[isalist] Re: IE Proxy settings vs. ISA FWC
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Fri, 20 Oct 2006 08:49:38 -0700
http://www.ISAserver.org
-------------------------------------------------------
RFC 2616 & 2617 are the starting points.
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Danny
Sent: Friday, October 20, 2006 07:55
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: IE Proxy settings vs. ISA FWC
Hi Jim,
I will check, but I think this is the main culprit.
The app dev would like to know which RFC's you are referring to - they
developers are interested.
Thanks,
...D
On 10/15/06, Jim Harrison <Jim@xxxxxxxxxxxx> wrote:
It will depend on other application that think they know how to use the
browser settings.
Do you have an more that behave this way?
BTW, I have been successful in getting one app dev to change his code
to be more RFC-compliant.
A rare case, to be sure, but it's still numbered among the "wins"…
From: isalist-bounce@xxxxxxxxxxxxx [mailto:
isalist-bounce@xxxxxxxxxxxxx <mailto:isalist-bounce@xxxxxxxxxxxxx> ] On Behalf
Of Danny
Sent: Saturday, October 14, 2006 8:52 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: IE Proxy settings vs. ISA FWC
Thanks, Jim. I will try to get a capture. In the meantime, I am trying
to think of all the "cons" associated with disabling IE proxy settings and
solely using the FWC.
- Dan
On 10/13/06, Jim Harrison <Jim@xxxxxxxxxxxx> wrote:
http://www.ISAserver.org
-------------------------------------------------------
BTDT; if the app thinks "it knows best" you're screwed.
I'll bet that if you get a crapture of this traffic in the failure
state, it's trying to make "GET https://blah"; when it should be making "CONNECT
https://blah";.
Unfortunately, there's no good workaround short of disabling the
browser settings.
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Danny
Sent: Friday, October 13, 2006 12:21
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: IE Proxy settings vs. ISA FWC
When the IE proxy settings are enabled the app attempts to utilize
those settings regardless of whether or not the ISA firewall client is enabled.
When the proxy settings are not enabled and the firewall client is enabled, the
app is able to function via the FWC.
On 10/13/06, Jim Harrison <Jim@xxxxxxxxxxxx> wrote:
http://www.ISAserver.org
-------------------------------------------------------
"does not work"?
Doe is change its behavior based on these settings, or do the
settings have no effect at all?
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org < http://isatools.org
<http://isatools.org> >
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Danny
Sent: Friday, October 13, 2006 08:35
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] IE Proxy settings vs. ISA FWC
Up to date WinXP Pro install and ISA 2004 SP1 on Win2003 SP1...
all HTTP and HTTPS connects are restricted to a specific AD group.
A new app that we are testing on the client connects through
HTTP/S and does not work via IE's web proxy settings. Of course, when we
disable the IE proxy settings and enable the FWC (Firewall Client) the app
works fine.
Long-term, if we cannot convince the vendor to fix their app,
what are the pros and cons of disabling IE's proxy settings and using the FWC
as sole interface to authenticate against the ISA proxy/firewall.
Thanks,
...D
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
<http://www.isaserver.org/articles_tutorials/>
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
--
CPDE - Certified Petroleum Distribution Engineer CCBC - Certified
Canadian Beer Consumer
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
--
CPDE - Certified Petroleum Distribution Engineer
CCBC - Certified Canadian Beer Consumer
All mail to and from this domain is GFI-scanned.
--
CPDE - Certified Petroleum Distribution Engineer CCBC - Certified Canadian Beer
Consumer
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
