[isapros] Re: [ISAServer] ISA, SP2 and the last patches

From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
To: <isapros@xxxxxxxxxxxxx>
Date: Wed, 12 Jul 2006 19:01:44 -0500
Hi Fred,

Are the clients configured to use HTTP 1.1 through proxy connections?

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls

 

> -----Original Message-----
> From: Frédéric ESNOUF [mailto:frederic@xxxxxxxxxx] 
> Sent: Wednesday, July 12, 2006 5:58 PM
> To: isaserver@xxxxxxxxxxxxxxx
> Subject: Re: [ISAServer] ISA, SP2 and the last patches
> 
> Susan,
> 
> My feeling is that the problem is not linked to ISA itself, 
> but more at a 
> the "HTTP level".. so IE get the problem. IE is not 
> configured to use ISA as 
> a proxy, so...
> 
> I hav etried to delete the IE cache and had the same problem. What is 
> strange is that it works, it does not work, then it works... so very 
> strange.
> 
> This is the first ISA of 2 that I have to install in DMZ... 
> so I don't have 
> another one to tell you if it works or not. The other one is 
> still in SP1.
> 
> I will keep you informed.
> 
> Regards
> 
> Frédéric ESNOUF (MCSE - ISA MVP)
> Email : frederic@xxxxxxxxxx
> Visit ISAServerFR.org
> You plan to implement Quarantine on ISA 2004 ?
> Check this : http://www.esnouf.net/qss_main.htm
> Download QSS, learn with videos and screenshots...
> Buy my book onine : www.esnouf.net, and click the Amazon link.
> ----- Original Message ----- 
> From: "Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" 
> <sbradcpa@xxxxxxxxxxx>
> To: <isaserver@xxxxxxxxxxxxxxx>
> Sent: Thursday, July 13, 2006 12:38 AM
> Subject: Re: [ISAServer] ISA, SP2 and the last patches
> 
> 
> > With the images looking like they do... it still looks like 
> IE and/or ISA 
> > cache corruption but I'm one that likes chanting so what do 
> I know?  ;-)
> >
> > And has anyone asked if this is only happening on the one 
> machine that you 
> > are doing the patching on or on all?.
> >
> >
> >
> > Jim Harrison (ISA) wrote:
> >
> >>Can you get an ISAInfo?
> >>This is sounding really fun!
> >>
> >>Jim Harrison
> >>I absolutely hate "the customer can stand on their left 
> foot, hold one 
> >>hand over their head and chant "booga-wonka-whee!" while pressing 
> >>CTRL-ALT-WIN-PrtScn-SrlLk twice in rapid succession three 
> times" answers 
> >>to technical issues...
> >>
> >>
> >>
> >>-----Original Message-----
> >>From: Frédéric ESNOUF [mailto:frederic@xxxxxxxxxx] Sent: 
> Wednesday, July 
> >>12, 2006 2:29 PM
> >>To: isaserver@xxxxxxxxxxxxxxx
> >>Subject: Re: [ISAServer] ISA, SP2 and the last patches
> >>
> >>There are 2 interfaces on this machine : 192.168.197.204 is 
> supposed to be 
> >>LAN and 192.168.197.203 is supposed to be the LAN.
> >>
> >>In this scenario, my machine uses only the WAN Card, which 
> is the one 
> >>which has a default gateway.
> >>
> >>Thanks
> >>
> >>Frédéric ESNOUF (MCSE - ISA MVP)
> >>Email : frederic@xxxxxxxxxx
> >>Visit ISAServerFR.org
> >>You plan to implement Quarantine on ISA 2004 ?
> >>Check this : http://www.esnouf.net/qss_main.htm
> >>Download QSS, learn with videos and screenshots...
> >>Buy my book onine : www.esnouf.net, and click the Amazon link.
> >>----- Original Message ----- 
> >>From: "Jim Harrison (ISA)" <Jim.Harrison@xxxxxxxxxxxxx>
> >>To: <isaserver@xxxxxxxxxxxxxxx>
> >>Sent: Wednesday, July 12, 2006 11:18 PM
> >>Subject: RE: [ISAServer] ISA, SP2 and the last patches
> >>
> >>
> >>Is this a single-ended ISA?
> >>I only see one interface here...
> >>
> >>Jim Harrison
> >>I absolutely hate "the customer can stand on their left 
> foot, hold one 
> >>hand over their head and chant "booga-wonka-whee!" while pressing 
> >>CTRL-ALT-WIN-PrtScn-SrlLk twice in rapid succession three 
> times" answers 
> >>to technical issues...
> >>
> >>
> >>
> >>-----Original Message-----
> >>From: Jim Harrison (ISA) [mailto:Jim.Harrison@xxxxxxxxxxxxx]
> >>Sent: Wednesday, July 12, 2006 2:16 PM
> >>To: isaserver@xxxxxxxxxxxxxxx
> >>Subject: RE: [ISAServer] ISA, SP2 and the last patches
> >>
> >>Just so I can verify that I'm not going (more) insane, 
> please tell me you 
> >>have a NAT device between your ISA and the Internet?
> >>This address pair just ain't possible otherwise:
> >>Source: 192.168.197.204
> >>Destination: 207.46.225.60
> >>
> >>Jim Harrison
> >>I absolutely hate "the customer can stand on their left 
> foot, hold one 
> >>hand over their head and chant "booga-wonka-whee!" while pressing 
> >>CTRL-ALT-WIN-PrtScn-SrlLk twice in rapid succession three 
> times" answers 
> >>to technical issues...
> >>
> >>
> >>
> >>-----Original Message-----
> >>From: Frédéric ESNOUF [mailto:frederic@xxxxxxxxxx]
> >>Sent: Wednesday, July 12, 2006 2:00 PM
> >>To: isaserver@xxxxxxxxxxxxxxx
> >>Subject: Re: [ISAServer] ISA, SP2 and the last patches
> >>
> >>Jim,
> >>
> >>In add/remove programs I have : www.esnouf.net/upd/addremove.gif.
> >>
> >>All the traces are in www.esnouf.net/upd/
> >>
> >>
> >>    * goodmicrosoftdotcom.cap : I connect Microsoft.com and 
> it works fine
> >>    * badmicrosoft-malformed.cap : I connect Microsoft, but 
> the dispay is
> >>weird display, that kind : http://fesnouf.online.fr/upd/bug1.gif
> >>    * badmicrosoft-malformed2.cap : another example, with 
> less frames.
> >>    * badmicrosoft-clickANonDisplayedImage.cap : this one 
> is interesting. 
> >> I
> >>have the page of Microsoft.com, but some of the images are 
> not displayed 
> >>(a
> >>cross: http://fesnouf.online.fr/upd/bug3.gif). I click on 
> it, and get 
> >>these
> >>frames in the capture... and on the screen :
> >>http://fesnouf.online.fr/upd/bug2.gif
> >>
> >>I have no special event on the ISA itself.
> >>
> >>Thanks for your help.
> >>
> >>regards
> >>
> >>
> >>Frédéric ESNOUF (MCSE - ISA MVP)
> >>Email : frederic@xxxxxxxxxx
> >>Visit ISAServerFR.org
> >>You plan to implement Quarantine on ISA 2004 ?
> >>Check this : http://www.esnouf.net/qss_main.htm
> >>Download QSS, learn with videos and screenshots...
> >>Buy my book onine : www.esnouf.net, and click the Amazon link.
> >>----- Original Message ----- 
> >>From: "Jim Harrison (ISA)" <Jim.Harrison@xxxxxxxxxxxxx>
> >>To: <isaserver@xxxxxxxxxxxxxxx>
> >>Sent: Wednesday, July 12, 2006 10:28 PM
> >>Subject: RE: [ISAServer] ISA, SP2 and the last patches
> >>
> >>
> >>Let's please respond in terms of the current deployment, shall we?
> >>Also, the 915045 patch was superseded by the 916106 patch, 
> which is "the
> >>latest".
> >>
> >>Frédéric; can you get simultaneous ISA captures of the requests?
> >>Can you verify in Add/Rmv Programs which patch is installed?
> >>What about your app event logs or ISA alerts?
> >>
> >>Jim Harrison
> >>I absolutely hate "the customer can stand on their left 
> foot, hold one 
> >>hand
> >>over their head and chant "booga-wonka-whee!" while pressing
> >>CTRL-ALT-WIN-PrtScn-SrlLk twice in rapid succession three 
> times" answers 
> >>to
> >>technical issues...
> >>
> >>
> >>-----Original Message-----
> >>From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
> >>[mailto:sbradcpa@xxxxxxxxxxx]
> >>Sent: Wednesday, July 12, 2006 1:12 PM
> >>To: isaserver@xxxxxxxxxxxxxxx
> >>Subject: Re: [ISAServer] ISA, SP2 and the last patches
> >>
> >>"We" who run SBS doe
> >>
> >>Error message when you try to access a Web site from a Web browser
> >>client that is located behind a computer that is running 
> ISA Server 2004
> >>with SP2: "Error Code: 502 Proxy Error":
> >>http://support.microsoft.com/kb/915045/
> >>
> >>If you use a computer that is running Microsoft Small 
> Business Server
> >>2003 Premium Edition with ISA 2004, you may not be prompted 
> for reboot.
> >>To ensure that the patch is applied correctly on SBS computer, this
> >>patch should be installed using the following command: ||
> >>
> >>msiexec /p "<PATH TO 
> HOTFIX>\ISA2004SE-KB916106-x86-ENU.msp" REBOOT=FORCE
> >>
> >>
> >>
> >>Jim Harrison (ISA) wrote:
> >>
> >>
> >>>No; "we" don't normally reboot after ISA patches unless 
> the installer
> >>>instruct you to do so.
> >>>
> >>>Frédéric; can you provide some captures or ISA logs?
> >>>Do you see anything in application events or the ISA logs for this 
> >>>traffic?
> >>>What is the OS language?
> >>>What is the ISA language (should match the OS or be US-ENG).
> >>>
> >>>Jim Harrison
> >>>I absolutely hate "the customer can stand on their left 
> foot, hold one 
> >>>hand
> >>>over their head and chant "booga-wonka-whee!" while pressing
> >>>CTRL-ALT-WIN-PrtScn-SrlLk twice in rapid succession three 
> times" answers 
> >>>to
> >>>technical issues...
> >>>
> >>>
> >>>-----Original Message-----
> >>>From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
> >>>[mailto:sbradcpa@xxxxxxxxxxx]
> >>>Sent: Wednesday, July 12, 2006 12:08 PM
> >>>To: isaserver@xxxxxxxxxxxxxxx
> >>>Subject: Re: [ISAServer] ISA, SP2 and the last patches
> >>>
> >>>You rebooted after the last patches?
> >>>
> >>>(yes you don't have to reboot but we normally do anyway on 
> ISA patches)
> >>>
> >>>Frédéric ESNOUF wrote:
> >>>
> >>>
> >>>
> >>>
> >>>>Hi guys,
> >>>>
> >>>>I am currently in the Carabeans (lucky me) to implement 3 
> ISA Servers.
> >>>>I am supposed to use these machine to do a lot of things, 
> including
> >>>>OWA publishing.
> >>>>
> >>>>Yesterday everithing was fine (I was running SP1).
> >>>>
> >>>>I ran Windowsupdate and downloaded 2 things :
> >>>>  * SP2
> >>>>  * And some security patches (for the OS)
> >>>>Then, after that, a new Windowsupdated found 2 new things 
> including a
> >>>>patch for SP2.
> >>>>
> >>>>Now I am facing a big problem. No matter where I go with 
> IE (from the
> >>>>local host) I have error messages. It is the cas if I go 
> on my OWa,
> >>>>and strange, if I connect some web site. Either it works, 
> it works but
> >>>>I get a very strange web page with no image, or an error 
> message liket
> >>>>this :
> >>>>
> >>>>Explanation: There is a problem with the page you are 
> trying to reach
> >>>>and it cannot be displayed.
> >>>>Error Code: 500 Internal Server Error. -107=(-1073479663)
> >>>>
> >>>>Are you aware of any problem, I don't really see a 
> logical reason for
> >>>>this.
> >>>>
> >>>>Thanks for your quick help, I have a plane tomorrow morning ;-(.
> >>>>
> >>>>Regards
> >>>>
> >>>>Frédéric ESNOUF (MCSE - ISA MVP)
> >>>>Email : frederic@xxxxxxxxxx
> >>>>Visit ISAServerFR.org
> >>>>You plan to implement Quarantine on ISA 2004 ?
> >>>>Check this : http://www.esnouf.net/qss_main.htm
> >>>>Download QSS, learn with videos and screenshots...
> >>>>Buy my book onine : www.esnouf.net, and click the Amazon link.
> >>>>
> >>>>
> >>>>
> >>>>---
> >>>>To subscribe to the list - send an email to list@xxxxxxxxxxxxxxx
> >>>>In the subject line put in JOIN isaserver@xxxxxxxxxxxxxxx,
> >>>>youremailaddress
> >>>>
> >>>>To leave the list - send an email to list@xxxxxxxxxxxxxxx
> >>>>In the subject line put in LEAVE isaserver@xxxxxxxxxxxxxxx,
> >>>>youremailaddress
> >>>>
> >>>>Don't forget the comma!
> >>>>
> >>>>
> >>>>
> >>>>
> >>>
> >>>
> >>
> >>
> >
> > -- 
> > Letting your vendors set your risk analysis these days? 
> > http://www.threatcode.com
> >
> > If you are a SBSer and you don't subscribe to the SBS 
> Blog... man ... I 
> > will hunt you down...
> > http://blogs.technet.com/sbs
> >
> > ---
> > To subscribe to the list - send an email to list@xxxxxxxxxxxxxxx
> > In the subject line put in JOIN isaserver@xxxxxxxxxxxxxxx, 
> > youremailaddress
> >
> > To leave the list - send an email to list@xxxxxxxxxxxxxxx
> > In the subject line put in LEAVE isaserver@xxxxxxxxxxxxxxx, 
> > youremailaddress
> >
> > Don't forget the comma!
> >
> > 
> 
> 
> 
> ---
> To subscribe to the list - send an email to list@xxxxxxxxxxxxxxx
> In the subject line put in JOIN isaserver@xxxxxxxxxxxxxxx, 
> youremailaddress
> 
> To leave the list - send an email to list@xxxxxxxxxxxxxxx
> In the subject line put in LEAVE isaserver@xxxxxxxxxxxxxxx, 
> youremailaddress
> 
> Don't forget the comma!
> 
>
[isapros] Re: [ISAServer] ISA, SP2 and the last patches

Other related posts:
