Re: Fiewall Log sc-status: 13301

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 6 Dec 2001 14:25:05 -0800

That error code means ISA refused to allow that traffic.
Add "Rule#1" and "Rule#2" fields to your FW logs (Monitoring, Logs, Firewall
log props).
You need to review the protocol definition, the protocol rule and your site
and content rules to see why this is occurring.

Jim Harrison
MCP(NT4, 2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/

----- Original Message -----
From: "Chhatwal, Raminder S." <RChhatwal@xxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, December 06, 2001 10:37
Subject: [isalist] Fiewall Log sc-status: 13301


http://www.ISAserver.org


Hi all,

Following is what my firewall log shows. I have a protocol defined with
port 8101 inbound and outbound and a protocol rule allowing this
protocol to go through but I am still getting blocked.

Please advise what further configuration needs to be done to let SNAT
clients go through the firewall to connect on this port.

Thanks
Rami


#Software: Microsoft(R) Internet Security and Acceleration Server 2000
#Version: 1.0
#Date: 2001-12-06 18:27:08
#Fields:
c-ip cs-username c-agent date time
s-computername r-host r-ip r-port time-taken cs-bytes
sc-bytes cs-protocol cs-transports-operation sc-status
sessionid connectionid

10.22.25.60 - - 2001-12-06 18:27:08
NYNY0S24 - 10.11.0.221 8101 -
- - 8101 TCP Connect
13301 2 1

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')




Other related posts: