How to configure firewall and Web proxy client Autodiscovery in
> > Windows Server 2003
> > http://support.microsoft.com/?*id=816320
> >
> > Configuring DHCP and DNS for ISA automatic discovery
> >
http://www.isaserver.org/tutor*ials/...auto*matic-dis....
> > html
> >
> > We need to configure either on DHCP or on DNS for the WPAD record. For
the
> > DHCP way, we do not recommend do that since there are many known issues.
> > For the DNS way, it needs to use the port 80 on the internal NIC.
However,
> > since the services on the SBS needs the port 80 on the internal NIC, we
are
> > unable to use DNS to configure WPAD.
> >
> > As a conclusion, we are unable to enable "Automatically detect
connection
> > settings" in a SBS environment. If you really want to do that, you must
use
> > the DHCP way.
> >
> > 3. In your scenario, you should always manually set SBS' internal NIC as
> > the proxy in Internet options instead of enabling "Automatically detect
> > connection settings"
> >
> > Hope the information helps. If anything is
> >
> > unclear, please let me know. I
> > am looking forward to hearing from you
> > Best regards,
> > Brandy Nee
> > Microsoft CSS Online Newsgroup Support
> > Get Secure! - www
> > .microsoft.com/security
> > ==============================*=================== ====
> > When responding to posts, please "Reply to Group" via your newsreader so
> > that others may learn and benefit from your issue.
> > ==============================*=================== ====
> > This posting is provided "AS IS" with no warranties, and confers no
rights
> >
> >
> > .
> >
> > Reply
> >
> > clevere Jun 9, 1:20 pm show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@noway.net> - Find messages by this author
> > Date: Thu, 9 Jun 2005 10:20:15 -0700
> > Local: Thurs,Jun 9 2005 1:20 pm
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > I'm afraid you misunderstood what I was saying. I was doing what you
> > recommended:
> >
> > I have received your email. After a long time research on your logs, I
> > found there are some errors occur when the Firewall Clients pass the
> > authentication to the ISA. Please try the following steps:
> > 1. On the problematic client, temporarily disable the Firewall Client
> >
> >
> > .
> >
> > Done
> >
> > 2. Close all IE windows.
> >
> > Done
> >
> > 3. Open Internet Options | Connections tab | LAN Settings button,
configure
> > the ISA's internal NIC as the proxy
> >
> >
> > .
> >
> > Did that.
> >
> > 4. Launch IE to access that URL again to see if the problem still exists
> >
> >
> > .
> > Yes, the problem presists.
> >
> > If this issue persists, please help to gather the following information:
> > 1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out
the
> > steps how you did that? Do you mean that you disabled HTTP Filter under
> > Internet Security & Acceleration Server
> > 2004\Yourserver\Configuration\*Add-in
> >
> >
> > ?
> >
> > No, I disabled Web Proxy under ISA
> > 2004\Myserver\Configuration\Ne*twork\Internal Network\Properties\Web
Proxy
> >
> > 2. Are there any error messages in the System event log and the
Application
> > event log? Please export the events into .evt files and then send to you
> >
> >
> > .
> >
> > No, there are none.
> >
> > Does that make more sense? I had to re-enable the Web Proxy for the
internal
> > network in ISA to do the testing you asked, Because I had turned it off.
> > After I turned it OFF, I could no longer use "Use this Proxy Server" in
IE,
> > because the proxy server was turned off. So I had to reconfigure IE to
just
> > Automatically detect the settings, so it would work with the web Proxy
> > turned off.
> >
> > Does that make sense?
> >
> > ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> > news:...
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>Hello Clever,
> >
> >
> >>Thank you for posting back.
> >
> >
> >>Please see my information below:
> >
> >
> >>1. If you disabled the Web Proxy, whatever you enabled "Automatically
> >>detect connection settings", IE will not directly pass the request to
the
> >>ISA. Instead, the Firewall Client will pass the IE requests to the ISA
so
> >>it works.
> >
> >
> >>2. To use "Automatically detect connection settings", we need to enable
> >>WPAD on the ISA. Please See:
> >
> >
> >>309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
> >>Windows 2000
> >>http://support.microsoft.com/?*id=309814
> >
> >
> >>816320 How to configure firewall and Web proxy client Autodiscovery in
> >>Windows Server 2003
> >>http://support.microsoft.com/?*id=816320
> >
> >
> >>Configuring DHCP and DNS for ISA automatic discovery
> >
> >
> >
http://www.isaserver.org/tutor*ials/...auto*matic-dis....
> >
> >>html
> >
> >
> >>We need to configure either on DHCP or on DNS for the WPAD record. For
the
> >>DHCP way, we do not recommend do that since there are many known issues.
> >>For the DNS way, it needs to use the port 80 on the internal NIC.
However,
> >>since the services on the SBS needs the port 80 on the internal NIC, we
> >
> > are
> >
> >>unable to use DNS to configure WPAD.
> >
> >
> >>As a conclusion, we are unable to enable "Automatically detect
connection
> >>settings" in a SBS environment. If you really want to do that, you must
> >
> > use
> >
> >>the DHCP way.
> >
> >
> >>3. In your scenario, you should always manually set SBS' internal NIC as
> >>the proxy in Internet options instead of enabling "Automatically detect
> >>connection settings"
> >
> >
> >>Hope the information helps. If anything is unclear, please let me know.
I
> >>am looking forward to hearing from you
> >
> >
> >>Best regards,
> >
> >
> >>Brandy Nee
> >
> >
> >>Microsoft CSS Online Newsgroup Support
> >
> >
> >>Get Secure! - www.microsoft.com/security
> >
> >
> >>==============================*================= ======
> >>When responding to posts, please "Reply to Group" via your newsreader so
> >>that others may learn and benefit from your issue.
> >>==============================*================= ======
> >
> >
> >>This posting is provided "AS IS" with no warranties, and confers no
> >
> > rights
> >
> >
> > .
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >
> > Reply
> >
> > clevere Jun 13, 10:43 am show options
> >
> > Newsgroups: microsoft.public.windows.server.sbs
> > From: "clevere" <n...@noway.net> - Find messages by this author
> > Date: Mon, 13 Jun 2005 07:43:13 -0700
> > Local: Mon,Jun 13 2005 10:43 am
> > Subject: Re: Firewall Client disconnects?
> > Reply | Reply to Author | Forward | Print | Individual Message | Show
> > original | Report Abuse
> >
> > I'm afraid you misunderstood what I was saying. I was doing what you
> > recommended
> >
> >
> > , and your answers are below:
> >
> > - Hide quoted text -
> > - Show quoted text -
> > I have received your email. After a long time research on your logs
> > , I
> > found
> > there
> > are
> > some
> > errors
> > occur
> > when
> > the
> > Firewall
> > Clients
> > pass
> > the
> > authentication
> > to
> > the
> > ISA
> > . Please
> > try
> > the
> > following
> > steps
> > :
> > 1
> > . On
> > the
> > problematic
> > client
> > , temporarily
> > disable
> > the
> > Firewall
> > Client
> > .
> > Done
> > 2. Close all IE windows.
> > Done
> > 3. Open Internet Options | Connections tab | LAN Settings button,
configure
> > the ISA's
> > internal
> > NIC
> > as
> > the
> > proxy
> > .
> > Did that.
> > 4. Launch IE to access that URL again to see if the
> > problem
> > still
> > exists
> > .
> > Yes, the problem presists.
> > If this issue persists, please help to gather the following information:
> > 1
> > . You
> > mentioned
> > "disable
> > ISA
> > 2004's
> > Web
> > Proxy
> > ". Please
> > fully
> > give
> > out
> > the
> > steps
> > how
> > you
> > did
> > that
> > ? Do
> > you
> > mean
> > that
> > you
> > disabled
> > HTTP
> > Filter
> > under
> > Internet
> > Security
> > & Acceleration
> > Server
> > 2004
> > \Yourserver
> > \Configuration
> > \Add
> > -in
> > ?
> > No, I disabled Web Proxy under ISA
> > 2004\Myserver\Configuration\Ne*twork\Internal Network\Properties\Web
Proxy
> > 2. Are there any error messages in the System event log and
> > the
> > Application
> > event
> > log
> > ? Please
> > export
> > the
> > events
> > into
> > .evt
> > files
> > and
> > then
> > send
> > to
> > you
> > .
> > No, there are none.
> > Does that make more sense? I had to re-enable the Web Proxy for the
internal
> > network in ISA to do the testing you asked, Because I had turned it off.
> > After I turned it OFF, I could no longer use "Use this Proxy Server" in
IE,
> > because the proxy server was turned off. So I had to reconfigure IE to
just
> > Automatically detect the settings, so it would work with the web Proxy
> > turned off.
> > Does that make sense?
> > ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> > news:...
> >
> >>Hello Clever,
> >
> >
> >>Thank you for posting back.
> >
> >
> >>Please see my information below:
> >
> >
> >>1. If you disabled the Web Proxy, whatever you enabled "Automatically
> >>detect connection settings", IE will not directly pass the request to
the
> >>ISA. Instead, the Firewall Client will pass the IE requests to the ISA
so
> >>it works.
> >
> >
> >>2. To use "Automatically detect connection settings", we need to enable
> >>WPAD on the ISA. Please See:
> >
> >
> >>309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
> >>Windows 2000
> >>http://support.microsoft.com/?*id=309814
> >
> >
> >>816320 How to configure firewall and Web proxy client Autodiscovery in
> >>Windows Server 2003
> >>http://support.microsoft.com/?*id=816320
> >
> >
> >>Configuring DHCP and DNS for ISA automatic discovery
> >
> >
> > http
> > ://www
> > .isaserver
> > .org
> > /tutorials
> > /Configuring
> > -DHCP
> > -DNS
> > -automatic
> > -discovery
> > .
> >
> >>html
> >
> >
> >>We need to configure either on DHCP or on DNS for the WPAD record. For
the
> >>DHCP way, we do not recommend do that since there are many known issues.
> >>For the DNS way, it needs to use the port 80 on the internal NIC.
However,
> >>since the services on the SBS needs the port 80 on the internal NIC, we
> >
> > are
> >
> >>unable to use DNS to configure WPAD.
> >
> >
> >>As a conclusion, we are unable to enable "Automatically detect
connection
> >>settings" in a SBS environment. If you really want to do that, you must
> >
> > use
> >
> >>the DHCP way.
> >
> >
> >>3. In your scenario, you should always manually set SBS' internal NIC as
> >>the proxy in Internet options instead of enabling "Automatically detect
> >>connection settings"
> >
> >
> >>Hope the information helps. If anything is unclear, please let me know.
I
> >>am looking forward to hearing from you
> >
> >
> >>Best regards,
> >
> >
> >>Brandy Nee
> >
> >
> >>Microsoft CSS Online Newsgroup Support
> >
> >
> >>Get Secure! - www.microsoft.com/security
> >
> >
> >>==============================*================= ======
> >>When responding to posts, please "Reply to Group" via your newsreader so
> >>that others may learn and benefit from your issue.
> >>==============================*================= ======
> >
> >
> >>This posting is provided "AS IS" with no warranties, and confers no
> >
> > rights
> >
> >
> > .
> >
> > "clevere" <n...@noway.net> wrote in message
> >
> >
> > news:...
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>I'm afraid you misunderstood what I was saying. I was doing what you
> >>recommended:
> >
> >
> >>I have received your email. After a long time research on your logs, I
> >>found there are some errors occur when the Firewall Clients pass the
> >>authentication to the ISA. Please try the following steps:
> >
> >
> >>1. On the problematic client, temporarily disable the Firewall Client.
> >
> >
> >>Done
> >
> >
> >>2. Close all IE windows.
> >
> >
> >>Done
> >
> >
> >>3. Open Internet Options | Connections tab | LAN Settings button,
> >
> > configure
> >
> >>the ISA's internal NIC as the proxy.
> >
> >
> >>Did that.
> >
> >
> >>4. Launch IE to access that URL again to see if the problem still
exists.
> >>Yes, the problem presists.
> >
> >
> >>If this issue persists, please help to gather the following information:
> >
> >
> >>1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out
the
> >>steps how you did that? Do you mean that you disabled HTTP Filter under
> >>Internet Security & Acceleration Server
> >>2004\Yourserver\Configuration\*Add-in?
> >
> >
> >>No, I disabled Web Proxy under ISA
> >>2004\Myserver\Configuration\Ne*twork\Internal Network\Properties\Web
Proxy
> >
> >
> >>2. Are there any error messages in the System event log and the
> >
> > Application
> >
> >>event log? Please export the events into .evt files and then send to
you.
> >
> >
> >>No, there are none.
> >
> >
> >>Does that make more sense? I had to re-enable the Web Proxy for the
> >
> > internal
> >
> >>network in ISA to do the testing you asked, Because I had turned it off.
> >>After I turned it OFF, I could no longer use "Use this Proxy Server" in
> >
> > IE,
> >
> >>because the proxy server was turned off. So I had to reconfigure IE to
> >
> > just
> >
> >>Automatically detect the settings, so it would work with the web Proxy
> >>turned off.
> >
> >
> >>Does that make sense?
> >
> >
> >>""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
> >>news:...
> >>
> >>>Hello Clever,
> >
> >
> >>>Thank you for posting back.
> >
> >
> >>>Please see my information below:
> >
> >
> >>>1. If you disabled the Web Proxy, whatever you enabled "Automatically
> >>>detect connection settings", IE will not directly pass the request to
> >
> > the
> >
> >>>ISA. Instead, the Firewall Client will pass the IE requests to the ISA
> >
> > so
> >
> >>>it works.
> >
> >
> >>>2. To use "Automatically detect connection settings", we need to enable
> >>>WPAD on the ISA. Please See:
> >
> >
> >>>309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
> >>>Windows 2000
> >>>http://support.microsoft.com/?*id=309814
> >
> >
> >>>816320 How to configure firewall and Web proxy client Autodiscovery in
> >>>Windows Server 2003
> >>>http://support.microsoft.com/?*id=816320
> >
> >
> >>>Configuring DHCP and DNS for ISA automatic discovery
> >
> >
> >
> >
http://www.isaserver.org/tutor*ials/...auto*matic-dis....
> >
> > - Hide quoted text -
> > - Show quoted text -
> >
> >>>html
> >
> >
> >>>We need to configure either on DHCP or on DNS for the WPAD record. For
> >
> > the
> >
> >>>DHCP way, we do not recommend do that since there are many known
issues.
> >>>For the DNS way, it needs to use the port 80 on the internal NIC.
> >
> > However,
> >
> >>>since the services on the SBS needs the port 80 on the internal NIC, we
> >>
> >>are
> >>
> >>>unable to use DNS to configure WPAD.
> >
> >
> >>>As a conclusion, we are unable to enable "Automatically detect
> >
> > connection
> >
> >>>settings" in a SBS environment. If you really want to do that, you must
> >>
> >>use
> >>
> >>>the DHCP way.
> >
> >
> >>>3. In your scenario, you should always manually set SBS' internal NIC
as
> >>>the proxy in Internet options instead of enabling "Automatically detect
> >>>connection settings"
> >
> >
> >>>Hope the information helps. If anything is unclear, please let me know.
> >
> > I
> >
> >>>am looking forward to hearing from you
> >
> >
> >>>Best regards,
> >
> >
> >>>Brandy Nee
> >
> >
> >>>Microsoft CSS Online Newsgroup Support
> >
> >
> >>>Get Secure! - www.microsoft.com/security
> >
> >
> >>>==============================*================ =======
> >>>When responding to posts, please "Reply to Group" via your newsreader
so
> >>>that others may learn and benefit from your issue.
> >>>==============================*================ =======
> >
> >
> >>>This posting is provided "AS IS" with no warranties, and confers no
> >>
> >>rights.
> >
> >
> >
> > Reply
> >
> >

Hey Susan-
I made the change you suggested, so far, so good. I'll do some testing
tomorrow (when more people are online) and let you know.

"Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <>
wrote in message news:...
> Charlie Russel is saying the same thing.
>
> -> ISA Server
> -> Configuration
> -> General
> -> Define Connection Limits
> -> Connection Limit
> -> Limit the number of connection
> -> Connection limit per client (TCP and non-TCP)
>
> Do me a favor and check what value is there?
>
> If 40...try 160 for grins.
>
>
> clevere wrote:
>> Here's the google'd version of my post.
>>
>> Firewall Client disconnects?
>> All 17 messages in topic - view as tree
>> clevere May 30, 3:04 pm show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: "clevere" <n...@sorry.net> - Find messages by this author
>> Date: Mon, 30 May 2005 12:04:05 -0700
>> Local: Mon,May 30 2005 3:04 pm
>> Subject: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> Ok, in my strive to find out why I am having problems with just one URL,
>> I
>> was attempting to make a transaction on this URL, and my firewall client
>> reported it was unable to connect to the ISA server.
>>
>> The Firewall Client is for ISA 2004. I have manually select the ISA
>> server
>> selected, with the server name. Just like I had with ISA 2000. The one
>> thing
>> I find funny is that instead of having the firewall client manager in the
>> control panel, it's now in Programs (off the start menu). Is everyone
>> elses
>> like that? Is there a way in ISA 2004 to find why I am getting
>> disconnected?
>>
>> Reply
>>
>> "Brandy Nee [MSFT]" May 31, 6:45 am show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages
>> by
>> this author
>> Date: Tue, 31 May 2005 10:45:19 GMT
>> Local: Tues,May 31 2005 6:45 am
>> Subject: RE: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> Hello Clevere,
>>
>> Thank you for posting to the SBS Newsgroup.
>>
>> From your post, I think your issue is your firewall clients cannot
>> connect
>> to the ISA server. If I have misunderstood your issue, please let me
>> know.
>>
>> Before we go any further, I need to confirm with you for some
>> information:
>>
>> 1. I am not quite clear your meaning "attempting to make a transaction on
>> this URL", please explain it in detailed.
>>
>> 2. I assume that your firewall clients are using ISA 2004, what is your
>> ISA
>> server version, 2000 or 2004?
>>
>> 3. Does this issue happen to all the firewall clients or some of them?
>>
>> 4. Can you manually or automatically connect the firewall client to
>> connect
>> to the ISA server? To do so,
>>
>> a) On of the problematic client workstation, in the taskbar, double click
>> the Firewall Client icon, and Firewall Client Options comes out.
>>
>> b) Check the box Automatically/Manually detect ISA server.
>>
>> c) Click OK, and test whether it connects or not.
>>
>> 5. Also in the Firewall Client icon, make sure that you have typed the
>> right ISA Server address to connect. You can fill in the blank with the
>> ISA
>> server FQDN or IP address, and test whether it is connected.
>>
>> 6. Make sure your ISA service is Started.
>>
>> Thanks for your time. I am looking forward to hearing from you soon.
>>
>> Best regards,
>>
>> Brandy Nee
>>
>> Microsoft CSS Online Newsgroup Support
>>
>> Get Secure! - www.microsoft.com/security
>>
>> ==============================*=================== ====
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> ==============================*=================== ====
>>
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> Reply
>>
>> clevere May 31, 7:39 pm show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: "clevere" <n...@sorry.net> - Find messages by this author
>> Date: Tue, 31 May 2005 16:39:36 -0700
>> Local: Tues,May 31 2005 7:39 pm
>> Subject: Re: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> Brandy-
>> Here are you answers:
>>
>> From your post, I think your issue is your firewall clients cannot
>> connect
>> to the ISA server. If I have misunderstood your issue, please let me
>> know.
>> Before we go any further, I need to confirm with you for some
>> information:
>> 1. I am not quite clear your meaning "attempting to make a transaction on
>> this URL", please explain it in detailed
>>
>>
>> .
>>
>> I am attempting to connect to my online banking system. It's a CGI based
>> application that lets you access your bank information. I can email you
>> the
>> URL, but I can't post it online. The first time I attempt to access the
>> feature of this site, (getting my account info), the page will not load,
>> the
>> page can't be displayed. IE reports
>> Cannot find server or DNS Error
>> Internet Explorer
>> If I click back, and then click continue (on the webpage to access my
>> account information) everything works. If I attempt to access anything
>> internet related when the page won't load, my Firewall client software
>> loses
>> it's connection with the ISA server.
>>
>> 2. I assume that your firewall clients are using ISA 2004, what is your
>> ISA
>> server version, 2000 or 2004
>>
>>
>> ?
>>
>> ISA 2004 Firewall Client, ISA 2004 Server
>>
>> 3. Does this issue happen to all the firewall clients or some of them
>>
>>
>> ?
>> I'm only testing this on one workstation at this time, but the URL access
>> problem happens across all the machines on the network. This was not a
>> problem with ISA 2000.
>>
>> 4. Can you manually or automatically connect the firewall client to
>> connect
>> to the ISA server? To do so
>>
>>
>> ,
>>
>> I have it setup manually.
>>
>> a) On of the problematic client workstation, in the taskbar, double click
>> the Firewall Client icon, and Firewall Client Options comes out.
>> b) Check the box Automatically/Manually detect ISA server.
>> c) Click OK, and test whether it connects or not.
>> 5. Also in the Firewall Client icon, make sure that you have typed the
>> right ISA Server address to connect. You can fill in the blank with the
>> ISA
>> server FQDN or IP address, and test whether it is connected
>>
>>
>> .
>>
>> I've done this, works everytime. Except when the firewall client loses
>> connection to the ISA server. It then takes about 15 seconds before it
>> can
>> find the ISA server
>>
>> 6. Make sure your ISA service is Started.
>> It's running on the SBS2K3 box .. quite happily...
>>
>> Thanks for your time. I am looking forward to hearing from you soon
>>
>>
>> .
>>
>> This is what my ISA 2004 log says when I attempt to connect to the web
>> site
>> in question:
>>
>> 192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0;
>> Windows
>> NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:29 w3proxy VOLE -
>> www.customwa.com 66.224.153.131 443 - 596 364 SSL-tunnel TCP -
>> www.customwa.com:443 - Inet 995 - SBS Internet Access Rule - Internal
>> External 0x8a Failed
>> 192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
>> 5.1;
>> SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
>> www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
>> www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
>> External 0x800 Allowed
>> 192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
>> 5.1;
>> SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
>> www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
>> www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
>> External 0x800 Allowed
>> 192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0;
>> Windows
>> NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:30 w3proxy VOLE -
>> www.customwa.com 66.224.153.131 443 - 594 341 SSL-tunnel TCP -
>> www.customwa.com:443 - Inet 64 - SBS Internet Access Rule - Internal
>> External 0x88 Failed
>>
>> ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
>> news:...
>>
>> - Hide quoted text -
>> - Show quoted text -
>>
>>>Hello Clevere,
>>
>>
>>>Thank you for posting to the SBS Newsgroup.
>>
>>
>>>From your post, I think your issue is your firewall clients cannot
>>>connect
>>>to the ISA server. If I have misunderstood your issue, please let me
>>>know.
>>
>>
>>>Before we go any further, I need to confirm with you for some
>>>information:
>>
>>
>>>1. I am not quite clear your meaning "attempting to make a transaction on
>>>this URL", please explain it in detailed.
>>
>>
>>>2. I assume that your firewall clients are using ISA 2004, what is your
>>>ISA
>>>server version, 2000 or 2004?
>>
>>
>>>3. Does this issue happen to all the firewall clients or some of them?
>>
>>
>>>4. Can you manually or automatically connect the firewall client to
>>>connect
>>>to the ISA server? To do so,
>>
>>
>>>a) On of the problematic client workstation, in the taskbar, double click
>>>the Firewall Client icon, and Firewall Client Options comes out.
>>
>>
>>>b) Check the box Automatically/Manually detect ISA server.
>>
>>
>>>c) Click OK, and test whether it connects or not.
>>
>>
>>>5. Also in the Firewall Client icon, make sure that you have typed the
>>>right ISA Server address to connect. You can fill in the blank with the
>>>ISA
>>>server FQDN or IP address, and test whether it is connected.
>>
>>
>>>6. Make sure your ISA service is Started.
>>
>>
>>>Thanks for your time. I am looking forward to hearing from you soon.
>>
>>
>>>Best regards,
>>
>>
>>>Brandy Nee
>>
>>
>>>Microsoft CSS Online Newsgroup Support
>>
>>
>>>Get Secure! - www.microsoft.com/security
>>
>>
>>>==============================*================ =======
>>>When responding to posts, please "Reply to Group" via your newsreader so
>>>that others may learn and benefit from your issue.
>>>==============================*================ =======
>>
>>
>>>This posting is provided "AS IS" with no warranties, and confers no
>>>rights.
>>
>>
>>
>> Reply
>>
>> clevere Jun 1, 12:18 am show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: "clevere" <n...@sorry.net> - Find messages by this author
>> Date: Tue, 31 May 2005 21:18:36 -0700
>> Local: Wed,Jun 1 2005 12:18 am
>> Subject: Re: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> Hmm .. I made an interesting discovery. If I change the server name in
>> the
>> firewall client to the server IP address, I get the slow page load, but I
>> can connect to that site without problem.
>>
>> The firewall client is not able to find the ISA server every time I can't
>> access this web site. What does that indicate?
>>
>> ""
>>
>> - Hide quoted text -
>> - Show quoted text -
>> Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
>> news:...
>>
>>>Hello Clevere,
>>
>>
>>>Thank you for posting to the SBS Newsgroup.
>>
>>
>>>From your post, I think your issue is your firewall clients cannot
>>>connect
>>>to the ISA server. If I have misunderstood your issue, please let me
>>>know.
>>
>>
>>>Before we go any further, I need to confirm with you for some
>>>information:
>>
>>
>>>1. I am not quite clear your meaning "attempting to make a transaction on
>>>this URL", please explain it in detailed.
>>
>>
>>>2. I assume that your firewall clients are using ISA 2004, what is your
>>>ISA
>>>server version, 2000 or 2004?
>>
>>
>>>3. Does this issue happen to all the firewall clients or some of them?
>>
>>
>>>4. Can you manually or automatically connect the firewall client to
>>>connect
>>>to the ISA server? To do so,
>>
>>
>>>a) On of the problematic client workstation, in the taskbar, double click
>>>the Firewall Client icon, and Firewall Client Options comes out.
>>
>>
>>>b) Check the box Automatically/Manually detect ISA server.
>>
>>
>>>c) Click OK, and test whether it connects or not.
>>
>>
>>>5. Also in the Firewall Client icon, make sure that you have typed the
>>>right ISA Server address to connect. You can fill in the blank with the
>>>ISA
>>>server FQDN or IP address, and test whether it is connected.
>>
>>
>>>6. Make sure your ISA service is Started.
>>
>>
>>>Thanks for your time. I am looking forward to hearing from you soon.
>>
>>
>>>Best regards,
>>
>>
>>>Brandy Nee
>>
>>
>>>Microsoft CSS Online Newsgroup Support
>>
>>
>>>Get Secure! - www.microsoft.com/security
>>
>>
>>>==============================*================ =======
>>>When responding to posts, please "Reply to Group" via your newsreader so
>>>that others may learn and benefit from your issue.
>>>==============================*================ =======
>>
>>
>>>This posting is provided "AS IS" with no warranties, and confers no
>>>rights.
>>
>>
>>
>> Reply
>>
>> clevere Jun 1, 12:22 am show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: "clevere" <n...@sorry.net> - Find messages by this author
>> Date: Tue, 31 May 2005 21:22:53 -0700
>> Local: Wed,Jun 1 2005 12:22 am
>> Subject: Re: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> I may have spoken too soon on the finding the ISA server via the IP
>> address...
>>
>> But the firewall client is losing connection or dropping it with the ISA
>> server.
>>
>> "clevere" <n...@sorry.net> wrote in message
>>
>>
>> news:...
>>
>> - Hide quoted text -
>> - Show quoted text -
>>
>>>Hmm .. I made an interesting discovery. If I change the server name in
>>>the
>>>firewall client to the server IP address, I get the slow page load, but I
>>>can connect to that site without problem.
>>
>>
>>>The firewall client is not able to find the ISA server every time I can't
>>>access this web site. What does that indicate?
>>
>>
>>>""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
>>>news:.. .
>>>
>>>>Hello Clevere,
>>
>>
>>>>Thank you for posting to the SBS Newsgroup.
>>
>>
>>>>From your post, I think your issue is your firewall clients cannot
>>>>connect
>>>>to the ISA server. If I have misunderstood your issue, please let me
>>>>know.
>>
>>
>>>>Before we go any further, I need to confirm with you for some
>>>>information:
>>
>>
>>>>1. I am not quite clear your meaning "attempting to make a transaction
>>>>on
>>>>this URL", please explain it in detailed.
>>
>>
>>>>2. I assume that your firewall clients are using ISA 2004, what is your
>>>>ISA
>>>>server version, 2000 or 2004?
>>
>>
>>>>3. Does this issue happen to all the firewall clients or some of them?
>>
>>
>>>>4. Can you manually or automatically connect the firewall client to
>>>>connect
>>>>to the ISA server? To do so,
>>
>>
>>>>a) On of the problematic client workstation, in the taskbar, double
>>>>click
>>>>the Firewall Client icon, and Firewall Client Options comes out.
>>
>>
>>>>b) Check the box Automatically/Manually detect ISA server.
>>
>>
>>>>c) Click OK, and test whether it connects or not.
>>
>>
>>>>5. Also in the Firewall Client icon, make sure that you have typed the
>>>>right ISA Server address to connect. You can fill in the blank with the
>>>>ISA
>>>>server FQDN or IP address, and test whether it is connected.
>>
>>
>>>>6. Make sure your ISA service is Started.
>>
>>
>>>>Thanks for your time. I am looking forward to hearing from you soon.
>>
>>
>>>>Best regards,
>>
>>
>>>>Brandy Nee
>>
>>
>>>>Microsoft CSS Online Newsgroup Support
>>
>>
>>>>Get Secure! - www.microsoft.com/security
>>
>>
>>>>==============================*=============== ========
>>>>When responding to posts, please "Reply to Group" via your newsreader so
>>>>that others may learn and benefit from your issue.
>>>>==============================*=============== ========
>>
>>
>>>>This posting is provided "AS IS" with no warranties, and confers no
>>>>rights.
>>
>>
>>
>> Reply
>>
>> "Brandy Nee [MSFT]" Jun 1, 7:04 am show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages
>> by
>> this author
>> Date: Wed, 01 Jun 2005 11:04:51 GMT
>> Local: Wed,Jun 1 2005 7:04 am
>> Subject: Re: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> Hello Clevere,
>>
>> Thank you for posting back.
>>
>> From your reply, I think this maybe is a very complicated issue. Please
>> understand that we may take time to do more further research, and we also
>> need your assistance to collect more error information.
>>
>> 1. Unlike ISA Server 2000, it is by design that the Firewall Client of
>> ISA
>> 2004 is listed in the Programs as you mentioned, so please do not worry
>> about it.
>>
>> 2. When the connection is rejected by the ISA, the Firewall Client will
>> temporarily display "not connected" for about 15 seconds.
>>
>> 3. Please configure ISA's internal NIC as the proxy in the IE | Internet
>> Options | Connections tab | LAN Settings button, and then test whether it
>> works now. To do so, type the IP address of the ISA internal NIC into the
>> proxy server name, and then type the Port of internal NIC that the ISA is
>> monitoring into the port box.
>>
>> 4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
>> come from the SBS 2K3 SP1 Premium Edition or from the retail version of
>> the
>> ISA Server 2004?
>>
>> Thanks for your time. I am looking forward to your reply.
>>
>> Best regards,
>> Brandy Nee
>> Microsoft CSS Online Newsgroup Support
>> Get Secure! - www.microsoft.com/security
>> ==============================*=================== ====
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> ==============================*=================== ====
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights
>>
>>
>> .
>>
>> Reply
>>
>> clevere Jun 1, 12:17 pm show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: "clevere" <n...@sorry.net> - Find messages by this author
>> Date: Wed, 1 Jun 2005 09:17:33 -0700
>> Local: Wed,Jun 1 2005 12:17 pm
>> Subject: Re: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> Hi Brandy-
>> Thanks for replying, I'd really like to know why ISA 2004 is killing
>> my
>> connection
>>
>> Here are you answers:
>>
>> From your reply, I think this maybe is a very complicated issue. Please
>> understand that we may take time to do more further research, and we also
>> need your assistance to collect more error information.
>> 1. Unlike ISA Server 2000, it is by design that the Firewall Client of
>> ISA
>> 2004 is listed in the Programs as you mentioned, so please do not worry
>> about it
>>
>>
>> .
>>
>> Ok, no worries there then.
>>
>> 2. When the connection is rejected by the ISA, the Firewall Client will
>> temporarily display "not connected" for about 15 seconds
>>
>>
>> .
>>
>> That explains something, that ISA is rejecting the connection from my
>> workstation, but why?
>>
>> 3. Please configure ISA's internal NIC as the proxy in the IE | Internet
>> Options | Connections tab | LAN Settings button, and then test whether it
>> works now. To do so, type the IP address of the ISA internal NIC into the
>> proxy server name, and then type the Port of internal NIC that the ISA is
>> monitoring into the port box
>>
>>
>> .
>>
>> Did that, didn't change a thing. As soon as I try to access information
>> on
>> www.customwaNOSPAM.com The firewall client loses connection with the
>> server,
>> and poof, there goes my internet connection.
>>
>> 4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
>> come from the SBS 2K3 SP1 Premium Edition or from the retail version of
>> the
>> ISA Server 2004
>>
>>
>> ?
>>
>> Yes, I installed SBS 2k3 SP1 Premium Edition. The ISA 2004 comes from the
>> SBS2K3 SP1 Premium CD set you order over the internet. I upgraded as
>> follows:
>>
>> Downloaded SBS2K3 SP1 (per the Microsoft instructions) from the internet,
>> installed it, and was up and running with little trouble. Ordered my
>> CD's,
>> got My CD's, and install ISA 2004... that's when the problem started to
>> happen. I don't know if you saw this in my last post, but this is what
>> ISA
>> is saying when I attempt to access that web site:
>>
>> 192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE 6.0;
>> Windows
>> NT 5.1; SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:29 w3proxy VOLE -
>> www.customwa.com 66.224.153.131 443 - 596 364 SSL-tunnel TCP -
>> www.customwa.com:443 - Inet 995 - SBS Internet Access Rule - Internal
>> External 0x8a Failed
>> 192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
>> 5.1;
>> SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
>> www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
>> www.customwa.com:443 - Inet 407 - SBS Internet Access Rule - Internal
>> External 0x800 Allowed
>> 192.168.16.11 anonymous Mozilla/4.0 (compatible; MSIE 6.0
>>
>>
>> ; Windows NT 5.1;
>> SV1; .NET CLR 1.1.4322) N 2005-05-28 19:58:29 w3proxy VOLE -
>> www.customwa.com 192.168.16.2 443 - - 569 SSL-tunnel TCP -
>> www.customwa.com:443 - Inet 407 -
>>
>> SBS Internet Access Rule - Internal
>> External 0x800 Allowed
>> 192.168.16.11 PINE-FOREST\chris Mozilla/4.0 (compatible; MSIE
>>
>>
>> 6.0; Windows
>> NT 5.1;
>>
>> SV1; .NET CLR 1.1.4322) Y 2005-05-28 19:58:30 w3proxy VOLE -
>> www.customwa.com 66.224.153.131 443 - 594 341 SSL-tunnel TCP -
>> www.customwa.com:443 - Inet 64 - SBS Internet Access Rule - Internal
>> External 0x88 Failed
>>
>>
>> I am using IE, with the latest Service Pack install on Windows XP SP2.
>>
>> Just out of curiousity, and from a recommendation from another SBS
>> member, I
>> deleted all the ISA rules, and re-ran the Connect to the Internet Wizard.
>> It
>> recreated all the appropriate ISA rules, but my problem still exists.
>>
>> ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
>> news:ms%...
>>
>> - Hide quoted text -
>> - Show quoted text -
>>
>>>Hello Clevere,
>>
>>
>>>Thank you for posting back.
>>
>>
>>>From your reply, I think this maybe is a very complicated issue. Please
>>>understand that we may take time to do more further research, and we also
>>>need your assistance to collect more error information.
>>
>>
>>>1. Unlike ISA Server 2000, it is by design that the Firewall Client of
>>>ISA
>>>2004 is listed in the Programs as you mentioned, so please do not worry
>>>about it.
>>
>>
>>>2. When the connection is rejected by the ISA, the Firewall Client will
>>>temporarily display "not connected" for about 15 seconds.
>>
>>
>>>3. Please configure ISA's internal NIC as the proxy in the IE | Internet
>>>Options | Connections tab | LAN Settings button, and then test whether it
>>>works now. To do so, type the IP address of the ISA internal NIC into the
>>>proxy server name, and then type the Port of internal NIC that the ISA is
>>>monitoring into the port box.
>>
>>
>>>4. Have you installed the SBS 2K3 SP1 Premium Edition? Does the ISA 2K4
>>>come from the SBS 2K3 SP1 Premium Edition or from the retail version of
>>>the
>>>ISA Server 2004?
>>
>>
>>>Thanks for your time. I am looking forward to your reply.
>>
>>
>>>Best regards,
>>
>>
>>>Brandy Nee
>>
>>
>>>Microsoft CSS Online Newsgroup Support
>>
>>
>>>Get Secure! - www.microsoft.com/security
>>
>>
>>>==============================*================ =======
>>>When responding to posts, please "Reply to Group" via your newsreader so
>>>that others may learn and benefit from your issue.
>>>==============================*================ =======
>>
>>
>>>This posting is provided "AS IS" with no warranties, and confers no
>>>rights.
>>
>>
>>
>> Reply
>>
>> "Brandy Nee [MSFT]" Jun 2, 7:03 am show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages
>> by
>> this author
>> Date: Thu, 02 Jun 2005 11:03:11 GMT
>> Local: Thurs,Jun 2 2005 7:03 am
>> Subject: Re: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> Hello Clevere,
>>
>> Thank you for posting back.
>>
>> As I have stated in my last reply, this is a very complcated issue. To
>> perform more further research, please take your time and help us to
>> gather
>> the following information:
>>
>> [Note]: This information is very important for us to isolate and resolve
>> this issue.
>>
>> 1. IPCONFIG /ALL results on the SBS.
>>
>> 2. The network diagram that includes the IP addresses range for each
>> network.
>>
>> 3. ISA Info:
>>
>> 1) Download the file from the following URL:
>>
>> http://www.isatools.org/isainf*o/ISAInfo.zip
>>
>> 2) Extract all files to a folder on ISA server.
>>
>> 3) Double click Isainfo.js. This will generate 2 files
>> ISAInfo2004-<computer-name>.lo*g and ISAInfo2004-<computer-name>.xm*l in
>> the
>> current folder.
>>
>> 4) Attach the files and send it to v-bra...@microsoft.com
>>
>> 4. Gather the ISA logs:
>>
>> 1) Schedule a down time.
>>
>> 2) Open ISA 2004 management console.
>>
>> 3) Expand the server node and highlight 'Monitoring'.
>>
>> 4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
>> Pane' is showed there.
>>
>> 5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
>> Tasks', and then switch the 'log storage format' from 'MSDE database'
>> (default) to 'File'.
>>
>> 6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
>>
>> 7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
>> Tasks', and then switch the 'log storage format' from 'MSDE database'
>> (default) to 'File'.
>>
>> 8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
>>
>> 9) Click 'Apply' to save changes and update the configuration.
>>
>> 10) Temporarily disable the Firewall service. To do that, please click
>> Monitoring | Services tab, and then right click 'Microsoft Firewall' to
>> choose 'Stop'.
>>
>> 11) Clear the current existing W3C logs. To do that, go to the log
>> saving
>> directory and clean any existing .W3C logs. By default, the logs will be
>> saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
>> not
>> be able to deleted, that's normal.) You may backup them first and then
>> delete them.
>>
>> 12) Go back to the ISA 2004 management console, and then Start the
>> stopped
>> 'Microsoft Firewall' service.
>>
>> 13) Reproduce the problem, stop the service, and then attach the
>> resulting
>> W3C files to the newsgroup.
>>
>> 14) Please also let me know the IP address of the testing clients so that
>> I
>> can filter the data.
>>
>> Best regards,
>> Brandy Nee
>> Microsoft CSS Online Newsgroup Support
>> Get Secure! - www.microsoft.com/security
>> ==============================*=================== ====
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> ==============================*=================== ====
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights
>>
>>
>> .
>>
>> Reply
>>
>> clevere Jun 3, 1:18 am show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: "clevere" <n...@sorry.net> - Find messages by this author
>> Date: Thu, 2 Jun 2005 22:18:24 -0700
>> Local: Fri,Jun 3 2005 1:18 am
>> Subject: Re: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> Thanks for the reply Brandy, I'll start getting you this information
>> tomorrow in the AM!
>>
>> ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
>> news:...
>>
>> - Hide quoted text -
>> - Show quoted text -
>>
>>>Hello Clevere,
>>
>>
>>>Thank you for posting back.
>>
>>
>>>As I have stated in my last reply, this is a very complcated issue. To
>>>perform more further research, please take your time and help us to
>>>gather
>>>the following information:
>>
>>
>>>[Note]: This information is very important for us to isolate and resolve
>>>this issue.
>>
>>
>>>1. IPCONFIG /ALL results on the SBS.
>>
>>
>>>2. The network diagram that includes the IP addresses range for each
>>>network.
>>
>>
>>>3. ISA Info:
>>
>>
>>>1) Download the file from the following URL:
>>
>>
>>>http://www.isatools.org/isainf*o/ISAInfo.zip
>>
>>
>>>2) Extract all files to a folder on ISA server.
>>
>>
>>>3) Double click Isainfo.js. This will generate 2 files
>>>ISAInfo2004-<computer-name>.lo*g and ISAInfo2004-<computer-name>.xm*l in
>>
>> the
>>
>>>current folder.
>>
>>
>>>4) Attach the files and send it to v-bra...@microsoft.com
>>
>>
>>>4. Gather the ISA logs:
>>
>>
>>>1) Schedule a down time.
>>
>>
>>>2) Open ISA 2004 management console.
>>
>>
>>>3) Expand the server node and highlight 'Monitoring'.
>>
>>
>>>4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
>>>Pane' is showed there.
>>
>>
>>>5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
>>>Tasks', and then switch the 'log storage format' from 'MSDE database'
>>>(default) to 'File'.
>>
>>
>>>6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
>>
>>
>>>7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
>>>Tasks', and then switch the 'log storage format' from 'MSDE database'
>>>(default) to 'File'.
>>
>>
>>>8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
>>
>>
>>>9) Click 'Apply' to save changes and update the configuration.
>>
>>
>>>10) Temporarily disable the Firewall service. To do that, please click
>>>Monitoring | Services tab, and then right click 'Microsoft Firewall' to
>>>choose 'Stop'.
>>
>>
>>>11) Clear the current existing W3C logs. To do that, go to the log
>>>saving
>>>directory and clean any existing .W3C logs. By default, the logs will be
>>>saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
>>>not
>>>be able to deleted, that's normal.) You may backup them first and then
>>>delete them.
>>
>>
>>>12) Go back to the ISA 2004 management console, and then Start the
>>>stopped
>>>'Microsoft Firewall' service.
>>
>>
>>>13) Reproduce the problem, stop the service, and then attach the
>>>resulting
>>>W3C files to the newsgroup.
>>
>>
>>>14) Please also let me know the IP address of the testing clients so that
>>>I
>>>can filter the data.
>>
>>
>>>Best regards,
>>
>>
>>>Brandy Nee
>>
>>
>>>Microsoft CSS Online Newsgroup Support
>>
>>
>>>Get Secure! - www.microsoft.com/security
>>
>>
>>>==============================*================ =======
>>>When responding to posts, please "Reply to Group" via your newsreader so
>>>that others may learn and benefit from your issue.
>>>==============================*================ =======
>>
>>
>>>This posting is provided "AS IS" with no warranties, and confers no
>>>rights.
>>
>>
>>
>> Reply
>>
>> clevere Jun 3, 2:50 am show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: "clevere" <n...@sorry.net> - Find messages by this author
>> Date: Thu, 2 Jun 2005 23:50:47 -0700
>> Local: Fri,Jun 3 2005 2:50 am
>> Subject: Re: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> Good morning Brandy-
>>
>> Please check your email, you have some information from me.
>>
>> ""
>>
>> - Hide quoted text -
>> - Show quoted text -
>> Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
>> news:...
>>
>>>Hello Clevere,
>>
>>
>>>Thank you for posting back.
>>
>>
>>>As I have stated in my last reply, this is a very complcated issue. To
>>>perform more further research, please take your time and help us to
>>>gather
>>>the following information:
>>
>>
>>>[Note]: This information is very important for us to isolate and resolve
>>>this issue.
>>
>>
>>>1. IPCONFIG /ALL results on the SBS.
>>
>>
>>>2. The network diagram that includes the IP addresses range for each
>>>network.
>>
>>
>>>3. ISA Info:
>>
>>
>>>1) Download the file from the following URL:
>>
>>
>>>http://www.isatools.org/isainf*o/ISAInfo.zip
>>
>>
>>>2) Extract all files to a folder on ISA server.
>>
>>
>>>3) Double click Isainfo.js. This will generate 2 files
>>>ISAInfo2004-<computer-name>.lo*g and ISAInfo2004-<computer-name>.xm*l in
>>
>> the
>>
>>>current folder.
>>
>>
>>>4) Attach the files and send it to v-bra...@microsoft.com
>>
>>
>>>4. Gather the ISA logs:
>>
>>
>>>1) Schedule a down time.
>>
>>
>>>2) Open ISA 2004 management console.
>>
>>
>>>3) Expand the server node and highlight 'Monitoring'.
>>
>>
>>>4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
>>>Pane' is showed there.
>>
>>
>>>5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
>>>Tasks', and then switch the 'log storage format' from 'MSDE database'
>>>(default) to 'File'.
>>
>>
>>>6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
>>
>>
>>>7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
>>>Tasks', and then switch the 'log storage format' from 'MSDE database'
>>>(default) to 'File'.
>>
>>
>>>8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
>>
>>
>>>9) Click 'Apply' to save changes and update the configuration.
>>
>>
>>>10) Temporarily disable the Firewall service. To do that, please click
>>>Monitoring | Services tab, and then right click 'Microsoft Firewall' to
>>>choose 'Stop'.
>>
>>
>>>11) Clear the current existing W3C logs. To do that, go to the log
>>>saving
>>>directory and clean any existing .W3C logs. By default, the logs will be
>>>saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
>>>not
>>>be able to deleted, that's normal.) You may backup them first and then
>>>delete them.
>>
>>
>>>12) Go back to the ISA 2004 management console, and then Start the
>>>stopped
>>>'Microsoft Firewall' service.
>>
>>
>>>13) Reproduce the problem, stop the service, and then attach the
>>>resulting
>>>W3C files to the newsgroup.
>>
>>
>>>14) Please also let me know the IP address of the testing clients so that
>>>I
>>>can filter the data.
>>
>>
>>>Best regards,
>>
>>
>>>Brandy Nee
>>
>>
>>>Microsoft CSS Online Newsgroup Support
>>
>>
>>>Get Secure! - www.microsoft.com/security
>>
>>
>>>==============================*================ =======
>>>When responding to posts, please "Reply to Group" via your newsreader so
>>>that others may learn and benefit from your issue.
>>>==============================*================ =======
>>
>>
>>>This posting is provided "AS IS" with no warranties, and confers no
>>>rights.
>>
>>
>>
>> Reply
>>
>> clevere Jun 5, 3:09 am show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: "clevere" <n...@sorry.net> - Find messages by this author
>> Date: Sun, 5 Jun 2005 00:09:09 -0700
>> Local: Sun,Jun 5 2005 3:09 am
>> Subject: Re: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> While waiting for Brandy to reply to me, I discovered something
>> interesting.
>> If I disable ISA 2004's Web Proxy, everything works as you should expect
>> (all be it a little slower)..
>> Anyone got a take on that?
>>
>> "clevere" <n...@sorry.net> wrote in message
>>
>>
>> news:...
>>
>> - Hide quoted text -
>> - Show quoted text -
>>
>>>Ok, in my strive to find out why I am having problems with just one URL,
>>>I
>>>was attempting to make a transaction on this URL, and my firewall client
>>>reported it was unable to connect to the ISA server.
>>
>>
>>>The Firewall Client is for ISA 2004. I have manually select the ISA
>>>server
>>>selected, with the server name. Just like I had with ISA 2000. The one
>>>thing I find funny is that instead of having the firewall client manager
>>>in the control panel, it's now in Programs (off the start menu). Is
>>>everyone elses like that? Is there a way in ISA 2004 to find why I am
>>>getting disconnected?
>>
>>
>>
>> Reply
>>
>> "Brandy Nee [MSFT]" Jun 6, 6:32 am show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages
>> by
>> this author
>> Date: Mon, 06 Jun 2005 10:32:39 GMT
>> Local: Mon,Jun 6 2005 6:32 am
>> Subject: Re: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> Hello Clevere,
>>
>> Thank you for posting back.
>>
>> I have received your logs. Please be patient that I am doing researching
>> on
>> your issue now. To better filter your issue, I would like to know what
>> exactly the URL you failed to access. Can you please paste the URL link
>> to
>> my email address?
>>
>> Thanks for your cooperation and time. I am looking forward to hearing
>> from
>> you.
>>
>> Best regards,
>> Brandy Nee
>> Microsoft CSS Online Newsgroup Support
>> Get Secure! - www.microsoft.com/security
>> ==============================*=================== ====
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> ==============================*=================== ====
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights
>>
>>
>> .
>>
>> Reply
>>
>> "Brandy Nee [MSFT]" Jun 7, 6:31 am show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages
>> by
>> this author
>> Date: Tue, 07 Jun 2005 10:31:04 GMT
>> Local: Tues,Jun 7 2005 6:31 am
>> Subject: Re: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> Hello Clevere,
>>
>> Thank you for posting back.
>>
>> I have received your email. After a long time research on your logs, I
>> found there are some errors occur when the Firewall Clients pass the
>> authentication to the ISA. Please try the following steps:
>>
>> 1. On the problematic client, temporarily disable the Firewall Client.
>>
>> 2. Close all IE windows.
>>
>> 3. Open Internet Options | Connections tab | LAN Settings button,
>> configure
>> the ISA's internal NIC as the proxy.
>>
>> 4. Launch IE to access that URL again to see if the problem still exists.
>>
>> If this issue persists, please help to gather the following information:
>>
>> 1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out
>> the
>> steps how you did that? Do you mean that you disabled HTTP Filter under
>> Internet Security & Acceleration Server
>> 2004\Yourserver\Configuration\*Add-in?
>>
>> 2. Are there any error messages in the System event log and the
>> Application
>> event log? Please export the events into .evt files and then send to you.
>>
>> I am greatly appreciated your time and cooperation. If anything unclear,
>> please let me know.
>>
>> I am looking forward to hearing from you!
>> Best regards,
>> Brandy Nee
>> Microsoft CSS Online Newsgroup Support
>> Get Secure! - www
>> .microsoft.com/security
>> ==============================*=================== ====
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> ==============================*=================== ====
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights
>>
>>
>> .
>>
>> Reply
>>
>> clevere Jun 8, 4:20 am show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: "clevere" <n...@sorry.net> - Find messages by this author
>> Date: Wed, 8 Jun 2005 01:20:27 -0700
>> Local: Wed,Jun 8 2005 4:20 am
>> Subject: Re: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> Hi Brandy-
>> Alright, this is odd.
>>
>> I had to re-enable Web Proxy, for my network (I turned it off). I did
>> they
>> by Going to the ISA manager, clicking in Networks, right-clicking on the
>> Internal network, and disabling Web Proxy.
>>
>> With the web proxy enabled, I disabled the firewall client, and put in IE
>> to
>> use my server, at port 8080 for the proxy server.
>>
>> I was unable to access the website in question. I turned on the Firewall
>> Client, told IE to just "Auto matically detect connection settings" (so
>> that
>> it no longer used Proxy Server), and I could access the web site.
>>
>> With the "Web Proxy" running, some sites seem to be having problems
>> loading,
>> but that could be because SBS is doing it's mid-week backup. This I can
>> continue to test, I'll leave the Web Proxy turned on for now, and see how
>> it
>> performs during the day.
>>
>> As far as IE goes, shouldn't I be able to tell it to use this proxy
>> server,
>> and be good to go? Do you need any logs?
>>
>> There are no event ID's in the event viewer.
>>
>> ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
>> news:...
>>
>> - Hide quoted text -
>> - Show quoted text -
>>
>>>Hello Clevere,
>>
>>
>>>Thank you for posting back.
>>
>>
>>>I have received your logs. Please be patient that I am doing researching
>>>on
>>>your issue now. To better filter your issue, I would like to know what
>>>exactly the URL you failed to access. Can you please paste the URL link
>>>to
>>>my email address?
>>
>>
>>>Thanks for your cooperation and time. I am looking forward to hearing
>>>from
>>>you.
>>
>>
>>>Best regards,
>>
>>
>>>Brandy Nee
>>
>>
>>>Microsoft CSS Online Newsgroup Support
>>
>>
>>>Get Secure! - www.microsoft.com/security
>>
>>
>>>==============================*================ =======
>>>When responding to posts, please "Reply to Group" via your newsreader so
>>>that others may learn and benefit from your issue.
>>>==============================*================ =======
>>
>>
>>>This posting is provided "AS IS" with no warranties, and confers no
>>>rights.
>>
>>
>>
>> Reply
>>
>> "Brandy Nee [MSFT]" Jun 9, 7:19 am show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: v-bra...@online.microsoft.com ("Brandy Nee [MSFT]") - Find messages
>> by
>> this author
>> Date: Thu, 09 Jun 2005 11:19:41 GMT
>> Local: Thurs,Jun 9 2005 7:19 am
>> Subject: Re: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> Hello Clever,
>>
>> Thank you for posting back.
>>
>> Please see my information below:
>>
>> 1. If you disabled the Web Proxy, whatever you enabled "Automatically
>> detect connection settings", IE will not directly pass the request to the
>> ISA. Instead, the Firewall Client will pass the IE requests to the ISA
>> so
>> it works.
>>
>> 2. To use "Automatically detect connection settings", we need to enable
>> WPAD on the ISA. Please See:
>>
>> 309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
>> Windows 2000
>> http://support.microsoft.com/?*id=309814
>>
>> 816320 How to configure firewall and Web proxy client Autodiscovery in
>> Windows Server 2003
>> http://support.microsoft.com/?*id=816320
>>
>> Configuring DHCP and DNS for ISA automatic discovery
>> http://www.isaserver.org/tutor*ials/...auto*matic-dis....
>> html
>>
>> We need to configure either on DHCP or on DNS for the WPAD record. For
>> the
>> DHCP way, we do not recommend do that since there are many known issues.
>> For the DNS way, it needs to use the port 80 on the internal NIC.
>> However,
>> since the services on the SBS needs the port 80 on the internal NIC, we
>> are
>> unable to use DNS to configure WPAD.
>>
>> As a conclusion, we are unable to enable "Automatically detect connection
>> settings" in a SBS environment. If you really want to do that, you must
>> use
>> the DHCP way.
>>
>> 3. In your scenario, you should always manually set SBS' internal NIC as
>> the proxy in Internet options instead of enabling "Automatically detect
>> connection settings"
>>
>> Hope the information helps. If anything is
>>
>> unclear, please let me know. I
>> am looking forward to hearing from you
>> Best regards,
>> Brandy Nee
>> Microsoft CSS Online Newsgroup Support
>> Get Secure! - www
>> .microsoft.com/security
>> ==============================*=================== ====
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> ==============================*=================== ====
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights
>>
>>
>> .
>>
>> Reply
>>
>> clevere Jun 9, 1:20 pm show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: "clevere" <n...@noway.net> - Find messages by this author
>> Date: Thu, 9 Jun 2005 10:20:15 -0700
>> Local: Thurs,Jun 9 2005 1:20 pm
>> Subject: Re: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> I'm afraid you misunderstood what I was saying. I was doing what you
>> recommended:
>>
>> I have received your email. After a long time research on your logs, I
>> found there are some errors occur when the Firewall Clients pass the
>> authentication to the ISA. Please try the following steps:
>> 1. On the problematic client, temporarily disable the Firewall Client
>>
>>
>> .
>>
>> Done
>>
>> 2. Close all IE windows.
>>
>> Done
>>
>> 3. Open Internet Options | Connections tab | LAN Settings button,
>> configure
>> the ISA's internal NIC as the proxy
>>
>>
>> .
>>
>> Did that.
>>
>> 4. Launch IE to access that URL again to see if the problem still exists
>>
>>
>> .
>> Yes, the problem presists.
>>
>> If this issue persists, please help to gather the following information:
>> 1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out
>> the
>> steps how you did that? Do you mean that you disabled HTTP Filter under
>> Internet Security & Acceleration Server
>> 2004\Yourserver\Configuration\*Add-in
>>
>>
>> ?
>>
>> No, I disabled Web Proxy under ISA
>> 2004\Myserver\Configuration\Ne*twork\Internal Network\Properties\Web
>> Proxy
>>
>> 2. Are there any error messages in the System event log and the
>> Application
>> event log? Please export the events into .evt files and then send to you
>>
>>
>> .
>>
>> No, there are none.
>>
>> Does that make more sense? I had to re-enable the Web Proxy for the
>> internal
>> network in ISA to do the testing you asked, Because I had turned it off.
>> After I turned it OFF, I could no longer use "Use this Proxy Server" in
>> IE,
>> because the proxy server was turned off. So I had to reconfigure IE to
>> just
>> Automatically detect the settings, so it would work with the web Proxy
>> turned off.
>>
>> Does that make sense?
>>
>> ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
>> news:...
>>
>> - Hide quoted text -
>> - Show quoted text -
>>
>>>Hello Clever,
>>
>>
>>>Thank you for posting back.
>>
>>
>>>Please see my information below:
>>
>>
>>>1. If you disabled the Web Proxy, whatever you enabled "Automatically
>>>detect connection settings", IE will not directly pass the request to the
>>>ISA. Instead, the Firewall Client will pass the IE requests to the ISA
>>>so
>>>it works.
>>
>>
>>>2. To use "Automatically detect connection settings", we need to enable
>>>WPAD on the ISA. Please See:
>>
>>
>>>309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
>>>Windows 2000
>>>http://support.microsoft.com/?*id=309814
>>
>>
>>>816320 How to configure firewall and Web proxy client Autodiscovery in
>>>Windows Server 2003
>>>http://support.microsoft.com/?*id=816320
>>
>>
>>>Configuring DHCP and DNS for ISA automatic discovery
>>
>>
>> http://www.isaserver.org/tutor*ials/...auto*matic-dis....
>>
>>>html
>>
>>
>>>We need to configure either on DHCP or on DNS for the WPAD record. For
>>>the
>>>DHCP way, we do not recommend do that since there are many known issues.
>>>For the DNS way, it needs to use the port 80 on the internal NIC.
>>>However,
>>>since the services on the SBS needs the port 80 on the internal NIC, we
>>
>> are
>>
>>>unable to use DNS to configure WPAD.
>>
>>
>>>As a conclusion, we are unable to enable "Automatically detect connection
>>>settings" in a SBS environment. If you really want to do that, you must
>>
>> use
>>
>>>the DHCP way.
>>
>>
>>>3. In your scenario, you should always manually set SBS' internal NIC as
>>>the proxy in Internet options instead of enabling "Automatically detect
>>>connection settings"
>>
>>
>>>Hope the information helps. If anything is unclear, please let me know. I
>>>am looking forward to hearing from you
>>
>>
>>>Best regards,
>>
>>
>>>Brandy Nee
>>
>>
>>>Microsoft CSS Online Newsgroup Support
>>
>>
>>>Get Secure! - www.microsoft.com/security
>>
>>
>>>==============================*================ =======
>>>When responding to posts, please "Reply to Group" via your newsreader so
>>>that others may learn and benefit from your issue.
>>>==============================*================ =======
>>
>>
>>>This posting is provided "AS IS" with no warranties, and confers no
>>
>> rights
>>
>>
>> .
>>
>> - Hide quoted text -
>> - Show quoted text -
>>
>>
>> Reply
>>
>> clevere Jun 13, 10:43 am show options
>>
>> Newsgroups: microsoft.public.windows.server.sbs
>> From: "clevere" <n...@noway.net> - Find messages by this author
>> Date: Mon, 13 Jun 2005 07:43:13 -0700
>> Local: Mon,Jun 13 2005 10:43 am
>> Subject: Re: Firewall Client disconnects?
>> Reply | Reply to Author | Forward | Print | Individual Message | Show
>> original | Report Abuse
>>
>> I'm afraid you misunderstood what I was saying. I was doing what you
>> recommended
>>
>>
>> , and your answers are below:
>>
>> - Hide quoted text -
>> - Show quoted text -
>> I have received your email. After a long time research on your logs
>> , I
>> found
>> there
>> are
>> some
>> errors
>> occur
>> when
>> the
>> Firewall
>> Clients
>> pass
>> the
>> authentication
>> to
>> the
>> ISA
>> . Please
>> try
>> the
>> following
>> steps
>> :
>> 1
>> . On
>> the
>> problematic
>> client
>> , temporarily
>> disable
>> the
>> Firewall
>> Client
>> .
>> Done
>> 2. Close all IE windows.
>> Done
>> 3. Open Internet Options | Connections tab | LAN Settings button,
>> configure
>> the ISA's
>> internal
>> NIC
>> as
>> the
>> proxy
>> .
>> Did that.
>> 4. Launch IE to access that URL again to see if the
>> problem
>> still
>> exists
>> .
>> Yes, the problem presists.
>> If this issue persists, please help to gather the following information:
>> 1
>> . You
>> mentioned
>> "disable
>> ISA
>> 2004's
>> Web
>> Proxy
>> ". Please
>> fully
>> give
>> out
>> the
>> steps
>> how
>> you
>> did
>> that
>> ? Do
>> you
>> mean
>> that
>> you
>> disabled
>> HTTP
>> Filter
>> under
>> Internet
>> Security
>> & Acceleration
>> Server
>> 2004
>> \Yourserver
>> \Configuration
>> \Add
>> -in
>> ?
>> No, I disabled Web Proxy under ISA
>> 2004\Myserver\Configuration\Ne*twork\Internal Network\Properties\Web
>> Proxy
>> 2. Are there any error messages in the System event log and
>> the
>> Application
>> event
>> log
>> ? Please
>> export
>> the
>> events
>> into
>> .evt
>> files
>> and
>> then
>> send
>> to
>> you
>> .
>> No, there are none.
>> Does that make more sense? I had to re-enable the Web Proxy for the
>> internal
>> network in ISA to do the testing you asked, Because I had turned it off.
>> After I turned it OFF, I could no longer use "Use this Proxy Server" in
>> IE,
>> because the proxy server was turned off. So I had to reconfigure IE to
>> just
>> Automatically detect the settings, so it would work with the web Proxy
>> turned off.
>> Does that make sense?
>> ""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
>> news:...
>>
>>>Hello Clever,
>>
>>
>>>Thank you for posting back.
>>
>>
>>>Please see my information below:
>>
>>
>>>1. If you disabled the Web Proxy, whatever you enabled "Automatically
>>>detect connection settings", IE will not directly pass the request to the
>>>ISA. Instead, the Firewall Client will pass the IE requests to the ISA
>>>so
>>>it works.
>>
>>
>>>2. To use "Automatically detect connection settings", we need to enable
>>>WPAD on the ISA. Please See:
>>
>>
>>>309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
>>>Windows 2000
>>>http://support.microsoft.com/?*id=309814
>>
>>
>>>816320 How to configure firewall and Web proxy client Autodiscovery in
>>>Windows Server 2003
>>>http://support.microsoft.com/?*id=816320
>>
>>
>>>Configuring DHCP and DNS for ISA automatic discovery
>>
>>
>> http
>> ://www
>> .isaserver
>> .org
>> /tutorials
>> /Configuring
>> -DHCP
>> -DNS
>> -automatic
>> -discovery
>> .
>>
>>>html
>>
>>
>>>We need to configure either on DHCP or on DNS for the WPAD record. For
>>>the
>>>DHCP way, we do not recommend do that since there are many known issues.
>>>For the DNS way, it needs to use the port 80 on the internal NIC.
>>>However,
>>>since the services on the SBS needs the port 80 on the internal NIC, we
>>
>> are
>>
>>>unable to use DNS to configure WPAD.
>>
>>
>>>As a conclusion, we are unable to enable "Automatically detect connection
>>>settings" in a SBS environment. If you really want to do that, you must
>>
>> use
>>
>>>the DHCP way.
>>
>>
>>>3. In your scenario, you should always manually set SBS' internal NIC as
>>>the proxy in Internet options instead of enabling "Automatically detect
>>>connection settings"
>>
>>
>>>Hope the information helps. If anything is unclear, please let me know. I
>>>am looking forward to hearing from you
>>
>>
>>>Best regards,
>>
>>
>>>Brandy Nee
>>
>>
>>>Microsoft CSS Online Newsgroup Support
>>
>>
>>>Get Secure! - www.microsoft.com/security
>>
>>
>>>==============================*================ =======
>>>When responding to posts, please "Reply to Group" via your newsreader so
>>>that others may learn and benefit from your issue.
>>>==============================*================ =======
>>
>>
>>>This posting is provided "AS IS" with no warranties, and confers no
>>
>> rights
>>
>>
>> .
>>
>> "clevere" <n...@noway.net> wrote in message
>>
>>
>> news:...
>>
>> - Hide quoted text -
>> - Show quoted text -
>>
>>>I'm afraid you misunderstood what I was saying. I was doing what you
>>>recommended:
>>
>>
>>>I have received your email. After a long time research on your logs, I
>>>found there are some errors occur when the Firewall Clients pass the
>>>authentication to the ISA. Please try the following steps:
>>
>>
>>>1. On the problematic client, temporarily disable the Firewall Client.
>>
>>
>>>Done
>>
>>
>>>2. Close all IE windows.
>>
>>
>>>Done
>>
>>
>>>3. Open Internet Options | Connections tab | LAN Settings button,
>>
>> configure
>>
>>>the ISA's internal NIC as the proxy.
>>
>>
>>>Did that.
>>
>>
>>>4. Launch IE to access that URL again to see if the problem still exists.
>>>Yes, the problem presists.
>>
>>
>>>If this issue persists, please help to gather the following information:
>>
>>
>>>1. You mentioned "disable ISA 2004's Web Proxy". Please fully give out
>>>the
>>>steps how you did that? Do you mean that you disabled HTTP Filter under
>>>Internet Security & Acceleration Server
>>>2004\Yourserver\Configuration\*Add-in?
>>
>>
>>>No, I disabled Web Proxy under ISA
>>>2004\Myserver\Configuration\Ne*twork\Internal Network\Properties\Web
>>>Proxy
>>
>>
>>>2. Are there any error messages in the System event log and the
>>
>> Application
>>
>>>event log? Please export the events into .evt files and then send to you.
>>
>>
>>>No, there are none.
>>
>>
>>>Does that make more sense? I had to re-enable the Web Proxy for the
>>
>> internal
>>
>>>network in ISA to do the testing you asked, Because I had turned it off.
>>>After I turned it OFF, I could no longer use "Use this Proxy Server" in
>>
>> IE,
>>
>>>because the proxy server was turned off. So I had to reconfigure IE to
>>
>> just
>>
>>>Automatically detect the settings, so it would work with the web Proxy
>>>turned off.
>>
>>
>>>Does that make sense?
>>
>>
>>>""Brandy Nee [MSFT]"" <v-bra...@online.microsoft.com*> wrote in message
>>>news:.. .
>>>
>>>>Hello Clever,
>>
>>
>>>>Thank you for posting back.
>>
>>
>>>>Please see my information below:
>>
>>
>>>>1. If you disabled the Web Proxy, whatever you enabled "Automatically
>>>>detect connection settings", IE will not directly pass the request to
>>
>> the
>>
>>>>ISA. Instead, the Firewall Client will pass the IE requests to the ISA
>>
>> so
>>
>>>>it works.
>>
>>
>>>>2. To use "Automatically detect connection settings", we need to enable
>>>>WPAD on the ISA. Please See:
>>
>>
>>>>309814 How To Configure Firewall and Web Proxy Client Autodiscovery in
>>>>Windows 2000
>>>>http://support.microsoft.com/?*id=309814
>>
>>
>>>>816320 How to configure firewall and Web proxy client Autodiscovery in
>>>>Windows Server 2003
>>>>http://support.microsoft.com/?*id=816320
>>
>>
>>>>Configuring DHCP and DNS for ISA automatic discovery
>>
>>
>>
>> http://www.isaserver.org/tutor*ials/...auto*matic-dis....
>>
>> - Hide quoted text -
>> - Show quoted text -
>>
>>>>html
>>
>>
>>>>We need to configure either on DHCP or on DNS for the WPAD record. For
>>
>> the
>>
>>>>DHCP way, we do not recommend do that since there are many known issues.
>>>>For the DNS way, it needs to use the port 80 on the internal NIC.
>>
>> However,
>>
>>>>since the services on the SBS needs the port 80 on the internal NIC, we
>>>
>>>are
>>>
>>>>unable to use DNS to configure WPAD.
>>
>>
>>>>As a conclusion, we are unable to enable "Automatically detect
>>
>> connection
>>
>>>>settings" in a SBS environment. If you really want to do that, you must
>>>
>>>use
>>>
>>>>the DHCP way.
>>
>>
>>>>3. In your scenario, you should always manually set SBS' internal NIC as
>>>>the proxy in Internet options instead of enabling "Automatically detect
>>>>connection settings"
>>
>>
>>>>Hope the information helps. If anything is unclear, please let me know.
>>
>> I
>>
>>>>am looking forward to hearing from you
>>
>>
>>>>Best regards,
>>
>>
>>>>Brandy Nee
>>
>>
>>>>Microsoft CSS Online Newsgroup Support
>>
>>
>>>>Get Secure! - www.microsoft.com/security
>>
>>
>>>>==============================*=============== ========
>>>>When responding to posts, please "Reply to Group" via your newsreader so
>>>>that others may learn and benefit from your issue.
>>>>==============================*=============== ========
>>
>>
>>>>This posting is provided "AS IS" with no warranties, and confers no
>>>
>>>rights.
>>
>>
>>
>> Reply
>>