[isalist] Re: ISA Problem
- From: "Marc A. Mapplebeck" <MMapplebeck@xxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Sat, 15 Apr 2006 19:41:59 -0300
http://www.ISAserver.org
-------------------------------------------------------
Yeah, that?s what I saw on a google, but it should not even touch the web
proxy service. Oh well, as long as everything works fine now.
_-_-_-_-_-_-_-_-_-
-"During times of universal deceit, telling the truth becomes a
revolutionary act." - George Orwell, 1984
_-_-_-_-_-_-_-_-_-
Marc A. Mapplebeck, MCP/MCDST/N+/A+/CNA
Owner, Shutterbug Productions & Consulting
IT Manager, City Animal Hospital Ltd.
MCP#: 3146827
CompTIA#: COMP001002835054
MMapplebeck@xxxxxxxxxx
MMapplebeck@xxxxxxxxx
_-_-_-_-_-_-_-_-_-
P: 506-471-7044
ICQ: 26743793
Yahoo!: mmapplebeck
MSN: mmapplebeck@xxxxxxxxxx
_-_-_-_-_-_-_-_-_-
This e-mail communication (including any or all attachments) is intended
only for the use of the person or entity to which it is addressed and may
contain confidential and/or privileged material. If you are not the intended
recipient of this e-mail, any use, review, retransmission, distribution,
dissemination, copying, printing, or other use of, or taking of any action
in reliance upon this e-mail, is strictly prohibited. If you have received
this e-mail in error, please contact the sender and delete the original and
any copy of this e-mail and any printout thereof, immediately. Your
co-operation is appreciated.
Le présent courriel (y compris toute pièce jointe) s'adresse uniquement à
son destinataire, qu'il soit une personne ou un organisme, et pourrait
comporter des renseignements privilégiés ou confidentiels. Si vous n'êtes
pas le destinataire du courriel, il est interdit d'utiliser, de revoir, de
retransmettre, de distribuer, de disséminer, de copier ou d'imprimer ce
courriel, d'agir en vous y fiant ou de vous en servir de toute autre façon.
Si vous avez reçu le présent courriel par erreur, prière de communiquer avec
l'expéditeur et d'éliminer l'original du courriel, ainsi que toute copie
électronique ou imprimée de celui-ci, immédiatement. Nous sommes
reconnaissants de votre collaboration.
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Jim Harrison
Sent: April 15, 2006 19:40
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA Problem
http://www.ISAserver.org
-------------------------------------------------------
"403" is most likely an ISA response, meaning unless you had disabled
logging for the system policies, you should have been able to find that in
the logs.
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Marc A. Mapplebeck
Sent: Saturday, April 15, 2006 15:20
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA Problem
http://www.ISAserver.org
-------------------------------------------------------
Fixed it, all I did was change the machine policy for WSUS from HTTP to
HTTPS and it works fine. Not sure what was causing it, but it seems fine
now. Thanks for all the suggestions, BTW the error was a WINUP: Error 403
"Access Denied/Forbidden"
_-_-_-_-_-_-_-_-_-
-"During times of universal deceit, telling the truth becomes a
revolutionary act." - George Orwell, 1984
_-_-_-_-_-_-_-_-_-
Marc A. Mapplebeck, MCP/MCDST/N+/A+/CNA
Owner, Shutterbug Productions & Consulting IT Manager, City Animal Hospital
Ltd.
MCP#: 3146827
CompTIA#: COMP001002835054
MMapplebeck@xxxxxxxxxx
MMapplebeck@xxxxxxxxx
_-_-_-_-_-_-_-_-_-
P: 506-471-7044
ICQ: 26743793
Yahoo!: mmapplebeck
MSN: mmapplebeck@xxxxxxxxxx
_-_-_-_-_-_-_-_-_-
This e-mail communication (including any or all attachments) is intended
only for the use of the person or entity to which it is addressed and may
contain confidential and/or privileged material. If you are not the intended
recipient of this e-mail, any use, review, retransmission, distribution,
dissemination, copying, printing, or other use of, or taking of any action
in reliance upon this e-mail, is strictly prohibited. If you have received
this e-mail in error, please contact the sender and delete the original and
any copy of this e-mail and any printout thereof, immediately. Your
co-operation is appreciated.
Le présent courriel (y compris toute pièce jointe) s'adresse uniquement à
son destinataire, qu'il soit une personne ou un organisme, et pourrait
comporter des renseignements privilégiés ou confidentiels. Si vous n'êtes
pas le destinataire du courriel, il est interdit d'utiliser, de revoir, de
retransmettre, de distribuer, de disséminer, de copier ou d'imprimer ce
courriel, d'agir en vous y fiant ou de vous en servir de toute autre façon.
Si vous avez reçu le présent courriel par erreur, prière de communiquer avec
l'expéditeur et d'éliminer l'original du courriel, ainsi que toute copie
électronique ou imprimée de celui-ci, immédiatement. Nous sommes
reconnaissants de votre collaboration.
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Steve Moffat
Sent: April 13, 2006 22:30
To: ISA Mailing List
Subject: [isalist] Re: ISA Problem
http://www.ISAserver.org
-------------------------------------------------------
And the windows update log will tell you why it's failing.
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Jim Harrison
Sent: Thursday, April 13, 2006 10:20 PM
To: ISA Mailing List
Subject: [isalist] Re: ISA Problem
http://www.ISAserver.org
-------------------------------------------------------
If ISA is the one failing to get updates, then you should have ISA log
entries for those requests.
AU uses WinHTTP via BITS, so you can also enable WinHTTP tracing to see what
it's really doing.
http://support.microsoft.com/search/default.aspx?catalog=LCID%3D1033&query=w
inhttptracecfg
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Marc A. Mapplebeck
Sent: Thursday, April 13, 2006 17:55
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA Problem
http://www.ISAserver.org
-------------------------------------------------------
WSUS is on a separate server, but the only machine affected, is the ISA
server. Kinda hard to point the finger at something else. My DCs get
updates, SQL server, exchange server, web server, all work fine except the
ISA. My original thought was something else as well, but I can't explain why
only one machine has this problem, and this 1 machine happens to be the ISA
server. Any other ideas/or better places I should point my finger?
_-_-_-_-_-_-_-_-_-
-"During times of universal deceit, telling the truth becomes a
revolutionary act." - George Orwell, 1984
_-_-_-_-_-_-_-_-_-
Marc A. Mapplebeck, MCP/MCDST/N+/A+/CNA
Owner, Shutterbug Productions & Consulting IT Manager, City Animal Hospital
Ltd.
MCP#: 3146827
CompTIA#: COMP001002835054
MMapplebeck@xxxxxxxxxx
MMapplebeck@xxxxxxxxx
_-_-_-_-_-_-_-_-_-
P: 506-471-7044
ICQ: 26743793
Yahoo!: mmapplebeck
MSN: mmapplebeck@xxxxxxxxxx
_-_-_-_-_-_-_-_-_-
This e-mail communication (including any or all attachments) is intended
only for the use of the person or entity to which it is addressed and may
contain confidential and/or privileged material. If you are not the intended
recipient of this e-mail, any use, review, retransmission, distribution,
dissemination, copying, printing, or other use of, or taking of any action
in reliance upon this e-mail, is strictly prohibited. If you have received
this e-mail in error, please contact the sender and delete the original and
any copy of this e-mail and any printout thereof, immediately. Your
co-operation is appreciated.
Le présent courriel (y compris toute pièce jointe) s'adresse uniquement à
son destinataire, qu'il soit une personne ou un organisme, et pourrait
comporter des renseignements privilégiés ou confidentiels. Si vous n'êtes
pas le destinataire du courriel, il est interdit d'utiliser, de revoir, de
retransmettre, de distribuer, de disséminer, de copier ou d'imprimer ce
courriel, d'agir en vous y fiant ou de vous en servir de toute autre façon.
Si vous avez reçu le présent courriel par erreur, prière de communiquer avec
l'expéditeur et d'éliminer l'original du courriel, ainsi que toute copie
électronique ou imprimée de celui-ci, immédiatement. Nous sommes
reconnaissants de votre collaboration.
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Jim Harrison
Sent: April 13, 2006 20:11
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA Problem
http://www.ISAserver.org
-------------------------------------------------------
If you have no log entries for this traffic, then how is ISA involved with
it?
Where does your WSUS service reside; on or off-ISA?
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Marc A. Mapplebeck
Sent: Thursday, April 13, 2006 15:59
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] ISA Problem
http://www.ISAserver.org
-------------------------------------------------------
Hi everyone, I seem to be having an odd problem that started about a month
ago. I'd like to blame SP2, as I installed it around the same time that this
problem cropped up. On our internal network, we run a WSUS server. All
machines have been updating fine, up untill a month ago, the ISA machine
stopped pulling updates from the WSUS server. I have the ISA configured to
directly access internal sites, there are no full access rules in or out of
the machine otherwise, there is an allow rule from internal to the WSUS, and
it has been working for years(SUS then upgraded to WSUS). Any ideas on what
to look for/what may cause this. There are no proxy logs to look at as it is
direct access to the internal network, and it does not have to pass through
the external gateway so it never sees the web proxy service at all. Any
ideas/suggestions? - Marc
_-_-_-_-_-_-_-_-_-
-"During times of universal deceit, telling the truth becomes a
revolutionary act." - George Orwell, 1984
_-_-_-_-_-_-_-_-_-
Marc A. Mapplebeck, MCP/MCDST/N+/A+/CNA
Owner, Shutterbug Productions & Consulting IT Manager, City Animal Hospital
Ltd.
MCP#: 3146827
CompTIA#: COMP001002835054
MMapplebeck@xxxxxxxxxx
MMapplebeck@xxxxxxxxx
_-_-_-_-_-_-_-_-_-
P: 506-471-7044
ICQ: 26743793
Yahoo!: mmapplebeck
MSN: mmapplebeck@xxxxxxxxxx
_-_-_-_-_-_-_-_-_-
This e-mail communication (including any or all attachments) is intended
only for the use of the person or entity to which it is addressed and may
contain confidential and/or privileged material. If you are not the intended
recipient of this e-mail, any use, review, retransmission, distribution,
dissemination, copying, printing, or other use of, or taking of any action
in reliance upon this e-mail, is strictly prohibited. If you have received
this e-mail in error, please contact the sender and delete the original and
any copy of this e-mail and any printout thereof, immediately. Your
co-operation is appreciated.
Le présent courriel (y compris toute pièce jointe) s'adresse uniquement à
son destinataire, qu'il soit une personne ou un organisme, et pourrait
comporter des renseignements privilégiés ou confidentiels. Si vous n'êtes
pas le destinataire du courriel, il est interdit d'utiliser, de revoir, de
retransmettre, de distribuer, de disséminer, de copier ou d'imprimer ce
courriel, d'agir en vous y fiant ou de vous en servir de toute autre façon.
Si vous avez reçu le présent courriel par erreur, prière de communiquer avec
l'expéditeur et d'éliminer l'original du courriel, ainsi que toute copie
électronique ou imprimée de celui-ci, immédiatement. Nous sommes
reconnaissants de votre collaboration.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
