isa 2004 & external website access issue

Discussion in 'Windows Small Business Server' started by mp3nomad, Aug 15, 2005.

  1. mp3nomad

    mp3nomad Guest

    I'm having a problem accessing websites that I have setup on two other
    servers on my SBS network from an external location. I had them accessible
    using the basic firewall in SBS but now since installing ISA 2004, they are
    no longer accessible. I've tried the web publishing wizard in ISA but still
    they are not accessible.

    Would someone be able to direct me to information regarding this issue or
    supply some assistance? Anything that I could try. Remote web workplace & OWA
    work fine (are accessible externally). The sites on these other two servers
    are not accessible. I believe I have the public IPs setup correctly on the
    external NIC. I also have static private IPs setup for these sites.

    Thanks for any assistance!

    Shelly Campbell
     
    mp3nomad, Aug 15, 2005
    #1
    1. Advertisements

  2. mp3nomad

    Edward Tian Guest

    Dear Shelly:
    Thank you for posting here.

    From your description, I understand that after installing ISA2004, two
    internal web sites are no longer accessible, but RWW/OWA works fine. If I
    have misunderstood, please feel free to let me know.

    In order to narrow down this issue, could you do me a favor and collect the
    following information:
    1. How many Nics do you have on your SBS box? Does each internal web server
    have its own public IP?

    2. Can internal users currently access these two web sites?

    3. If you have only one public IP address, do you use host header to
    publish these two web sites? If so, you can refer to this step-by-step
    knowledge base article:
    How to configure Web publishing rules to host multiple Web sites with host
    headers in ISA Server
    http://support.microsoft.com/default.aspx?scid=KB;EN-US;838252

    4. Could you please let me know if you have run the CEICW after installing
    the ISA components? Open Server management console, navigate to 'To Do
    List' and click 'Connect to the internet' in the right panel. The wizard
    can help us configure the networking settings for a SBS server. It's
    recommended to use the wizard to configure the SBS server. More info:
    825763 How to configure Internet access in Windows Small Business Server
    2003
    http://support.microsoft.com/?id=825763

    5. Please help to gather the ISA Info:

    1) Download the file from the following URL:

    http://www.isatools.org/isainfo/ISAInfo.zip

    2) Extract all files to a folder on ISA server.
    3) Double click Isainfo.js. This will generate 2 files
    ISAInfo2004-<computer-name>.log and ISAInfo2004-<computer-name>.xml in the
    current folder.
    4) Please send these files to me.

    6. We may also gather the ISA logs:

    1) Schedule a down time.

    2) Open ISA 2004 management console.

    3) Expand the server node and highlight 'Monitoring'.

    4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
    Pane' is showed there.

    5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
    Tasks', and then switch the 'log storage format' from 'MSDE database'
    (default) to 'File'.

    6) Switch to the 'Fields' tab, click 'Select All', and then click OK.

    7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
    Tasks', and then switch the 'log storage format' from 'MSDE database'
    (default) to 'File'.

    8) Switch to the 'Fields' tab, click 'Select All', and then click OK.

    9) Click 'Apply' to save changes and update the configuration.

    10) Temporarily disable the Firewall service. To do that, please click
    Monitoring | Services tab and then right click 'Microsoft Firewall' to
    choose 'Stop'.

    11) Clear the current existing W3C logs. To do that, go to the log saving
    directory and clean any existing .W3C logs. By default, the logs will be
    saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may not
    be able to deleted, that's normal.) You may backup them first and then
    delete them.

    12) Go back to the ISA 2004 management console, and then Start the stopped
    'Microsoft Firewall' service.

    13) Reproduce the problem, stop the service, and then gather the resulting
    W3C files to me for analysis.

    You can send these files directly to my mailbox:

    Please also let me know the IP address of the testing client/SBS
    server/internal web servers so that I can filter the data.

    Hope the above information helps. I appreciate you taking time to collect
    the information.

    Please feel free to let me know if you have any questions or concerns.
    Have a nice day! :)

    Best Regards
    Edward Tian(MSFT)
    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security
    ======================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    ======================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    | Thread-Topic: isa 2004 & external website access issue
    | thread-index: AcWhsFm7O8SMyERkSOWty4PbWZ9ghw==
    | X-WBNR-Posting-Host: 64.9.51.98
    | From: "=?Utf-8?B?bXAzbm9tYWQ=?=" <>
    | Subject: isa 2004 & external website access issue
    | Date: Mon, 15 Aug 2005 08:45:24 -0700
    | Lines: 15
    | Message-ID: <>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="Utf-8"
    | Content-Transfer-Encoding: 7bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Content-Class: urn:content-classes:message
    | Importance: normal
    | Priority: normal
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | Newsgroups: microsoft.public.windows.server.sbs
    | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144488
    | X-Tomcat-NG: microsoft.public.windows.server.sbs
    |
    | I'm having a problem accessing websites that I have setup on two other
    | servers on my SBS network from an external location. I had them
    accessible
    | using the basic firewall in SBS but now since installing ISA 2004, they
    are
    | no longer accessible. I've tried the web publishing wizard in ISA but
    still
    | they are not accessible.
    |
    | Would someone be able to direct me to information regarding this issue or
    | supply some assistance? Anything that I could try. Remote web workplace &
    OWA
    | work fine (are accessible externally). The sites on these other two
    servers
    | are not accessible. I believe I have the public IPs setup correctly on
    the
    | external NIC. I also have static private IPs setup for these sites.
    |
    | Thanks for any assistance!
    |
    | Shelly Campbell
    |
     
    Edward Tian, Aug 16, 2005
    #2
    1. Advertisements

  3. mp3nomad

    mp3nomad Guest

    Thanks for your reply. I have answered your questions as follows. I have also
    emailed the logs to you as requested.

    we have 2 Nics - one for internal and one for external

    yes... each web server has its own public IP
    I don't believe this applies since we have public IPs for each site
    yes... we did run the CEICW
    I have emailed these files to you.
    I will need to do the following on off hours this evening.
     
    mp3nomad, Aug 16, 2005
    #3
  4. mp3nomad

    mp3nomad Guest

    Edward,

    Since I sent this message, my network tech assistant was able to get the
    connection to bigcitrix working and accessible from an external connection.
    The connection to devtest is still not accessible from an external
    connection. I haven't been able to reach him to ask what he did to correct
    the connection to the one web server.

    Shelly
     
    mp3nomad, Aug 16, 2005
    #4
  5. mp3nomad

    Edward Tian Guest

    Dear Shelly:
    Thank you for your update.

    From your ISAinfo, I notice that the URL of the problematic website is
    devtest.ag-is.com. However, when I try accessing this website, it appears
    that it is working now. Have you already made it function normally?

    I look forward to hearing from you.
    Have a nice day! :)

    Best Regards
    Edward Tian(MSFT)
    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security
    ======================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    ======================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    | Thread-Topic: isa 2004 & external website access issue
    | thread-index: AcWigfwoavmIIcw1Q/yBU2l/FQXbFw==
    | X-WBNR-Posting-Host: 64.9.51.98
    | From: "=?Utf-8?B?bXAzbm9tYWQ=?=" <>
    | References: <>
    <>
    | Subject: RE: isa 2004 & external website access issue
    | Date: Tue, 16 Aug 2005 09:46:01 -0700
    | Lines: 184
    | Message-ID: <>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="Utf-8"
    | Content-Transfer-Encoding: 7bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Content-Class: urn:content-classes:message
    | Importance: normal
    | Priority: normal
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | Newsgroups: microsoft.public.windows.server.sbs
    | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144929
    | X-Tomcat-NG: microsoft.public.windows.server.sbs
    |
    | Edward,
    |
    | Since I sent this message, my network tech assistant was able to get the
    | connection to bigcitrix working and accessible from an external
    connection.
    | The connection to devtest is still not accessible from an external
    | connection. I haven't been able to reach him to ask what he did to
    correct
    | the connection to the one web server.
    |
    | Shelly
    |
    | "Edward Tian" wrote:
    |
    | > Dear Shelly:
    | > Thank you for posting here.
    | >
    | > From your description, I understand that after installing ISA2004, two
    | > internal web sites are no longer accessible, but RWW/OWA works fine. If
    I
    | > have misunderstood, please feel free to let me know.
    | >
    | > In order to narrow down this issue, could you do me a favor and collect
    the
    | > following information:
    | > 1. How many Nics do you have on your SBS box? Does each internal web
    server
    | > have its own public IP?
    | >
    | > 2. Can internal users currently access these two web sites?
    | >
    | > 3. If you have only one public IP address, do you use host header to
    | > publish these two web sites? If so, you can refer to this step-by-step
    | > knowledge base article:
    | > How to configure Web publishing rules to host multiple Web sites with
    host
    | > headers in ISA Server
    | > http://support.microsoft.com/default.aspx?scid=KB;EN-US;838252
    | >
    | > 4. Could you please let me know if you have run the CEICW after
    installing
    | > the ISA components? Open Server management console, navigate to 'To Do
    | > List' and click 'Connect to the internet' in the right panel. The
    wizard
    | > can help us configure the networking settings for a SBS server. It's
    | > recommended to use the wizard to configure the SBS server. More info:
    | > 825763 How to configure Internet access in Windows Small Business
    Server
    | > 2003
    | > http://support.microsoft.com/?id=825763
    | >
    | > 5. Please help to gather the ISA Info:
    | >
    | > 1) Download the file from the following URL:
    | >
    | > http://www.isatools.org/isainfo/ISAInfo.zip
    | >
    | > 2) Extract all files to a folder on ISA server.
    | > 3) Double click Isainfo.js. This will generate 2 files
    | > ISAInfo2004-<computer-name>.log and ISAInfo2004-<computer-name>.xml in
    the
    | > current folder.
    | > 4) Please send these files to me.
    | >
    | > 6. We may also gather the ISA logs:
    | >
    | > 1) Schedule a down time.
    | >
    | > 2) Open ISA 2004 management console.
    | >
    | > 3) Expand the server node and highlight 'Monitoring'.
    | >
    | > 4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
    | > Pane' is showed there.
    | >
    | > 5) In the 'Task Pane', click 'Configure Firewall Logging' under
    'Logging
    | > Tasks', and then switch the 'log storage format' from 'MSDE database'
    | > (default) to 'File'.
    | >
    | > 6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
    | >
    | > 7) In the 'Task Pane', click 'Configure Web Proxy Logging' under
    'Logging
    | > Tasks', and then switch the 'log storage format' from 'MSDE database'
    | > (default) to 'File'.
    | >
    | > 8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
    | >
    | > 9) Click 'Apply' to save changes and update the configuration.
    | >
    | > 10) Temporarily disable the Firewall service. To do that, please click
    | > Monitoring | Services tab and then right click 'Microsoft Firewall' to
    | > choose 'Stop'.
    | >
    | > 11) Clear the current existing W3C logs. To do that, go to the log
    saving
    | > directory and clean any existing .W3C logs. By default, the logs will
    be
    | > saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
    not
    | > be able to deleted, that's normal.) You may backup them first and
    then
    | > delete them.
    | >
    | > 12) Go back to the ISA 2004 management console, and then Start the
    stopped
    | > 'Microsoft Firewall' service.
    | >
    | > 13) Reproduce the problem, stop the service, and then gather the
    resulting
    | > W3C files to me for analysis.
    | >
    | > You can send these files directly to my mailbox:
    | >
    | > Please also let me know the IP address of the testing client/SBS
    | > server/internal web servers so that I can filter the data.
    | >
    | > Hope the above information helps. I appreciate you taking time to
    collect
    | > the information.
    | >
    | > Please feel free to let me know if you have any questions or concerns.
    | > Have a nice day! :)
    | >
    | > Best Regards
    | > Edward Tian(MSFT)
    | > Microsoft CSS Online Newsgroup Support
    | >
    | > Get Secure! - www.microsoft.com/security
    | > ======================================================
    | > This newsgroup only focuses on SBS technical issues. If you have issues
    | > regarding other Microsoft products, you'd better post in the
    corresponding
    | > newsgroups so that they can be resolved in an efficient and timely
    manner.
    | > You can locate the newsgroup here:
    | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
    | >
    | > When opening a new thread via the web interface, we recommend you check
    the
    | > "Notify me of replies" box to receive e-mail notifications when there
    are
    | > any updates in your thread. When responding to posts via your
    newsreader,
    | > please "Reply to Group" so that others may learn and benefit from your
    | > issue.
    | >
    | > Microsoft engineers can only focus on one issue per thread. Although we
    | > provide other information for your reference, we recommend you post
    | > different incidents in different threads to keep the thread clean. In
    doing
    | > so, it will ensure your issues are resolved in a timely manner.
    | >
    | > For urgent issues, you may want to contact Microsoft CSS directly.
    Please
    | > check http://support.microsoft.com for regional support phone numbers.
    | >
    | > Any input or comments in this thread are highly appreciated.
    | > ======================================================
    | > This posting is provided "AS IS" with no warranties, and confers no
    rights.
    | >
    | > --------------------
    | > | Thread-Topic: isa 2004 & external website access issue
    | > | thread-index: AcWhsFm7O8SMyERkSOWty4PbWZ9ghw==
    | > | X-WBNR-Posting-Host: 64.9.51.98
    | > | From: "=?Utf-8?B?bXAzbm9tYWQ=?=" <>
    | > | Subject: isa 2004 & external website access issue
    | > | Date: Mon, 15 Aug 2005 08:45:24 -0700
    | > | Lines: 15
    | > | Message-ID: <>
    | > | MIME-Version: 1.0
    | > | Content-Type: text/plain;
    | > | charset="Utf-8"
    | > | Content-Transfer-Encoding: 7bit
    | > | X-Newsreader: Microsoft CDO for Windows 2000
    | > | Content-Class: urn:content-classes:message
    | > | Importance: normal
    | > | Priority: normal
    | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | > | Newsgroups: microsoft.public.windows.server.sbs
    | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144488
    | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
    | > |
    | > | I'm having a problem accessing websites that I have setup on two
    other
    | > | servers on my SBS network from an external location. I had them
    | > accessible
    | > | using the basic firewall in SBS but now since installing ISA 2004,
    they
    | > are
    | > | no longer accessible. I've tried the web publishing wizard in ISA but
    | > still
    | > | they are not accessible.
    | > |
    | > | Would someone be able to direct me to information regarding this
    issue or
    | > | supply some assistance? Anything that I could try. Remote web
    workplace &
    | > OWA
    | > | work fine (are accessible externally). The sites on these other two
    | > servers
    | > | are not accessible. I believe I have the public IPs setup correctly
    on
    | > the
    | > | external NIC. I also have static private IPs setup for these sites.
    | > |
    | > | Thanks for any assistance!
    | > |
    | > | Shelly Campbell
    | > |
    | >
    | >
    |
     
    Edward Tian, Aug 17, 2005
    #5
  6. mp3nomad

    Edward Tian Guest

    Dear Shelly:
    I am glad to hear that the issue has been resolved by means of adding a
    server publishing rule (As I mentioned in my previous reply). Also, we may
    need to remove the corresponding duplicate web publishing rule for these
    two website which may cause confliction.

    It's my pleasure to work with you in this post, if you encounter any
    questions in the future, please submit the post to newsgroup, we are
    standing by to help you.

    Have a nice day! :)

    Best Regards
    Edward Tian(MSFT)
    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security
    ======================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    ======================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    | Thread-Topic: isa 2004 & external website access issue
    | thread-index: AcWigfwoavmIIcw1Q/yBU2l/FQXbFw==
    | X-WBNR-Posting-Host: 64.9.51.98
    | From: "=?Utf-8?B?bXAzbm9tYWQ=?=" <>
    | References: <>
    <>
    | Subject: RE: isa 2004 & external website access issue
    | Date: Tue, 16 Aug 2005 09:46:01 -0700
    | Lines: 184
    | Message-ID: <>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="Utf-8"
    | Content-Transfer-Encoding: 7bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Content-Class: urn:content-classes:message
    | Importance: normal
    | Priority: normal
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | Newsgroups: microsoft.public.windows.server.sbs
    | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144929
    | X-Tomcat-NG: microsoft.public.windows.server.sbs
    |
    | Edward,
    |
    | Since I sent this message, my network tech assistant was able to get the
    | connection to bigcitrix working and accessible from an external
    connection.
    | The connection to devtest is still not accessible from an external
    | connection. I haven't been able to reach him to ask what he did to
    correct
    | the connection to the one web server.
    |
    | Shelly
    |
    | "Edward Tian" wrote:
    |
    | > Dear Shelly:
    | > Thank you for posting here.
    | >
    | > From your description, I understand that after installing ISA2004, two
    | > internal web sites are no longer accessible, but RWW/OWA works fine. If
    I
    | > have misunderstood, please feel free to let me know.
    | >
    | > In order to narrow down this issue, could you do me a favor and collect
    the
    | > following information:
    | > 1. How many Nics do you have on your SBS box? Does each internal web
    server
    | > have its own public IP?
    | >
    | > 2. Can internal users currently access these two web sites?
    | >
    | > 3. If you have only one public IP address, do you use host header to
    | > publish these two web sites? If so, you can refer to this step-by-step
    | > knowledge base article:
    | > How to configure Web publishing rules to host multiple Web sites with
    host
    | > headers in ISA Server
    | > http://support.microsoft.com/default.aspx?scid=KB;EN-US;838252
    | >
    | > 4. Could you please let me know if you have run the CEICW after
    installing
    | > the ISA components? Open Server management console, navigate to 'To Do
    | > List' and click 'Connect to the internet' in the right panel. The
    wizard
    | > can help us configure the networking settings for a SBS server. It's
    | > recommended to use the wizard to configure the SBS server. More info:
    | > 825763 How to configure Internet access in Windows Small Business
    Server
    | > 2003
    | > http://support.microsoft.com/?id=825763
    | >
    | > 5. Please help to gather the ISA Info:
    | >
    | > 1) Download the file from the following URL:
    | >
    | > http://www.isatools.org/isainfo/ISAInfo.zip
    | >
    | > 2) Extract all files to a folder on ISA server.
    | > 3) Double click Isainfo.js. This will generate 2 files
    | > ISAInfo2004-<computer-name>.log and ISAInfo2004-<computer-name>.xml in
    the
    | > current folder.
    | > 4) Please send these files to me.
    | >
    | > 6. We may also gather the ISA logs:
    | >
    | > 1) Schedule a down time.
    | >
    | > 2) Open ISA 2004 management console.
    | >
    | > 3) Expand the server node and highlight 'Monitoring'.
    | >
    | > 4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
    | > Pane' is showed there.
    | >
    | > 5) In the 'Task Pane', click 'Configure Firewall Logging' under
    'Logging
    | > Tasks', and then switch the 'log storage format' from 'MSDE database'
    | > (default) to 'File'.
    | >
    | > 6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
    | >
    | > 7) In the 'Task Pane', click 'Configure Web Proxy Logging' under
    'Logging
    | > Tasks', and then switch the 'log storage format' from 'MSDE database'
    | > (default) to 'File'.
    | >
    | > 8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
    | >
    | > 9) Click 'Apply' to save changes and update the configuration.
    | >
    | > 10) Temporarily disable the Firewall service. To do that, please click
    | > Monitoring | Services tab and then right click 'Microsoft Firewall' to
    | > choose 'Stop'.
    | >
    | > 11) Clear the current existing W3C logs. To do that, go to the log
    saving
    | > directory and clean any existing .W3C logs. By default, the logs will
    be
    | > saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
    not
    | > be able to deleted, that's normal.) You may backup them first and
    then
    | > delete them.
    | >
    | > 12) Go back to the ISA 2004 management console, and then Start the
    stopped
    | > 'Microsoft Firewall' service.
    | >
    | > 13) Reproduce the problem, stop the service, and then gather the
    resulting
    | > W3C files to me for analysis.
    | >
    | > You can send these files directly to my mailbox:
    | >
    | > Please also let me know the IP address of the testing client/SBS
    | > server/internal web servers so that I can filter the data.
    | >
    | > Hope the above information helps. I appreciate you taking time to
    collect
    | > the information.
    | >
    | > Please feel free to let me know if you have any questions or concerns.
    | > Have a nice day! :)
    | >
    | > Best Regards
    | > Edward Tian(MSFT)
    | > Microsoft CSS Online Newsgroup Support
    | >
    | > Get Secure! - www.microsoft.com/security
    | > ======================================================
    | > This newsgroup only focuses on SBS technical issues. If you have issues
    | > regarding other Microsoft products, you'd better post in the
    corresponding
    | > newsgroups so that they can be resolved in an efficient and timely
    manner.
    | > You can locate the newsgroup here:
    | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
    | >
    | > When opening a new thread via the web interface, we recommend you check
    the
    | > "Notify me of replies" box to receive e-mail notifications when there
    are
    | > any updates in your thread. When responding to posts via your
    newsreader,
    | > please "Reply to Group" so that others may learn and benefit from your
    | > issue.
    | >
    | > Microsoft engineers can only focus on one issue per thread. Although we
    | > provide other information for your reference, we recommend you post
    | > different incidents in different threads to keep the thread clean. In
    doing
    | > so, it will ensure your issues are resolved in a timely manner.
    | >
    | > For urgent issues, you may want to contact Microsoft CSS directly.
    Please
    | > check http://support.microsoft.com for regional support phone numbers.
    | >
    | > Any input or comments in this thread are highly appreciated.
    | > ======================================================
    | > This posting is provided "AS IS" with no warranties, and confers no
    rights.
    | >
    | > --------------------
    | > | Thread-Topic: isa 2004 & external website access issue
    | > | thread-index: AcWhsFm7O8SMyERkSOWty4PbWZ9ghw==
    | > | X-WBNR-Posting-Host: 64.9.51.98
    | > | From: "=?Utf-8?B?bXAzbm9tYWQ=?=" <>
    | > | Subject: isa 2004 & external website access issue
    | > | Date: Mon, 15 Aug 2005 08:45:24 -0700
    | > | Lines: 15
    | > | Message-ID: <>
    | > | MIME-Version: 1.0
    | > | Content-Type: text/plain;
    | > | charset="Utf-8"
    | > | Content-Transfer-Encoding: 7bit
    | > | X-Newsreader: Microsoft CDO for Windows 2000
    | > | Content-Class: urn:content-classes:message
    | > | Importance: normal
    | > | Priority: normal
    | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | > | Newsgroups: microsoft.public.windows.server.sbs
    | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:144488
    | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
    | > |
    | > | I'm having a problem accessing websites that I have setup on two
    other
    | > | servers on my SBS network from an external location. I had them
    | > accessible
    | > | using the basic firewall in SBS but now since installing ISA 2004,
    they
    | > are
    | > | no longer accessible. I've tried the web publishing wizard in ISA but
    | > still
    | > | they are not accessible.
    | > |
    | > | Would someone be able to direct me to information regarding this
    issue or
    | > | supply some assistance? Anything that I could try. Remote web
    workplace &
    | > OWA
    | > | work fine (are accessible externally). The sites on these other two
    | > servers
    | > | are not accessible. I believe I have the public IPs setup correctly
    on
    | > the
    | > | external NIC. I also have static private IPs setup for these sites.
    | > |
    | > | Thanks for any assistance!
    | > |
    | > | Shelly Campbell
    | > |
    | >
    | >
    |
     
    Edward Tian, Aug 18, 2005
    #6
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.