[THIN] Re: Problem with ISA server, and CSG being able to connect.

On Tue, 30 Nov 2004 15:42:10 -0500, jstrowe@xxxxxxxxxxxxxxxx
<jstrowe@xxxxxxxxxxxxxxxx> wrote:

> Is anything funky going on with authentication to a CSG site that I need to 
> know about on my ISA server.  I have other sites using port 443 and haven't 
> had a problem.  I just need to know:
(snip)

We've only had ISA here for a couple of months now, but I think I've
got it sussed now :)

As far as I can see, it only logs the user/pass if its going via the
proxy. CSG is a direct tcp connect on port 443, so bypasses the proxy.
Its getting denied because you dont have an access rule to allow 443
out - by default only the proxy is allowed out on that and 80 without
auth. Can't remember where it needs to go off hand right now, but iirc
its in the section which only has 3 entries under the tree (the middle
expansion I believe!)

Andrew
********************************************************
This Weeks Sponsor Activaeon.com
Reduce licensing costs with activAeon XA and 
get one month completely free.
http://www.activaeon.com
********************************************************** 
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: