[isalist] Re: IE Proxy settings vs. ISA FWC
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Fri, 13 Oct 2006 16:03:18 -0700
http://www.ISAserver.org
-------------------------------------------------------
BTDT; if the app thinks "it knows best" you're screwed.
I'll bet that if you get a crapture of this traffic in the failure state, it's
trying to make "GET https://blah"; when it should be making "CONNECT
https://blah";.
Unfortunately, there's no good workaround short of disabling the browser
settings.
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Danny
Sent: Friday, October 13, 2006 12:21
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: IE Proxy settings vs. ISA FWC
When the IE proxy settings are enabled the app attempts to utilize those
settings regardless of whether or not the ISA firewall client is enabled. When
the proxy settings are not enabled and the firewall client is enabled, the app
is able to function via the FWC.
On 10/13/06, Jim Harrison <Jim@xxxxxxxxxxxx> wrote:
http://www.ISAserver.org
-------------------------------------------------------
"does not work"?
Doe is change its behavior based on these settings, or do the settings
have no effect at all?
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org <http://isatools.org>
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Danny
Sent: Friday, October 13, 2006 08:35
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] IE Proxy settings vs. ISA FWC
Up to date WinXP Pro install and ISA 2004 SP1 on Win2003 SP1... all
HTTP and HTTPS connects are restricted to a specific AD group.
A new app that we are testing on the client connects through HTTP/S and
does not work via IE's web proxy settings. Of course, when we disable the IE
proxy settings and enable the FWC (Firewall Client) the app works fine.
Long-term, if we cannot convince the vendor to fix their app, what are
the pros and cons of disabling IE's proxy settings and using the FWC as sole
interface to authenticate against the ISA proxy/firewall.
Thanks,
...D
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
<http://www.isaserver.org/articles_tutorials/>
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
--
CPDE - Certified Petroleum Distribution Engineer CCBC - Certified Canadian Beer
Consumer
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
