http://www.ISAserver.org ------------------------------------------------------- Can I just say to any softies who may be lurking, I love the functionality of ISA 2K4 for sure, but when it comes to certs, it has to be made easier, and certainly the MS docs need to be improved. Tom, no disrespect to your site when I say this, but surely the vendor should have the best documentation, and not somewhere like isaserver.org????? (great site and has proven very useful, just would have thought the proper how to's would actually be on MS DOH!!!!) Nuff said, at least you can get the info here and on the isaserver.org site. Bad condemnation of the MS ISA site to say the least!!!! -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Mark Morgan Sent: 19 September 2006 23:50 To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: 403 forbidden 12202 The ISA Server denied the specified Uniform Resource Locator (URL). Publishing OWA,OMA http://www.ISAserver.org ------------------------------------------------------- Hello Gerald, Does not matter either way same error. I had it working without the /exchange before my cert expired and ISA started kicking me in the @ss. Mark -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Gerald G. Young Sent: Tuesday, September 19, 2006 3:42 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: 403 forbidden 12202 The ISA Server denied the specified Uniform Resource Locator (URL). Publishing OWA,OMA http://www.ISAserver.org ------------------------------------------------------- Are you trying to connect using http://mydomain.com/exchange Or are you trying it without the /exhange? If the latter take a look at your paths. I've had to tweak those to get /* to work; i'd just keep getting this error without doing that. -----Original Message----- From: "Mark Morgan" <MMorgan@xxxxxxxxxxxxxxxxxxxxx> To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx> Sent: 9/19/06 6:31 PM Subject: [isalist] Re: 403 forbidden 12202 The ISA Server denied the specified Uniform Resource Locator (URL). Publishing OWA,OMA http://www.ISAserver.org ------------------------------------------------------- Sorry that's what I meant my exchange has an external FQDN with split DNS, and I am NOT getting a 502 target principal error message. Mark -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Moffat Sent: Tuesday, September 19, 2006 3:18 PM To: ISA Mailing List Subject: [isalist] Re: 403 forbidden 12202 The ISA Server denied the specified Uniform Resource Locator (URL). Publishing OWA,OMA http://www.ISAserver.org ------------------------------------------------------- The cert should be the FQDN of the EXTERNAL address. S -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Mark Morgan Sent: Tuesday, September 19, 2006 7:08 PM To: ISA Mailing List Subject: [isalist] Re: 403 forbidden 12202 The ISA Server denied the specified Uniform Resource Locator (URL). Publishing OWA,OMA http://www.ISAserver.org ------------------------------------------------------- Thanks for the reply Clayton, I have already tried ip address in the public names tab, which did not work I have exported the cert to the isa and listener The cert name is correct FQDN of exchange server The site works just fine internally but externally it is denied by the default rule in isa. I have been searching the internet for almost a week for a solution, but have not been able to find it. Mark -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Clayton Doige Sent: Tuesday, September 19, 2006 2:49 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: 403 forbidden 12202 The ISA Server denied the specified Uniform Resource Locator (URL). Publishing OWA,OMA http://www.ISAserver.org ------------------------------------------------------- Stick the ip address of the public side of the isa in the public names tab of the publishing rule? When you generated the cert did you then export it to the ISA, and then add it to the listener etc? I don't know this subject inside out, as I am sure the others on this list might attest, however, these would be the first thing I would check assuming that you gave the cert the same domain name when you generated it? -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Mark Morgan Sent: 19 September 2006 19:31 To: isalist@xxxxxxxxxxxxx Subject: [isalist] 403 forbidden 12202 The ISA Server denied the specified Uniform Resource Locator (URL). Publishing OWA,OMA http://www.ISAserver.org ------------------------------------------------------- Hello, My self gen cert expired last week, after generating a new cert and importing into isa I now receive the message 403 forbidden 12202 The ISA Server denied the specified Uniform Resource Locator (URL)after accepting the cert warning. ISA monitor entry is Original Client IP Client Agent Authenticated Client Service Server Name Referring Server Destination Host Name Transport HTTP Method MIME Type Object Source Source Network Destination Network Source Proxy Destination Proxy Bidirectional Client Host Name Filter Information Network Interface Raw IP Header Raw Payload Processing Time Bytes Sent Bytes Received Result Code Cache Information Log Record Type Log Time Client Username Protocol Action URL Rule Destination IP Client IP Error Information HTTP Status Code Source Port Destination Port 0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 2.0.50727; .NET CLR 1.1.4322) No Reverse Proxy HIPPOCRATES - mail.palmdrivehospital.com TCP GET - External - - 1 2264 377 0x0 Web Proxy Filter 9/19/2006 10:19:15 AM anonymous https Denied Connection http://mail.palmdrivehospital.com/ Default rule 63.193.20.130 63.193.20.133 0x0 12202 The ISA Server denied the specified Uniform Resource Locator (URL). 0 443 The listener is setup for basic + ssl authentication, and I have followed Tom's book the setup the publishing rule and listener. Any Ideas?? Mark -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.405 / Virus Database: 268.12.5/450 - Release Date: 9/18/2006 ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.405 / Virus Database: 268.12.5/450 - Release Date: 9/18/2006 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.405 / Virus Database: 268.12.5/450 - Release Date: 9/18/2006 ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.405 / Virus Database: 268.12.5/450 - Release Date: 9/18/2006 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.405 / Virus Database: 268.12.5/450 - Release Date: 9/18/2006 ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.405 / Virus Database: 268.12.5/450 - Release Date: 9/18/2006 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.405 / Virus Database: 268.12.5/450 - Release Date: 9/18/2006 ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx