What would happen if you left the compression enabled and run this script? From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Friday, August 15, 2008 9:40 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50) Kewl! ..now for the other folks in the audience... When compression is disabled, ISA will strip off the "Accept-encoding" header that the client sends. This is done to prevent the web site sending compressed responses because ISA can't apply HTTP body inspection to it. In this case (and several others, it seems), the web site sends compressed content anyway (it's a Sun server; waddayexpect?). Since ISA knows it can't process compressed HTTP bodies, it rejects it. Adding this value causes ISA to forward the "Accept-encoding" header and when the content is delivered compressed, ISA simply sends it back to the client as-is without inspecting it. Jim From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan Sent: Friday, August 15, 2008 6:23 AM To: 'isalist@xxxxxxxxxxxxx' Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50) That fixed it, thanks! From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Thursday, August 14, 2008 8:53 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50) Do you have compression disabled? If so, have a peek at the script in http://support.microsoft.com/?id=927263. This script is supported for ISA 2006 after SP1. From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan Sent: Thursday, August 14, 2008 11:17 AM To: 'isalist@xxxxxxxxxxxxx' Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50) Captures sent. From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Wednesday, August 13, 2008 12:53 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: 502 Proxy Error. The request is not supported. (50) Get network captures. Avery isn't directing you to live search; this is IE because it doesn't like the response it (doesn't) get. From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan Sent: Tuesday, August 12, 2008 9:51 AM To: 'isalist@xxxxxxxxxxxxx' Subject: [isalist] 502 Proxy Error. The request is not supported. (50) Ever since installing ISA2006 SP1, I've been getting strange problems, and they seem to be getting worse. For example, someone reported problems with downloading templates from the Avery website, so I checked and was able to reproduce the error on several workstations. It would work fine, right up until you try to download the template, then you would get this error: X Network Access Message: The page cannot be displayed Explanation: There is a problem with the page you are trying to reach and it cannot be displayed. Try the following: * Refresh page: Search for the page again by clicking the Refresh button. The timeout may have occurred due to Internet congestion. * Check spelling: Check that you typed the Web page address correctly. The address may have been mistyped. * Access from a link: If there is a link to the page you are looking for, try accessing the page from that link. If you are still not able to view the requested page, try contacting your administrator or Helpdesk. Technical Information (for support personnel) * Error Code: 502 Proxy Error. The request is not supported. (50) * IP Address: 209.170.91.160 * Date: 8/12/2008 12:12:23 PM [GMT] * Server: gateway.MAPSNET.ORG * Source: proxy I checked the ISA logs, and the connections were not even showing up. So I started to dig into it further. While trouble-shooting, it started to get worse. Now, when I go to http://www.avery.com, it redirects me to the Live Search page instead, and when I follow the links in the search results, I get the same error. Here is the monitoring reports I get from the ISA server: Original Client IP Client Agent Authenticated Client Service Server Name Referring Server Destination Host Name Transport MIME Type Object Source Source Proxy Destination Proxy Bidirectional Client Host Name Filter Information Network Interface Raw IP Header Raw Payload GMT Log Time Source Port Processing Time Bytes Sent Bytes Received Result Code HTTP Status Code Cache Information Error Information Log Record Type Authentication Server Log Time Destination IP Destination Port Protocol Action Rule Client IP Client Username Source Network Destination Network HTTP Method URL 0.0.0.0 Mozilla/4.0 (compatible; MSIE 7.0; Win32) No Proxy GATEWAY 10.20.1.1 TCP - - - Req ID: 0cfe1899 - - - 8/12/2008 12:07:53 PM 0 1 5447 136 200 OK. 0x0 0x0 Web Proxy Filter 8/12/2008 8:07:53 AM 10.20.1.1 8080 http Allowed Connection 10.20.3.2 anonymous Internal GET http://10.20.1.1/array.dll?Get.Routing.Script 10.20.3.2 GATEWAY - TCP - - 8/12/2008 12:07:54 PM 49364 0 0 0 0x0 ERROR_SUCCESS 0x0 0x0 Firewall - 8/12/2008 8:07:54 AM 10.20.1.1 8080 HTTP Proxy Initiated Connection 10.20.3.2 Internal Local Host - - 10.20.3.2 GATEWAY - TCP - - 8/12/2008 12:07:54 PM 49364 0 428 5739 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN 0x0 0x0 Firewall - 8/12/2008 8:07:54 AM 10.20.1.1 8080 HTTP Proxy Closed Connection 10.20.3.2 Internal Local Host - - 10.20.3.2 GATEWAY - TCP - - 8/12/2008 12:07:54 PM 49366 0 0 0 0x0 ERROR_SUCCESS 0x0 0x0 Firewall - 8/12/2008 8:07:54 AM 10.20.1.1 8080 HTTP Proxy Initiated Connection 10.20.3.2 Internal Local Host - - I've checked the DNS, and both internal and external are resolving to the same address. It doesn't even appear to be trying to go through the ISA server... Anyone have any ideas of where to start looking?