Do I open the browser at the server or the client? I opened it at both and got the same results. I followed the instructions exactly, the results are: - The browser issues "The Page cannot be displayed" error for both links http://wpad/wspad.dat and http://wpad/wspad.dat So I couldn't find the files to answer the questions :( Where do we go now? Additional information: When I try to browse to these links the logging shows me the traffic is denied because of Allow_IT policy, I disabled the policy and tried again, the logging says the traffic is denied because of the Blocked Sites policy, I did the same, then it says traffic is denied because of the default rule. Auto discovery is listening on the default port 80, if I type http://wpad:80/wpad.dat I still get the same results. thanx r. -----Original Message----- From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Saturday, January 01, 2005 7:36 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: FW Client (ISA2004) http://www.ISAserver.org Ok; now open we're going to use a browser to see what your wpad data gets you... Please follow the instructions exactly as written and respond to all questions. 1. Open your browser (IE, Firefox, whatever) 2. In the address bar, type http://wpad/wpad.dat If you're prompted to "open or save", choose "save" and stash it on your desktop as "wpad.js". If not, your automatic discovery listener isn't listening 4. In the address bar, type http://wpad/wspad.dat If you're prompted to "open or save", choose "save" and stash it on your desktop as "wspad.txt". If not, your automatic discovery listener isn't listening ..now let's use the data in those files... Use your favorite text editor (Notepad or equivalent; NOT Word or WordPerfect, etc.) to open these files - WPAD.JS - this file is used by browsers and the FW client, so we MUST start here: 1. Look for "function MakeProxies()". You'll see one or more entries listed as: "new Node( -hostname-,#,#.###### );" Q1 - what is the name found in "-hostname-"? Q2 - what is the result of ping -thatnameexactlyasseen-? - WSPAD.TXT - this file is used only by the FW client: Q1 - what is the name found as "WWW-Proxy=" under "[Common]"? Q2 - what is the result of "ping -thatnameexactlyasseen-"? Q3 - what is the name found as "Name=" under [Servers Ip Addresses]? Q4 - what is the result of "ping -thatnameexactlyasseen-"? Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! -----Original Message----- From: Ruba Al Omari, Eng. [mailto:romari@xxxxxxxxxxxxxxxxx] Sent: Friday, December 31, 2004 9:41 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: FW Client (ISA2004) http://www.ISAserver.org The client can ping wpad. C:\>ping wpad Pinging 8000-srv.dac.edu [10.92.60.20] with 32 bytes of data: Reply from 10.92.60.20: bytes=32 time<1ms TTL=126 Reply from 10.92.60.20: bytes=32 time<1ms TTL=126 Reply from 10.92.60.20: bytes=32 time<1ms TTL=126 Reply from 10.92.60.20: bytes=32 time<1ms TTL=126 ? Thanx r. -----Original Message----- From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Wednesday, December 29, 2004 7:31 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: FW Client (ISA2004) http://www.ISAserver.org The good news is that it doesn't seem to be a problem between internal and external names. Forget using nslookup to troubleshoot client name resolution problems; that's how DNS servers, not clients perform name lookups. Use "ping wpad" and see what the result is. If this fails, it's time for a network capture. ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ------------------------------------------------------- -----Original Message----- From: Ruba Al Omari, Eng. [mailto:romari@xxxxxxxxxxxxxxxxx] Sent: Wednesday, December 29, 2004 00:20 To: [ISAserver.org Discussion List] Subject: [isalist] RE: FW Client (ISA2004) http://www.ISAserver.org I have it cleared (the check box was cleared from before) In the authentication method it is Integrated the one that is selected, and the check box is cleared, but auto detection is not working. ? Note: the Auto Discovery is enabled, the FW Client auto detection is enabled and uses automatic configuration script. Thanks r. -----Original Message----- From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Tuesday, December 28, 2004 7:09 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: FW Client (ISA2004) http://www.ISAserver.org Make sure you have "Require all users to authenticate" unchecked in the Internal network Web Proxy settings. ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ------------------------------------------------------- -----Original Message----- From: Ruba Al Omari, Eng. [mailto:romari@xxxxxxxxxxxxxxxxx] Sent: Tuesday, December 28, 2004 00:27 To: [ISAserver.org Discussion List] Subject: [isalist] RE: FW Client (ISA2004) http://www.ISAserver.org Hi, I added the PTR to the reverse lookup zone and the wpad is ok now, the FW Client still can't auto detect the ISA. C:\>nslookup wpad Server: 6k-srv.dac.edu Address: 10.92.60.10 Name: 8000-srv.dac.edu Address: 10.92.60.20 Aliases: wpad.dac.edu ? thanks r. -----Original Message----- From: Ruba Al Omari, Eng. Sent: Wednesday, December 22, 2004 9:29 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: FW Client (ISA2004) http://www.ISAserver.org Hi Mr. Tom, It gives me this: C:\>nslookup wpad *** Can't find server name for address 10.92.60.10: Non-existent domain *** Default servers are not available Server: UnKnown Address: 10.92.60.10 Name: 8000-srv.dac.edu Address: 10.92.60.20 Aliases: wpad.dac.edu 10.92.60.10 is our internal DNS, 10.92.60.20 is the ISA internal NIC, the client is on 10.80.60.0 subnet, we have no PTR in the reverse lookup zone. Thanx r. -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: Tuesday, December 21, 2004 6:44 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: FW Client (ISA2004) http://www.ISAserver.org Hi Ruba, When you do an nslookup for wpad what do you see? If should look something like this (with different names, of course): F:\>nslookup wpad Server: marsoutpost.tacteam.net Address: 192.168.1.34 Name: celestix-h5l4cs.tacteam.net Address: 192.168.1.60 Aliases: wpad.tacteam.net F:\> Thanks! Tom www.isaserver.org/shinder <http://www.isaserver.org/shinder> Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls ________________________________ From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: Monday, December 20, 2004 3:00 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: FW Client (ISA2004) http://www.ISAserver.org Hi Ruba, Autodetection depends on wpad entries in DHCP and/or DNS. Check out the book or www.isaserver.org for deep details. HTH, Tom www.isaserver.org/shinder <http://www.isaserver.org/shinder> Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: romari@xxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: romari@xxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: romari@xxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: romari@xxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: romari@xxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx