[isalist] Re: Think Outside the GUI challenge #2

  • From: "Amy Babinchak" <amy@xxxxxxxxxxxxxxxxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 22 Nov 2006 11:36:46 -0500

http://www.ISAserver.org
-------------------------------------------------------

Carp are something very different around these parts.

Amy Babinchak
 
    

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Wednesday, November 22, 2006 11:17 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Think Outside the GUI challenge #2

http://www.ISAserver.org
-------------------------------------------------------
  
Interesting thought, but no...

Here's a hint for #1 - wpad data is built from the ISA server's
understanding of the current array status.
Here's a hint for #2 - CARP traffic consists of authenticated traffic
between array members

..oh, darn; I may have given it away.
:-p

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Amy Babinchak
Sent: Wednesday, November 22, 2006 8:04 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Think Outside the GUI challenge #2

http://www.ISAserver.org
-------------------------------------------------------
  
Arrays aren't a feature that I've had a need for yet so this is somewhat
a stab in the dark. But if it were me troubleshooting why array servers
didn't populate WSPAD then I'd be looking at communications on the
domain like DNS and Active Directory lookup problems.

Amy Babinchak
 

   
 
 

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Wednesday, November 22, 2006 10:52 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Think Outside the GUI challenge #2

http://www.ISAserver.org
-------------------------------------------------------
  
Thought this one would make you "prairie-dog", David...  :-p

As you might have noticed, I didn't call out any one particular plug-in.
There are many whose "required ISA settings" will cause those problems.

In fact, GFI wasn't one of the "offenders".

Anyone willing to take a guess at the problem / solutions?

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of David Farinic
Sent: Wednesday, November 22, 2006 7:38 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Think Outside the GUI challenge #2

http://www.ISAserver.org
-------------------------------------------------------
  
Actually WSPAD and some other auto-replies produced by ISA 2000/2004 are
not consistent to its API specification therefore each 3rd party dev has
to go through try and fail cycle to understand possible problems with
ISA autoresponses including ms_proxy_intra_array_auth_query. 

DavidF

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Wednesday, November 22, 2006 4:31 PM
To: isapros@xxxxxxxxxxxxx; isalist@xxxxxxxxxxxxx
Subject: [isalist] Think Outside the GUI challenge #2

http://www.ISAserver.org
-------------------------------------------------------
  
Just last week, I encountered an interesting scenario; two separate
customers using two completely different ISA plug-ins hit exactly the
same problem, although it manifested differently for each.

Cust #1
Scenario: ISA 2004 EE, 4 array members W2K3 SP1, separate CSS, all
domain-joined.
Problem: When requested, each array member produced a wpad script that
only included itself.  In no case did the wpad script list any of the
other three array members.

Cust #2
Scenario: ISA 2004 EE, LARGE multiple-array deployment, separate,
multiple CSS, W2K3 SP1, all domain-joined.
Problem: CARP requests continuously failed.


In both cases, the same relative behavior for each plug-in caused the
problem - what was it?


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx 


  
This mail was checked for viruses by GFI MailSecurity. 
GFI also develops anti-spam software (GFI MailEssentials), a fax server
(GFI FAXmaker), and network security and management software (GFI
LANguard) - www.gfi.com 

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx 


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx 


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: