[isalist] Re: Think Outside the GUI challenge #2

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 22 Nov 2006 13:57:22 -0800

http://www.ISAserver.org
-------------------------------------------------------
  
(paraphrased)

Case #1 & #2 - "failed to communicate with array member <blah>"
(paraphrased)

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thomas W Shinder
Sent: Wednesday, November 22, 2006 8:49 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Think Outside the GUI challenge #2

http://www.ISAserver.org
-------------------------------------------------------
  
OK. What did it say?

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- Microsoft Firewalls (ISA)

 

> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
> Sent: Wednesday, November 22, 2006 10:48 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Think Outside the GUI challenge #2
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> Yes.
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Thomas W Shinder
> Sent: Wednesday, November 22, 2006 8:36 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Think Outside the GUI challenge #2
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> Any hints in the Event Viewer?
> 
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://blogs.isaserver.org/shinder/
> Book: http://tinyurl.com/3xqb7
> MVP -- Microsoft Firewalls (ISA)
> 
>  
> 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
> > Sent: Wednesday, November 22, 2006 10:17 AM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: Think Outside the GUI challenge #2
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >   
> > Interesting thought, but no...
> > 
> > Here's a hint for #1 - wpad data is built from the ISA server's 
> > understanding of the current array status.
> > Here's a hint for #2 - CARP traffic consists of
> authenticated traffic
> > between array members
> > 
> > ..oh, darn; I may have given it away.
> > :-p
> > 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Amy Babinchak
> > Sent: Wednesday, November 22, 2006 8:04 AM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: Think Outside the GUI challenge #2
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >   
> > Arrays aren't a feature that I've had a need for yet so this is 
> > somewhat a stab in the dark. But if it were me troubleshooting why 
> > array servers didn't populate WSPAD then I'd be looking at 
> > communications on the domain like DNS and Active Directory lookup 
> > problems.
> > 
> > Amy Babinchak
> >  
> > 
> >    
> >  
> >  
> > 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Jim Harrison
> > Sent: Wednesday, November 22, 2006 10:52 AM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: Think Outside the GUI challenge #2
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >   
> > Thought this one would make you "prairie-dog", David...  :-p
> > 
> > As you might have noticed, I didn't call out any one particular 
> > plug-in.
> > There are many whose "required ISA settings" will cause those 
> > problems.
> > 
> > In fact, GFI wasn't one of the "offenders".
> > 
> > Anyone willing to take a guess at the problem / solutions?
> > 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > On Behalf Of David Farinic
> > Sent: Wednesday, November 22, 2006 7:38 AM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: Think Outside the GUI challenge #2
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >   
> > Actually WSPAD and some other auto-replies produced by ISA
> > 2000/2004 are
> > not consistent to its API specification therefore each 3rd
> party dev
> > has to go through try and fail cycle to understand possible
> problems
> > with ISA autoresponses including ms_proxy_intra_array_auth_query.
> > 
> > DavidF
> > 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Jim Harrison
> > Sent: Wednesday, November 22, 2006 4:31 PM
> > To: isapros@xxxxxxxxxxxxx; isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Think Outside the GUI challenge #2
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >   
> > Just last week, I encountered an interesting scenario; two separate 
> > customers using two completely different ISA plug-ins hit
> exactly the
> > same problem, although it manifested differently for each.
> > 
> > Cust #1
> > Scenario: ISA 2004 EE, 4 array members W2K3 SP1, separate CSS, all 
> > domain-joined.
> > Problem: When requested, each array member produced a wpad
> script that
> 
> > only included itself.  In no case did the wpad script list
> any of the
> > other three array members.
> > 
> > Cust #2
> > Scenario: ISA 2004 EE, LARGE multiple-array deployment, separate, 
> > multiple CSS, W2K3 SP1, all domain-joined.
> > Problem: CARP requests continuously failed.
> > 
> > 
> > In both cases, the same relative behavior for each plug-in
> caused the
> > problem - what was it?
> > 
> > 
> > All mail to and from this domain is GFI-scanned.
> > 
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > 
> >   
> > This mail was checked for viruses by GFI MailSecurity. 
> > GFI also develops anti-spam software (GFI MailEssentials), a fax 
> > server (GFI FAXmaker), and network security and management software 
> > (GFI
> > LANguard) - www.gfi.com
> > 
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > 
> > All mail to and from this domain is GFI-scanned.
> > 
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > 
> > All mail to and from this domain is GFI-scanned.
> > 
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials: 
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > 
> > 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> All mail to and from this domain is GFI-scanned.
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx 


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 

Other related posts: