[isalist] Re: 502 Proxy Error. The request is not supported. (50)
- From: "Ball, Dan" <DBall@xxxxxxxxxxx>
- To: "'isalist@xxxxxxxxxxxxx'" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 18 Aug 2008 08:50:18 -0400
What would happen if you left the compression enabled and run this script?
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Jim Harrison
Sent: Friday, August 15, 2008 9:40 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50)
Kewl!
..now for the other folks in the audience...
When compression is disabled, ISA will strip off the "Accept-encoding" header
that the client sends.
This is done to prevent the web site sending compressed responses because ISA
can't apply HTTP body inspection to it.
In this case (and several others, it seems), the web site sends compressed
content anyway (it's a Sun server; waddayexpect?).
Since ISA knows it can't process compressed HTTP bodies, it rejects it.
Adding this value causes ISA to forward the "Accept-encoding" header and when
the content is delivered compressed, ISA simply sends it back to the client
as-is without inspecting it.
Jim
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Ball, Dan
Sent: Friday, August 15, 2008 6:23 AM
To: 'isalist@xxxxxxxxxxxxx'
Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50)
That fixed it, thanks!
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Jim Harrison
Sent: Thursday, August 14, 2008 8:53 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50)
Do you have compression disabled?
If so, have a peek at the script in http://support.microsoft.com/?id=927263.
This script is supported for ISA 2006 after SP1.
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Ball, Dan
Sent: Thursday, August 14, 2008 11:17 AM
To: 'isalist@xxxxxxxxxxxxx'
Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50)
Captures sent.
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Jim Harrison
Sent: Wednesday, August 13, 2008 12:53 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50)
Get network captures.
Avery isn't directing you to live search; this is IE because it doesn't like
the response it (doesn't) get.
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Ball, Dan
Sent: Tuesday, August 12, 2008 9:51 AM
To: 'isalist@xxxxxxxxxxxxx'
Subject: [isalist] 502 Proxy Error. The request is not supported. (50)
Ever since installing ISA2006 SP1, I've been getting strange problems, and they
seem to be getting worse.
For example, someone reported problems with downloading templates from the
Avery website, so I checked and was able to reproduce the error on several
workstations. It would work fine, right up until you try to download the
template, then you would get this error:
X
Network Access Message: The page cannot be displayed
Explanation: There is a problem with the page you are trying to reach and it
cannot be displayed.
Try the following:
* Refresh page: Search for the page again by clicking the Refresh button.
The timeout may have occurred due to Internet congestion.
* Check spelling: Check that you typed the Web page address correctly. The
address may have been mistyped.
* Access from a link: If there is a link to the page you are looking for,
try accessing the page from that link.
If you are still not able to view the requested page, try contacting your
administrator or Helpdesk.
Technical Information (for support personnel)
* Error Code: 502 Proxy Error. The request is not supported. (50)
* IP Address: 209.170.91.160
* Date: 8/12/2008 12:12:23 PM [GMT]
* Server: gateway.MAPSNET.ORG
* Source: proxy
I checked the ISA logs, and the connections were not even showing up. So I
started to dig into it further. While trouble-shooting, it started to get
worse. Now, when I go to http://www.avery.com, it redirects me to the Live
Search page instead, and when I follow the links in the search results, I get
the same error.
Here is the monitoring reports I get from the ISA server:
Original Client IP Client Agent Authenticated Client
Service Server Name Referring Server Destination Host Name
Transport MIME Type Object Source Source Proxy
Destination Proxy Bidirectional Client Host Name
Filter Information Network Interface Raw IP Header
Raw Payload GMT Log Time Source Port Processing Time
Bytes Sent Bytes Received Result Code HTTP Status Code
Cache Information Error Information Log Record
Type Authentication Server Log Time Destination
IP Destination Port Protocol Action Rule
Client IP Client Username Source Network
Destination Network HTTP Method URL
0.0.0.0 Mozilla/4.0 (compatible; MSIE 7.0; Win32) No
Proxy GATEWAY 10.20.1.1 TCP
- - -
Req ID: 0cfe1899 - - -
8/12/2008 12:07:53 PM 0 1 5447 136
200 OK. 0x0 0x0 Web Proxy Filter
8/12/2008 8:07:53 AM 10.20.1.1
8080 http Allowed Connection 10.20.3.2
anonymous Internal GET
http://10.20.1.1/array.dll?Get.Routing.Script
10.20.3.2 GATEWAY
- TCP -
-
8/12/2008 12:07:54 PM 49364
0 0 0 0x0 ERROR_SUCCESS
0x0 0x0 Firewall - 8/12/2008
8:07:54 AM 10.20.1.1 8080 HTTP Proxy Initiated
Connection 10.20.3.2
Internal Local Host - -
10.20.3.2 GATEWAY
- TCP -
-
8/12/2008 12:07:54 PM 49364
0 428 5739 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN
0x0 0x0 Firewall -
8/12/2008 8:07:54 AM 10.20.1.1 8080 HTTP Proxy
Closed Connection 10.20.3.2
Internal Local Host - -
10.20.3.2 GATEWAY
- TCP -
-
8/12/2008 12:07:54 PM 49366
0 0 0 0x0 ERROR_SUCCESS
0x0 0x0 Firewall - 8/12/2008
8:07:54 AM 10.20.1.1 8080 HTTP Proxy Initiated
Connection 10.20.3.2
Internal Local Host - -
I've checked the DNS, and both internal and external are resolving to the same
address. It doesn't even appear to be trying to go through the ISA server...
Anyone have any ideas of where to start looking?
Other related posts:
