RE: Problem with outbound connection to secure site

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 14 Feb 2003 11:50:40 -0600

Hi Bill,

Turn on all fields in the Web Proxy log

Go to the sites in question

Check the Web Proxy logs for Rule#1 and Rule#2 to determine the rules
blocking the requests

Remember that ISA Server can't see what's in the SSL tunnel, so if
you're blocking subdirs or content, then the entire site will be
whacked.

HTH,
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp 


-----Original Message-----
From: Mayo, Bill [mailto:bemayo@xxxxxxxxxxxxx] 
Sent: Friday, February 14, 2003 7:13 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Problem with outbound connection to secure site


http://www.ISAserver.org


We have some staff that need to connect to a web site that requires a
login
(html form).  They are able to login successfully, but then when they
click
on another link, they are thrown back to the authentication page.  We
are
using web proxy in the browser and also have the firewall client loaded
for
winsock proxy.  I have been able to verify that if the ISA Server is
bypassed, the site works fine.  Going through ISA Server on the same
computer results in a failure.  I have captured the relevant log entries
on
the ISA Server, but I am unable to determine the problem from there.  I
am
getting some result codes of 12209, but they are all logged as
"anonymous",
and casual observation of the log shows this type of entry on several
SSL
sites (I am not aware of any problems beyond this site).  I also have
some
995 return codes, but I am unable to find what this specific code means.
Tech support for the site was of no assistance ("It works for everybody
else.").  Can anyone advise of things to try or what the 995 codes might
mean?

~~~~~~~~~~
Bill Mayo
Network Administrator
Pitt County MIS 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: