I would like to thank everyone who has been trying to help me resolve this problem. I took all of your advise and applied them with some success but not entirely. So... I went back and read the section called "Configureing ISA Server for Outbound Access" (Chapter 8) in the book called "Configuring ISA Server 2000" (by Dr. Thomas W. Shinder and Associates - Good Book!!!) and followed the instructions on page 461 to 463 ("Routing to a Linux Squid Server"). Even thought the upstream server is a Unix box, I followed the instructions using the wizard supplied (Note...this was no different than what I did before). But before I configured this new Routine Rule, I deleted the previous one I created. After finishing the wizard, I when back into the configuration and removed the "Automatic Poll Upstream Server for Array Configuration" check box since the Unix do not use the Array Config features (as I did before). Also, I configured a backup Upsteam Proxy Server using same Port number (911) but to a different IP address (question: does this make any difference???). I did this several times of removing and deleting the Routing rule (out of fustration) until it finally worked!!!! Why did it worked, maybe we should ask Microsoft. I beleive there is a definite bug in ISA when configuring a Upstream Server when using a differant SSL Tunnel. But again, I would like to thank you for all your help....Terry Fedirko > Port 911 is assigned to the following > http://www.iana.org/assignments/port-numbers : > xact-backup 911 tcp 911 tcp xact-backup > xact-backup 911 udp 911 udp xact-backup > > Try the following: > SSL TUNNEL in: > UDP > Receive-send > Local 911 > Remote any > Local computer <your DNS IP> > Remote Computer any > > SSL TUNNEL out: > TCP > Outbound > Local any > Remote 911 > Local computer <your DNS IP> > Remote Computer any > > > Joseph > > -----Original Message----- > From: Terry Fedirko [mailto:Terry.Fedirko@xxxxxxxxxxx] > Sent: Friday, February 01, 2002 6:25 AM > To: [ISAserver.org Discussion List] > Subject: [isalist] Re: HTTP 502 Proxy Error: 12211 > > http://www.ISAserver.org > > > I am running IE 6.0 on the same ISA server purely for testing. I > configured IE to point to the ISA server on port 8080 (HTTP, Secure, FTP > and Gopher). Under ISA, I have created a SSL Tunnel port 911 to talk > to > one of the upstream proxy server which is a UNIX base system. I do not > understand why they use 911 but thats how they configured it. If I > tried > using IE on a different computer accessing the same ISA server, I still > get the same result. > > One note of interest. I am testing another ISA Server on a different > system using the same configuration (more or less) that points to the > same > upstream proxy server. Somehow (and I don't know why) I was able to > access the Intranet but still unable to access the Internet. After a > short time, I keep getting a 10060 (permission denied) or 10065 (Host > Unreachable). > > Again, I need help. Any suggestions or ideas???? Terry > > > > Is IE 6.0 on the ISA server? Are you looking at your own sites or an > > external site? > > > > -----Original Message----- > > From: Terry Fedirko [mailto:Terry.Fedirko@xxxxxxxxxxx] > > Sent: Thursday, January 31, 2002 1:45 PM > > To: [ISAserver.org Discussion List] > > Subject: [isalist] Re: HTTP 502 Proxy Error: 12211 > > > > http://www.ISAserver.org > > > > > > I did configure the SSL Tunneling using port 911 recommended by > Mcrosoft > > Q283284. After running this script, I checked the registry and found > > that > > the new port has been added (so far so good). I rebooted the machine > > (just to be on the safe side) and started up the Internet Explorer > > (6.0). > > When trying to access a URL, I'm still getting the same old HTTP 502 > > 12211 error message. I even try to re-install the ISA Enterprise > > (including SP1 - Note: SP2 has been installed on Window 2000) and > still > > no go. I even remove the SSL 443 and 563 tunnel port from the > registry > > but again the same result. This is starting to become a real headache > > and > > ready to throw this product out!!! I cannot understand why Microsoft > > develop a product that seems so simple to configure but difficult to > > debug > > (a typical Microsoft way). Any other suggestions, ideas???? Thank > you. > > > > > > ------------------------------------------------------ > > You are currently subscribed to this ISAserver.org Discussion List as: > > cismic@xxxxxxx > > To unsubscribe send a blank email to > $subst('Email.Unsub') > > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > cismic@xxxxxxx > To unsubscribe send a blank email to $subst('Email.Unsub')