http://www.ISAserver.org ------------------------------------------------------- Okay, I now have a good test machine to trouble-shoot this with. Just reformatted and installed Vista Enterprise, installed Firewall Client, and it could not draw the MSN or HP home pages properly. Tried to access our own internal webservers, it kept redirecting to Live Search. Followed the search results to our own website, got "Error Code: 502 Proxy Error. The ISA Server denied the specified Uniform Resource Locator (URL). (12202)". Disabled the proxy settings, and could then access our internal websites. This morning I went to trouble-shoot it further, and the MSN page now displays correctly, but the HP site still acting up. Still cannot access internal servers without disabling proxy. Same exact settings are in use by hundreds of computers, but only a few are acting like this. -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Thursday, August 21, 2008 12:39 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50) http://www.ISAserver.org ------------------------------------------------------- Yeh; I bet you worry a lot about the ads they can't read... :-) -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan Sent: Wednesday, August 20, 2008 5:24 AM To: 'isalist@xxxxxxxxxxxxx' Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50) http://www.ISAserver.org ------------------------------------------------------- The reason I ask is that shortly afterwards we started getting a bunch of people reporting that the MSN home page was all messed up. We found a computer that was experiencing this (not all of them were), and the page was showing up without graphics and everything was in one long column on the left side. Rebooting and having the firewall client re-detect the ISA server didn't help, but some of them seemed to correct themselves later. Apparently this is a cause for great concern, as they cannot do anything at all on the Internet if they cannot load the MSN home page. *grin* -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Tuesday, August 19, 2008 12:41 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50) http://www.ISAserver.org ------------------------------------------------------- That's a good Q - if I get time, I'll play with it. ..of course, you're welcome to also... -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan Sent: Monday, August 18, 2008 5:50 AM To: 'isalist@xxxxxxxxxxxxx' Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50) What would happen if you left the compression enabled and run this script? From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Friday, August 15, 2008 9:40 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50) Kewl! ..now for the other folks in the audience... When compression is disabled, ISA will strip off the "Accept-encoding" header that the client sends. This is done to prevent the web site sending compressed responses because ISA can't apply HTTP body inspection to it. In this case (and several others, it seems), the web site sends compressed content anyway (it's a Sun server; waddayexpect?). Since ISA knows it can't process compressed HTTP bodies, it rejects it. Adding this value causes ISA to forward the "Accept-encoding" header and when the content is delivered compressed, ISA simply sends it back to the client as-is without inspecting it. Jim From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan Sent: Friday, August 15, 2008 6:23 AM To: 'isalist@xxxxxxxxxxxxx' Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50) That fixed it, thanks! From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Thursday, August 14, 2008 8:53 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50) Do you have compression disabled? If so, have a peek at the script in http://support.microsoft.com/?id=927263. This script is supported for ISA 2006 after SP1. From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan Sent: Thursday, August 14, 2008 11:17 AM To: 'isalist@xxxxxxxxxxxxx' Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50) Captures sent. From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Wednesday, August 13, 2008 12:53 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50) Get network captures. Avery isn't directing you to live search; this is IE because it doesn't like the response it (doesn't) get. From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan Sent: Tuesday, August 12, 2008 9:51 AM To: 'isalist@xxxxxxxxxxxxx' Subject: [isalist] 502 Proxy Error. The request is not supported. (50) Ever since installing ISA2006 SP1, I've been getting strange problems, and they seem to be getting worse. For example, someone reported problems with downloading templates from the Avery website, so I checked and was able to reproduce the error on several workstations. It would work fine, right up until you try to download the template, then you would get this error: X Network Access Message: The page cannot be displayed Explanation: There is a problem with the page you are trying to reach and it cannot be displayed. Try the following: * Refresh page: Search for the page again by clicking the Refresh button. The timeout may have occurred due to Internet congestion. * Check spelling: Check that you typed the Web page address correctly. The address may have been mistyped. * Access from a link: If there is a link to the page you are looking for, try accessing the page from that link. If you are still not able to view the requested page, try contacting your administrator or Helpdesk. Technical Information (for support personnel) * Error Code: 502 Proxy Error. The request is not supported. (50) * IP Address: 209.170.91.160 * Date: 8/12/2008 12:12:23 PM [GMT] * Server: gateway.MAPSNET.ORG * Source: proxy I checked the ISA logs, and the connections were not even showing up. So I started to dig into it further. While trouble-shooting, it started to get worse. Now, when I go to http://www.avery.com, it redirects me to the Live Search page instead, and when I follow the links in the search results, I get the same error. Here is the monitoring reports I get from the ISA server: Original Client IP Client Agent Authenticated Client Service Server Name Referring Server Destination Host Name Transport MIME Type Object Source Source Proxy Destination Proxy Bidirectional Client Host Name Filter Information Network Interface Raw IP Header Raw Payload GMT Log Time Source Port Processing Time Bytes Sent Bytes Received Result Code HTTP Status Code Cache Information Error Information Log Record Type Authentication Server Log Time Destination IP Destination Port Protocol Action Rule Client IP Client Username Source Network Destination Network HTTP Method URL 0.0.0.0 Mozilla/4.0 (compatible; MSIE 7.0; Win32) No Proxy GATEWAY 10.20.1.1 TCP - - - Req ID: 0cfe1899 - - - 8/12/2008 12:07:53 PM 0 1 5447 136 200 OK. 0x0 0x0 Web Proxy Filter 8/12/2008 8:07:53 AM 10.20.1.1 8080 http Allowed Connection 10.20.3.2 anonymous Internal GET http://10.20.1.1/array.dll?Get.Routing.Script 10.20.3.2 GATEWAY - TCP - - 8/12/2008 12:07:54 PM 49364 0 0 0 0x0 ERROR_SUCCESS 0x0 0x0 Firewall - 8/12/2008 8:07:54 AM 10.20.1.1 8080 HTTP Proxy Initiated Connection 10.20.3.2 Internal Local Host - - 10.20.3.2 GATEWAY - TCP - - 8/12/2008 12:07:54 PM 49364 0 428 5739 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN 0x0 0x0 Firewall - 8/12/2008 8:07:54 AM 10.20.1.1 8080 HTTP Proxy Closed Connection 10.20.3.2 Internal Local Host - - 10.20.3.2 GATEWAY - TCP - - 8/12/2008 12:07:54 PM 49366 0 0 0 0x0 ERROR_SUCCESS 0x0 0x0 Firewall - 8/12/2008 8:07:54 AM 10.20.1.1 8080 HTTP Proxy Initiated Connection 10.20.3.2 Internal Local Host - - I've checked the DNS, and both internal and external are resolving to the same address. It doesn't even appear to be trying to go through the ISA server... Anyone have any ideas of where to start looking? ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx