Re: ISA Server not processing site and content rules?
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 21 Jun 2004 06:39:25 -0700
See if this helps:
http://support.microsoft.com/default.aspx?scid=kb;en-us;297324&Product=ISAS
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: <gm_moon@xxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, June 21, 2004 07:21
Subject: [isalist] ISA Server not processing site and content rules?
http://www.ISAserver.org
Hi,
I'm stumped! (Call me Stumpy)
We have an ISA server behind a PIX. Currently all previous protocol rules
and S&C rules were set up fine. I'm attempting to create a new rule to
deny all but a few sites to a user group. I create the Protocol Rule to
allow all "allowable" IP traffic to the group. I then create the S&C rule
to deny all but a specific destination set. I set up a redirect to test
that the rule was being applied. It redirects to an internal page. When I
log in as a member of the group, and go to an unallowed site, it properly
redirects to the internal page. When I attempt to go to any of the allowed
sites, it prompts me for username and password. If I put in the group
member's password, I get repeated password confirmation boxes, then a 407
saying the ISA server requires authorization. If I put in an
administrator's creds, it lets me to the site fine.
When I view the ISA Web proxy log, it shows the name of the protocol rule
being processed, but only a "-" where the S&C rule should be. What am I
missing?
Thanks to all...
~G!
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Other related posts:
