[isalist] Re: IE Proxy settings vs. ISA FWC
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Sun, 15 Oct 2006 06:59:57 -0700
It will depend on other application that think they know how to use the
browser settings.
Do you have an more that behave this way?
BTW, I have been successful in getting one app dev to change his code to
be more RFC-compliant.
A rare case, to be sure, but it's still numbered among the "wins"...
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Danny
Sent: Saturday, October 14, 2006 8:52 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: IE Proxy settings vs. ISA FWC
Thanks, Jim. I will try to get a capture. In the meantime, I am trying
to think of all the "cons" associated with disabling IE proxy settings
and solely using the FWC.
- Dan
On 10/13/06, Jim Harrison <Jim@xxxxxxxxxxxx> wrote:
http://www.ISAserver.org
-------------------------------------------------------
BTDT; if the app thinks "it knows best" you're screwed.
I'll bet that if you get a crapture of this traffic in the failure
state, it's trying to make "GET https://blah"; when it should be making
"CONNECT https://blah";.
Unfortunately, there's no good workaround short of disabling the browser
settings.
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Danny
Sent: Friday, October 13, 2006 12:21
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: IE Proxy settings vs. ISA FWC
When the IE proxy settings are enabled the app attempts to utilize those
settings regardless of whether or not the ISA firewall client is
enabled. When the proxy settings are not enabled and the firewall client
is enabled, the app is able to function via the FWC.
On 10/13/06, Jim Harrison <Jim@xxxxxxxxxxxx> wrote:
http://www.ISAserver.org
-------------------------------------------------------
"does not work"?
Doe is change its behavior based on these settings, or do the
settings have no effect at all?
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org <http://isatools.org>
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Danny
Sent: Friday, October 13, 2006 08:35
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] IE Proxy settings vs. ISA FWC
Up to date WinXP Pro install and ISA 2004 SP1 on Win2003 SP1...
all HTTP and HTTPS connects are restricted to a specific AD group.
A new app that we are testing on the client connects through
HTTP/S and does not work via IE's web proxy settings. Of course, when we
disable the IE proxy settings and enable the FWC (Firewall Client) the
app works fine.
Long-term, if we cannot convince the vendor to fix their app,
what are the pros and cons of disabling IE's proxy settings and using
the FWC as sole interface to authenticate against the ISA
proxy/firewall.
Thanks,
...D
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
<http://www.isaserver.org/articles_tutorials/>
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
--
CPDE - Certified Petroleum Distribution Engineer CCBC - Certified
Canadian Beer Consumer
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
--
CPDE - Certified Petroleum Distribution Engineer
CCBC - Certified Canadian Beer Consumer
All mail to and from this domain is GFI-scanned.
Other related posts:
