Re: Firewall Client

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 20 Jan 2004 18:11:34 -0600

Hi Scott,

What does your Web Proxy log show for these connection attempts? Are you
sure there are no SSL connection attempts as the users automatically log
onto those sites in the background?

Not sure why you would have printing problems with the VPN clients. Was
it a name resolution issue?

Thanks!
Tom 

-----Original Message-----
From: Scott Force [mailto:list@xxxxxxxxxxxxxxxxxxxxxxxxx] 
Sent: Tuesday, January 20, 2004 11:31 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Firewall Client

http://www.ISAserver.org

Q-2 Thanks Jim.  I had the Firewall client installed on the VPN clients
and it was interfering with printing on the LAN.

Q-1 That's the really odd thing, they are not being required by the site
for SSL connections.  These are basic sites like getting to the browser
home page or any main page.  The users deafult web page is msn.com  When
they open their browser they get the HTTP 403.4 error message.  If I
type in from their browser http://www.yahoo.com I get the same error.
This was working for them just fine Friday then Monday they began
getting this error.  Very odd and it's only happening to a select few.
Any other thoughts?  Like I mentioned, if I just add the ISA server as
the default gateway on their pc, no problems.

  

> Q1 - The web site, not the client is the one requiring SSL.
> Take a look in the web proxy logs; if the web site refused the
connection for non-SSL, it'll be there.
> My bet is that they're using a link that requires SSL.
> 
> Q2 - no; they must be either Web Proxy or Firewall clients.
> 
>  Jim Harrison
>  MCP(NT4, W2K), A+, Network+, PCG
>  http://www.microsoft.com/isaserver
>  http://isaserver.org/Jim_Harrison
>  http://isatools.org
> 
>  Read the help, books and articles!
> ----- Original Message -----
> From: "Scott Force" <list@xxxxxxxxxxxxxxxxxxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Tuesday, January 20, 2004 06:53
> Subject: [isalist] Firewall Client
> 
> 
> http://www.ISAserver.org
> 
> What would cause a firewall client to start requiring a SSL connection

> for no reason?  I have about 3 Firewall Client users (out of 125 
> users) who get an error message in their browser that they must 
> connect to regular (yahoo, msn) webpages with an https connection.  
> They run 3rd party apps that need the Firewall client installed so my 
> SecureNat temp work around can't stay configured.
> 
> Also, is there a way to configure remote VPN users to access my ISA 
> server for Internet without installing the Firewall Client?  Thanks,
Scott.
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org Windows 
> Security Resource Site: http://www.windowsecurity.com/ Network 
> Security Library: http://www.secinf.net/ Windows 2000/NT Fax 
> Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:

> jim@xxxxxxxxxxxx To unsubscribe send a blank email to 
> $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')




Other related posts: