Tom, Here is the issue: From My Internal Network I am trying to connect to a web site that is across the VPN to the Remote Network. However, because ISA 2004 doesn't see the Remote Network it doesn't know how to make a proxy request for it. So I thought it the Local Host network could get to the Remote Network then I could get pages from those web sites on my Internal Network. DNS For All Networks on the Remote Network. The Only Network that Can't get to the DNS is the Local Host. Web Site Is On the Remote Network, Both the Internal (Across ISA As a Proxy) and the Local Host Can't Access the Web Site. If I don't use ISA as a Proxy -- i.e. make an SSL connection, there is no problem accessing the web site on the Remote Network from the Internal Network. This is what was in my ISA Log when trying to connect from the Internal Network to the Web Site on the Remote Network: #Fields: c-ip cs-username c-agent date time s-computername cs-referred r-host r-ip r-port time-taken cs-bytes sc-bytes cs-protocol s-operation cs-uri s-object-source sc-status rule FilterInfo cs-Network sc-Network error-info action 10.2.1.1 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705) 2005-04-13 18:24:55 GATEWAY - 10.0.0.22 10.0.0.22 80 20922 438 2185 http GET http://10.0.0.22/ Inet 10065 All Access - Crown Plaza To FiberCloud - Internal FiberCloud 0x40 Failed Jim said that this ment: "That's a failure attempt - the error code is 10065 (Winsock error), indicating that the upstream server was unreachable." Which lead me to believe that the Local Host (The ISA Server) doesn't know how to get to the Remote Network, which it doesn't when testing on the ISA 2004 server with a browser. -Wayne -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: Tuesday, April 19, 2005 12:20 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Host Server Unreachable http://www.ISAserver.org Hi Wayne, There shouldn't be any reason for the local host network to get to the remote network. Tom www.isaserver.org/shinder Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 MVP -- ISA Firewalls -----Original Message----- From: Wayne Berry [mailto:wayne@xxxxxxxxxx] Sent: Tuesday, April 19, 2005 2:17 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Host Server Unreachable http://www.ISAserver.org No PIX 515 on the FiberCloud (Rack Side) and ISA 2004 on Office Side (Crown Plaza). The strange thing is that everything works from Internal, no problems, it is just the Local Host that is having trouble getting across the VPN. Should I just shoot myself now? -Wayne -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: Tuesday, April 19, 2005 12:12 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Host Server Unreachable http://www.ISAserver.org Hi Wayne, Is there an ISA firewall on each end? Tom www.isaserver.org/shinder Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 MVP -- ISA Firewalls -----Original Message----- From: Wayne Berry [mailto:wayne@xxxxxxxxxx] Sent: Tuesday, April 19, 2005 2:06 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Host Server Unreachable http://www.ISAserver.org Dan, I think you are right, it is probably something about the IPSec connection. I wonder if it is because it is Terminating on the External Network? Maybe the Local Host needs Access the External network? -Wayne -----Original Message----- From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] Sent: Tuesday, April 19, 2005 10:11 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Host Server Unreachable http://www.ISAserver.org Sorry, I haven't set up any IPSec connections like you have, so I'm afraid I can't be of much help to you. -----Original Message----- From: Wayne Berry [mailto:wayne@xxxxxxxxxx] Sent: Tuesday, April 19, 2005 12:45 To: [ISAserver.org Discussion List] Subject: [isalist] RE: Host Server Unreachable http://www.ISAserver.org Dan, I check this and took some screen shots: http://www.berryintl.com/isa/prob1.bmp http://www.berryintl.com/isa/prob2.bmp http://www.berryintl.com/isa/prob3.bmp It appears to me in my limited knowledge that I have all the firewall access rules set up so that I should be able to Ping the machines at FiberCloud, however you can see my Ping results. Even if Ping didn't work I should be able to access the DNS server at 10.0.0.21 at FiberCloud, however I am getting DNS timeout on nslookup For some reason my localhost rules are not working like they should. -0Wayne ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: wayne@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: wayne@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: wayne@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx