http://www.ISAserver.org ------------------------------------------------------- I don't see any TCP 445 of CIFS connection attempts but I do see lots of netbios datagram and netbios name server all trying to get to ip address 255.255.255.255 on either UDP:137 or UDP:138 ? As you mention office this is 2007 Pro without sp1 - would that make a difference? I've just updated the laptop that is here today up to the latest drivers for both wired and wireless to try over the weekend. ...Spence -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: 25 January 2008 14:12 To: ISA Mailing List Subject: [isalist] Re: An installed layered service provider LSP is outdated? http://www.ISAserver.org ------------------------------------------------------- We could also try reading the logs, yasilly. "Microsoft-WebDAV-MiniRedir/6.0.6000" indicates that Office is translating a UNC path to an HTTP path. Most often, this happens when the UNC path was unavailable for some reason. Spencer; do you also see failed or denied SMB (TCP:445 or CIFS) connection attempts from the same client in the Firewall logs? Jim -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Moffat Sent: Friday, January 25, 2008 4:57 AM To: ISA Mailing List Subject: [isalist] Re: An installed layered service provider LSP is outdated? http://www.ISAserver.org ------------------------------------------------------- You could try disabling the nic that's not in use at any particular time as well. It's the way 3rd party lsp's hook into the nic...Jim Harrison explains it far better than me...:) S -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Spencer Read Sent: Friday, January 25, 2008 8:53 AM To: ISA Mailing List Subject: [isalist] Re: An installed layered service provider LSP is outdated? http://www.ISAserver.org ------------------------------------------------------- They are original HP images with Just office and NOD32 added so yes, the HP crap is there! I've got one in the office at the moment so I'll remove the drivers, remove the nic and NOD32 and try again Just out of interest they use the wireless connection at home and wired in the office I've got the advent externally trying a wired connection to his router now to see if works differently So do you think we are looking at driver versions shipped with vista being crap? I haven't updated one yet but I will now! ...Spence -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Moffat Sent: 25 January 2008 12:41 To: ISA Mailing List Subject: [isalist] Re: An installed layered service provider LSP is outdated? http://www.ISAserver.org ------------------------------------------------------- When I've seen this, a rollback to the previous network driver has sometimes fixed it. In extreme circumstance you may need to remove nod32 and the nic from device manager and re-install. Is the HP crap still installed?? It's not ISA, it's a well known Vista happening. S -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Spencer Read Sent: Friday, January 25, 2008 8:34 AM To: ISA Mailing List Subject: [isalist] Re: An installed layered service provider LSP is outdated? http://www.ISAserver.org ------------------------------------------------------- Definitely not the Advent - The HP's I'm 99% sure they didn't There was no activation or update popping up as usual when the other stuff was installed ...Spence -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Moffat Sent: 25 January 2008 12:25 To: ISA Mailing List Subject: [isalist] Re: An installed layered service provider LSP is outdated? http://www.ISAserver.org ------------------------------------------------------- Was McAfee or Norton on these machines originally? S -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Spencer Read Sent: Friday, January 25, 2008 7:49 AM To: ISA Mailing List Subject: [isalist] An installed layered service provider LSP is outdated? http://www.ISAserver.org ------------------------------------------------------- Hi there, I'm going to throw this into the group as Google couldn't really help and after further testing I'm leaning towards ISA being badly configured by me! Domain is Windows 2003 R2 ISA Server 2006 fully patched as of 2 days ago with 2 nics, one connected to internal and one connected to a Cisco router which provides a proper external address. Client is one of 3 Vista Business laptops. 2 of them are HP's and one is an Advent. The HP's arrived with Vista business, I loaded Office 2007, NOD32, configured a PTPP connection and shipped them to the user The Advent was formatted and vista business, Office etc. installed then shipped. No ISA Firewall Client has been loaded on any machines. Now for the fun! Outlook works find, web browsing works fine, ping the internal ip address of the server works fine but if I try and access a shared folder I get 'An installed layered service provider is outdated' - This is by ip or computer name! I have tried using a preconfigured shortcut which works internally and also using the equivalent of the run prompt to try \\192.168.0.7 and \\192.168.0.7\company$ If I do the same on my Vista Home Premium machine(Non domain member) or any XP pro machine(domain or non domain member) it works fine! So far I have check windows firewall settings on the client, Netbios settings, Home Ip address range conflicts (I use 192.168.0.x here!) and changed to local admin from normal user and back with no changes It looks to me as if the client is trying to reach http://192.168.0.7/company$ (which doesn't exist) instead of \\192.168.0.7\company$ What have I configured incorrectly? ...Spence This is an snip from the isa console output Original Client IP Client Agent Authenticated Client Service Server Name Referring Server Destination Host Name Transport MIME Type Object Source Source Proxy Destination Proxy Bidirectional Client Host Name Filter Information Network Interface Raw IP Header Raw Payload GMT Log Time Source Port Processing Time Bytes Sent Bytes Received Result Code HTTP Status Code Cache Information Error Information Log Record Type Authentication Server Log Time Destination IP Destination Port Protocol Action Rule Client IP Client Username Source Network Destination Network HTTP Method URL 0.0.0.0 Microsoft-WebDAV-MiniRedir/6.0.6000 Yes Proxy STARCASE-ISA 192.168.0.7 TCP Internet - - - Req ID: 08da381f; Compression: client=No, server=No, compress rate=0% decompress rate=0% - - - 25/01/2008 10:58:56 0 1 277 147 200 OK. 0x40000000 0x500 Web Proxy Filter 25/01/2008 10:58:56 192.168.0.7 80 http Allowed Connection VPN Internal Access 192.168.0.43 SCUK\username VPN Clients Internal OPTIONS http://192.168.0.7/ 0.0.0.0 Microsoft-WebDAV-MiniRedir/6.0.6000 Yes Proxy STARCASE-ISA 192.168.0.7 TCP Internet - - - Req ID: 08da3820; Compression: client=No, server=No, compress rate=0% decompress rate=0% - - - 25/01/2008 10:58:56 0 1 215 166 501 Not Implemented 0x40000000 0x580 Web Proxy Filter 25/01/2008 10:58:56 192.168.0.7 80 http Allowed Connection VPN Internal Access 192.168.0.43 SCUK\username VPN Clients Internal PROPFIND http://192.168.0.7/company$ 0.0.0.0 Microsoft-WebDAV-MiniRedir/6.0.6000 Yes Proxy STARCASE-ISA 192.168.0.7 TCP Internet - - - Req ID: 08da3821; Compression: client=No, server=No, compress rate=0% decompress rate=0% - - - 25/01/2008 10:58:57 0 1 215 166 501 Not Implemented 0x40000000 0x580 Web Proxy Filter 25/01/2008 10:58:57 192.168.0.7 80 http Allowed Connection VPN Internal Access 192.168.0.43 SCUK\username VPN Clients Internal PROPFIND http://192.168.0.7/company$ 0.0.0.0 Microsoft-WebDAV-MiniRedir/6.0.6000 Yes Proxy STARCASE-ISA 192.168.0.7 TCP Internet - - - Req ID: 08da3822; Compression: client=No, server=No, compress rate=0% decompress rate=0% - - - 25/01/2008 10:58:57 0 1 215 166 501 Not Implemented 0x40000000 0x580 Web Proxy Filter 25/01/2008 10:58:57 192.168.0.7 80 http Allowed Connection VPN Internal Access 192.168.0.43 SCUK\username VPN Clients Internal PROPFIND http://192.168.0.7/company$ 0.0.0.0 Microsoft-WebDAV-MiniRedir/6.0.6000 Yes Proxy STARCASE-ISA 192.168.0.7 TCP Internet - - - Req ID: 08da3823; Compression: client=No, server=No, compress rate=0% decompress rate=0% - - - 25/01/2008 10:58:57 0 1 215 166 501 Not Implemented 0x40000000 0x580 Web Proxy Filter 25/01/2008 10:58:57 192.168.0.7 80 http Allowed Connection VPN Internal Access 192.168.0.43 SCUK\username VPN Clients Internal PROPFIND http://192.168.0.7/company$ 0.0.0.0 Microsoft-WebDAV-MiniRedir/6.0.6000 Yes Proxy STARCASE-ISA 192.168.0.7 TCP Internet - - - Req ID: 08da3824; Compression: client=No, server=No, compress rate=0% decompress rate=0% - - - 25/01/2008 10:58:57 0 1 215 166 501 Not Implemented 0x40000000 0x580 Web Proxy Filter 25/01/2008 10:58:57 192.168.0.7 80 http Allowed Connection VPN Internal Access 192.168.0.43 SCUK\username VPN Clients Internal PROPFIND http://192.168.0.7/company$ 0.0.0.0 Microsoft-WebDAV-MiniRedir/6.0.6000 Yes Proxy STARCASE-ISA 192.168.0.7 TCP Internet - - - Req ID: 08da3825; Compression: client=No, server=No, compress rate=0% decompress rate=0% - - - 25/01/2008 10:58:57 0 15 215 166 501 Not Implemented 0x40000000 0x580 Web Proxy Filter 25/01/2008 10:58:57 192.168.0.7 80 http Allowed Connection VPN Internal Access 192.168.0.43 SCUK\username VPN Clients Internal PROPFIND http://192.168.0.7/company$ 0.0.0.0 Microsoft-WebDAV-MiniRedir/6.0.6000 Yes Proxy STARCASE-ISA 192.168.0.7 TCP Internet - - - Req ID: 08da3826; Compression: client=No, server=No, compress rate=0% decompress rate=0% - - - 25/01/2008 10:58:57 0 1 215 166 501 Not Implemented 0x40000000 0x580 Web Proxy Filter 25/01/2008 10:58:57 192.168.0.7 80 http Allowed Connection VPN Internal Access 192.168.0.43 SCUK\username VPN Clients Internal PROPFIND http://192.168.0.7/company$ ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ -------------------------------------------------------------------- This is a confidential email. StarCase may monitor and record all emails. The views expressed in this email are those of the sender and not StarCase. StarCase (UK) Ltd Trading Address: Berkeley Business Park, Wainwright Road, Worcester WR4 9FA Email: enquiries@xxxxxxxxxxxxxx Company Number: 2075324 Registered in England Registered Office: Sterling House, Fulbourne Road, London E17 4EE VAT Registration Number: GB 455 2071 64 ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx