[isalist] Re: Think Outside the GUI challenge #2
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Wed, 22 Nov 2006 16:32:16 -0800
http://www.ISAserver.org
-------------------------------------------------------
Yepper - but what about it?
David gave a really good hint.
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Greg Mulholland
Sent: Wednesday, November 22, 2006 2:27 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Think Outside the GUI challenge #2
http://www.ISAserver.org
-------------------------------------------------------
hmm so its cross isa traffic related im guessing by your hints
----- Original Message -----
From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
To: <isalist@xxxxxxxxxxxxx>
Sent: Thursday, November 23, 2006 9:23 AM
Subject: [isalist] Re: Think Outside the GUI challenge #2
> http://www.ISAserver.org
> -------------------------------------------------------
>
> No CSS-related errors at all.
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Greg Mulholland
> Sent: Wednesday, November 22, 2006 2:16 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Think Outside the GUI challenge #2
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> *stab*
>
> both css's dont belong to the Enterprise css domain name set. ??
>
> Greg
> ----- Original Message -----
> From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
> To: <isalist@xxxxxxxxxxxxx>
> Sent: Thursday, November 23, 2006 8:57 AM
> Subject: [isalist] Re: Think Outside the GUI challenge #2
>
>
>> http://www.ISAserver.org
>> -------------------------------------------------------
>>
>> Nope; system otherwise "normal"...
>>
>> -----Original Message-----
>> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
>> On Behalf Of Thomas W Shinder
>> Sent: Wednesday, November 22, 2006 8:56 AM
>> To: isalist@xxxxxxxxxxxxx
>> Subject: [isalist] Re: Think Outside the GUI challenge #2
>>
>> http://www.ISAserver.org
>> -------------------------------------------------------
>>
>> External DNS server configured on one of the firewall array member's
>> NICs?
>>
>> Thomas W Shinder, M.D.
>> Site: www.isaserver.org
>> Blog: http://blogs.isaserver.org/shinder/
>> Book: http://tinyurl.com/3xqb7
>> MVP -- Microsoft Firewalls (ISA)
>>
>>
>>
>>> -----Original Message-----
>>> From: isalist-bounce@xxxxxxxxxxxxx
>>> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
>>> Sent: Wednesday, November 22, 2006 10:49 AM
>>> To: isalist@xxxxxxxxxxxxx
>>> Subject: [isalist] Re: Think Outside the GUI challenge #2
>>>
>>> http://www.ISAserver.org
>>> -------------------------------------------------------
>>>
>>> Nope; system policies as normal.
>>>
>>> -----Original Message-----
>>> From: isalist-bounce@xxxxxxxxxxxxx
>>> [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> On Behalf Of Thomas W Shinder
>>> Sent: Wednesday, November 22, 2006 8:37 AM
>>> To: isalist@xxxxxxxxxxxxx
>>> Subject: [isalist] Re: Think Outside the GUI challenge #2
>>>
>>> http://www.ISAserver.org
>>> -------------------------------------------------------
>>>
>>> RPC communication between the array members is blocked between the
>>> intraarray addresses?
>>>
>>> Thomas W Shinder, M.D.
>>> Site: www.isaserver.org
>>> Blog: http://blogs.isaserver.org/shinder/
>>> Book: http://tinyurl.com/3xqb7
>>> MVP -- Microsoft Firewalls (ISA)
>>>
>>>
>>>
>>> > -----Original Message-----
>>> > From: isalist-bounce@xxxxxxxxxxxxx
>>> > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
>>> > Sent: Wednesday, November 22, 2006 10:17 AM
>>> > To: isalist@xxxxxxxxxxxxx
>>> > Subject: [isalist] Re: Think Outside the GUI challenge #2
>>> >
>>> > http://www.ISAserver.org
>>> > -------------------------------------------------------
>>> >
>>> > Interesting thought, but no...
>>> >
>>> > Here's a hint for #1 - wpad data is built from the ISA server's
>>> > understanding of the current array status.
>>> > Here's a hint for #2 - CARP traffic consists of
>>> authenticated traffic
>>> > between array members
>>> >
>>> > ..oh, darn; I may have given it away.
>>> > :-p
>>> >
>>> > -----Original Message-----
>>> > From: isalist-bounce@xxxxxxxxxxxxx
>>> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> > On Behalf Of Amy Babinchak
>>> > Sent: Wednesday, November 22, 2006 8:04 AM
>>> > To: isalist@xxxxxxxxxxxxx
>>> > Subject: [isalist] Re: Think Outside the GUI challenge #2
>>> >
>>> > http://www.ISAserver.org
>>> > -------------------------------------------------------
>>> >
>>> > Arrays aren't a feature that I've had a need for yet so this is
>>> > somewhat a stab in the dark. But if it were me troubleshooting why
>>> > array servers didn't populate WSPAD then I'd be looking at
>>> > communications on the domain like DNS and Active Directory lookup
>>> > problems.
>>> >
>>> > Amy Babinchak
>>> >
>>> >
>>> >
>>> >
>>> >
>>> >
>>> > -----Original Message-----
>>> > From: isalist-bounce@xxxxxxxxxxxxx
>>> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> > On Behalf Of Jim Harrison
>>> > Sent: Wednesday, November 22, 2006 10:52 AM
>>> > To: isalist@xxxxxxxxxxxxx
>>> > Subject: [isalist] Re: Think Outside the GUI challenge #2
>>> >
>>> > http://www.ISAserver.org
>>> > -------------------------------------------------------
>>> >
>>> > Thought this one would make you "prairie-dog", David... :-p
>>> >
>>> > As you might have noticed, I didn't call out any one particular
>>> > plug-in.
>>> > There are many whose "required ISA settings" will cause those
>>> > problems.
>>> >
>>> > In fact, GFI wasn't one of the "offenders".
>>> >
>>> > Anyone willing to take a guess at the problem / solutions?
>>> >
>>> > -----Original Message-----
>>> > From: isalist-bounce@xxxxxxxxxxxxx
>>> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> > On Behalf Of David Farinic
>>> > Sent: Wednesday, November 22, 2006 7:38 AM
>>> > To: isalist@xxxxxxxxxxxxx
>>> > Subject: [isalist] Re: Think Outside the GUI challenge #2
>>> >
>>> > http://www.ISAserver.org
>>> > -------------------------------------------------------
>>> >
>>> > Actually WSPAD and some other auto-replies produced by ISA
>>> > 2000/2004 are
>>> > not consistent to its API specification therefore each 3rd
>>> party dev
>>> > has to go through try and fail cycle to understand possible
>>> problems
>>> > with ISA autoresponses including ms_proxy_intra_array_auth_query.
>>> >
>>> > DavidF
>>> >
>>> > -----Original Message-----
>>> > From: isalist-bounce@xxxxxxxxxxxxx
>>> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> > On Behalf Of Jim Harrison
>>> > Sent: Wednesday, November 22, 2006 4:31 PM
>>> > To: isapros@xxxxxxxxxxxxx; isalist@xxxxxxxxxxxxx
>>> > Subject: [isalist] Think Outside the GUI challenge #2
>>> >
>>> > http://www.ISAserver.org
>>> > -------------------------------------------------------
>>> >
>>> > Just last week, I encountered an interesting scenario; two
separate
>>> > customers using two completely different ISA plug-ins hit
>>> exactly the
>>> > same problem, although it manifested differently for each.
>>> >
>>> > Cust #1
>>> > Scenario: ISA 2004 EE, 4 array members W2K3 SP1, separate CSS, all
>>> > domain-joined.
>>> > Problem: When requested, each array member produced a wpad
>>> script that
>>>
>>> > only included itself. In no case did the wpad script list
>>> any of the
>>> > other three array members.
>>> >
>>> > Cust #2
>>> > Scenario: ISA 2004 EE, LARGE multiple-array deployment, separate,
>>> > multiple CSS, W2K3 SP1, all domain-joined.
>>> > Problem: CARP requests continuously failed.
>>> >
>>> >
>>> > In both cases, the same relative behavior for each plug-in
>>> caused the
>>> > problem - what was it?
>>> >
>>> >
>>> > All mail to and from this domain is GFI-scanned.
>>> >
>>> > ------------------------------------------------------
>>> > List Archives: //www.freelists.org/archives/isalist/
>>> > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
>>> > ISA Server Articles and Tutorials:
>>> > http://www.isaserver.org/articles_tutorials/
>>> > ISA Server Blogs: http://blogs.isaserver.org/
>>> > ------------------------------------------------------
>>> > Visit TechGenix.com for more information about our other sites:
>>> > http://www.techgenix.com
>>> > ------------------------------------------------------
>>> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> > Report abuse to listadmin@xxxxxxxxxxxxx
>>> >
>>> >
>>> >
>>> > This mail was checked for viruses by GFI MailSecurity.
>>> > GFI also develops anti-spam software (GFI MailEssentials), a fax
>>> > server (GFI FAXmaker), and network security and management
software
>>> > (GFI
>>> > LANguard) - www.gfi.com
>>> >
>>> > ------------------------------------------------------
>>> > List Archives: //www.freelists.org/archives/isalist/
>>> > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
>>> > ISA Server Articles and Tutorials:
>>> > http://www.isaserver.org/articles_tutorials/
>>> > ISA Server Blogs: http://blogs.isaserver.org/
>>> > ------------------------------------------------------
>>> > Visit TechGenix.com for more information about our other sites:
>>> > http://www.techgenix.com
>>> > ------------------------------------------------------
>>> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> > Report abuse to listadmin@xxxxxxxxxxxxx
>>> >
>>> >
>>> > All mail to and from this domain is GFI-scanned.
>>> >
>>> > ------------------------------------------------------
>>> > List Archives: //www.freelists.org/archives/isalist/
>>> > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
>>> > ISA Server Articles and Tutorials:
>>> > http://www.isaserver.org/articles_tutorials/
>>> > ISA Server Blogs: http://blogs.isaserver.org/
>>> > ------------------------------------------------------
>>> > Visit TechGenix.com for more information about our other sites:
>>> > http://www.techgenix.com
>>> > ------------------------------------------------------
>>> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> > Report abuse to listadmin@xxxxxxxxxxxxx
>>> >
>>> > ------------------------------------------------------
>>> > List Archives: //www.freelists.org/archives/isalist/
>>> > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
>>> > ISA Server Articles and Tutorials:
>>> > http://www.isaserver.org/articles_tutorials/
>>> > ISA Server Blogs: http://blogs.isaserver.org/
>>> > ------------------------------------------------------
>>> > Visit TechGenix.com for more information about our other sites:
>>> > http://www.techgenix.com
>>> > ------------------------------------------------------
>>> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> > Report abuse to listadmin@xxxxxxxxxxxxx
>>> >
>>> >
>>> > All mail to and from this domain is GFI-scanned.
>>> >
>>> > ------------------------------------------------------
>>> > List Archives: //www.freelists.org/archives/isalist/
>>> > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
>>> > ISA Server Articles and Tutorials:
>>> > http://www.isaserver.org/articles_tutorials/
>>> > ISA Server Blogs: http://blogs.isaserver.org/
>>> > ------------------------------------------------------
>>> > Visit TechGenix.com for more information about our other sites:
>>> > http://www.techgenix.com
>>> > ------------------------------------------------------
>>> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> > Report abuse to listadmin@xxxxxxxxxxxxx
>>> >
>>> >
>>> >
>>> ------------------------------------------------------
>>> List Archives: //www.freelists.org/archives/isalist/
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server Articles and Tutorials:
>>> http://www.isaserver.org/articles_tutorials/
>>> ISA Server Blogs: http://blogs.isaserver.org/
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>>
>>>
>>> All mail to and from this domain is GFI-scanned.
>>>
>>> ------------------------------------------------------
>>> List Archives: //www.freelists.org/archives/isalist/
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server Articles and Tutorials:
>>> http://www.isaserver.org/articles_tutorials/
>>> ISA Server Blogs: http://blogs.isaserver.org/
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>>
>>>
>>>
>> ------------------------------------------------------
>> List Archives: //www.freelists.org/archives/isalist/
>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>> ISA Server Articles and Tutorials:
>> http://www.isaserver.org/articles_tutorials/
>> ISA Server Blogs: http://blogs.isaserver.org/
>> ------------------------------------------------------
>> Visit TechGenix.com for more information about our other sites:
>> http://www.techgenix.com
>> ------------------------------------------------------
>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>> Report abuse to listadmin@xxxxxxxxxxxxx
>>
>>
>> All mail to and from this domain is GFI-scanned.
>>
>> ------------------------------------------------------
>> List Archives: //www.freelists.org/archives/isalist/
>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>> ISA Server Articles and Tutorials:
>> http://www.isaserver.org/articles_tutorials/
>> ISA Server Blogs: http://blogs.isaserver.org/
>> ------------------------------------------------------
>> Visit TechGenix.com for more information about our other sites:
>> http://www.techgenix.com
>> ------------------------------------------------------
>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>> Report abuse to listadmin@xxxxxxxxxxxxx
>>
>>
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> All mail to and from this domain is GFI-scanned.
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
