[isalist] Re: Think Outside the GUI challenge #2

  • From: "Greg Mulholland" <gmulholland@xxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 23 Nov 2006 09:26:35 +1100

http://www.ISAserver.org
-------------------------------------------------------
hmm so its cross isa traffic related im guessing by your hints

----- Original Message ----- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
To: <isalist@xxxxxxxxxxxxx>
Sent: Thursday, November 23, 2006 9:23 AM
Subject: [isalist] Re: Think Outside the GUI challenge #2


http://www.ISAserver.org
-------------------------------------------------------

No CSS-related errors at all.

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Greg Mulholland
Sent: Wednesday, November 22, 2006 2:16 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Think Outside the GUI challenge #2

http://www.ISAserver.org
-------------------------------------------------------

*stab*

both css's dont  belong to the Enterprise css domain name set. ??

Greg
----- Original Message ----- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
To: <isalist@xxxxxxxxxxxxx>
Sent: Thursday, November 23, 2006 8:57 AM
Subject: [isalist] Re: Think Outside the GUI challenge #2


http://www.ISAserver.org
-------------------------------------------------------

Nope; system otherwise "normal"...

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thomas W Shinder
Sent: Wednesday, November 22, 2006 8:56 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Think Outside the GUI challenge #2

http://www.ISAserver.org
-------------------------------------------------------

External DNS server configured on one of the firewall array member's
NICs?

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- Microsoft Firewalls (ISA)



-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
Sent: Wednesday, November 22, 2006 10:49 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Think Outside the GUI challenge #2

http://www.ISAserver.org
-------------------------------------------------------

Nope; system policies as normal.

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thomas W Shinder
Sent: Wednesday, November 22, 2006 8:37 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Think Outside the GUI challenge #2

http://www.ISAserver.org
-------------------------------------------------------

RPC communication between the array members is blocked between the
intraarray addresses?

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- Microsoft Firewalls (ISA)



> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
> Sent: Wednesday, November 22, 2006 10:17 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Think Outside the GUI challenge #2
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Interesting thought, but no...
>
> Here's a hint for #1 - wpad data is built from the ISA server's
> understanding of the current array status.
> Here's a hint for #2 - CARP traffic consists of
authenticated traffic
> between array members
>
> ..oh, darn; I may have given it away.
> :-p
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Amy Babinchak
> Sent: Wednesday, November 22, 2006 8:04 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Think Outside the GUI challenge #2
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Arrays aren't a feature that I've had a need for yet so this is
> somewhat a stab in the dark. But if it were me troubleshooting why
> array servers didn't populate WSPAD then I'd be looking at
> communications on the domain like DNS and Active Directory lookup
> problems.
>
> Amy Babinchak
>
>
>
>
>
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Jim Harrison
> Sent: Wednesday, November 22, 2006 10:52 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Think Outside the GUI challenge #2
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Thought this one would make you "prairie-dog", David...  :-p
>
> As you might have noticed, I didn't call out any one particular
> plug-in.
> There are many whose "required ISA settings" will cause those
> problems.
>
> In fact, GFI wasn't one of the "offenders".
>
> Anyone willing to take a guess at the problem / solutions?
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of David Farinic
> Sent: Wednesday, November 22, 2006 7:38 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Think Outside the GUI challenge #2
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Actually WSPAD and some other auto-replies produced by ISA
> 2000/2004 are
> not consistent to its API specification therefore each 3rd
party dev
> has to go through try and fail cycle to understand possible
problems
> with ISA autoresponses including ms_proxy_intra_array_auth_query.
>
> DavidF
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Jim Harrison
> Sent: Wednesday, November 22, 2006 4:31 PM
> To: isapros@xxxxxxxxxxxxx; isalist@xxxxxxxxxxxxx
> Subject: [isalist] Think Outside the GUI challenge #2
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Just last week, I encountered an interesting scenario; two separate
> customers using two completely different ISA plug-ins hit
exactly the
> same problem, although it manifested differently for each.
>
> Cust #1
> Scenario: ISA 2004 EE, 4 array members W2K3 SP1, separate CSS, all
> domain-joined.
> Problem: When requested, each array member produced a wpad
script that

> only included itself.  In no case did the wpad script list
any of the
> other three array members.
>
> Cust #2
> Scenario: ISA 2004 EE, LARGE multiple-array deployment, separate,
> multiple CSS, W2K3 SP1, all domain-joined.
> Problem: CARP requests continuously failed.
>
>
> In both cases, the same relative behavior for each plug-in
caused the
> problem - what was it?
>
>
> All mail to and from this domain is GFI-scanned.
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
> This mail was checked for viruses by GFI MailSecurity.
> GFI also develops anti-spam software (GFI MailEssentials), a fax
> server (GFI FAXmaker), and network security and management software
> (GFI
> LANguard) - www.gfi.com
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> All mail to and from this domain is GFI-scanned.
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> All mail to and from this domain is GFI-scanned.
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: