Hi Scott, What does your Web Proxy log show for these connection attempts? Are you sure there are no SSL connection attempts as the users automatically log onto those sites in the background? Not sure why you would have printing problems with the VPN clients. Was it a name resolution issue? Thanks! Tom -----Original Message----- From: Scott Force [mailto:list@xxxxxxxxxxxxxxxxxxxxxxxxx] Sent: Tuesday, January 20, 2004 11:31 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Firewall Client http://www.ISAserver.org Q-2 Thanks Jim. I had the Firewall client installed on the VPN clients and it was interfering with printing on the LAN. Q-1 That's the really odd thing, they are not being required by the site for SSL connections. These are basic sites like getting to the browser home page or any main page. The users deafult web page is msn.com When they open their browser they get the HTTP 403.4 error message. If I type in from their browser http://www.yahoo.com I get the same error. This was working for them just fine Friday then Monday they began getting this error. Very odd and it's only happening to a select few. Any other thoughts? Like I mentioned, if I just add the ISA server as the default gateway on their pc, no problems. > Q1 - The web site, not the client is the one requiring SSL. > Take a look in the web proxy logs; if the web site refused the connection for non-SSL, it'll be there. > My bet is that they're using a link that requires SSL. > > Q2 - no; they must be either Web Proxy or Firewall clients. > > Jim Harrison > MCP(NT4, W2K), A+, Network+, PCG > http://www.microsoft.com/isaserver > http://isaserver.org/Jim_Harrison > http://isatools.org > > Read the help, books and articles! > ----- Original Message ----- > From: "Scott Force" <list@xxxxxxxxxxxxxxxxxxxxxxxxx> > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> > Sent: Tuesday, January 20, 2004 06:53 > Subject: [isalist] Firewall Client > > > http://www.ISAserver.org > > What would cause a firewall client to start requiring a SSL connection > for no reason? I have about 3 Firewall Client users (out of 125 > users) who get an error message in their browser that they must > connect to regular (yahoo, msn) webpages with an https connection. > They run 3rd party apps that need the Firewall client installed so my > SecureNat temp work around can't stay configured. > > Also, is there a way to configure remote VPN users to access my ISA > server for Internet without installing the Firewall Client? Thanks, Scott. > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > Leading Network Software Directory: http://www.serverfiles.com > No.1 Exchange Server Resource Site: http://www.msexchange.org Windows > Security Resource Site: http://www.windowsecurity.com/ Network > Security Library: http://www.secinf.net/ Windows 2000/NT Fax > Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > jim@xxxxxxxxxxxx To unsubscribe send a blank email to > $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')