Unfortunately, I ran out of time before I was able to do that. I did attempt to test it, but "all" publishing wasn't working at that time, and I had to get SurfControl back up and operational in a really short span of time, so it wasn't completed. I also tried to put RainConnect back on, but that gave me some serious errors and wouldn't work at all, and with the short amount of time I had to work with I ended up removing that and bringing the server up with only one ISP just to get it operational. I just got off the phone with SurfControl, and they confirmed what I suspected. That program will "block" SSL or non-SSL, but there is nothing in the program that will "force" a connection to use SSL, so we can "almost" rule that out. Or, at least we can rule out a SC configuration setting as the culprit. I have an aide setting up another test ISA server right now, and will test a clean install (not using the ISA backup) to see if I can narrow it down a bit more. ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Moffat Sent: Tuesday, February 20, 2007 10:44 AM To: ISA Mailing List Subject: [isalist] Re: Publishing in ISA2006 Did you try it before you added in rainconnect & surfcontrol..... S From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan Sent: Tuesday, February 20, 2007 10:43 AM To: ISA Mailing List Subject: [isalist] Re: Publishing in ISA2006 Not that I can tell. It can block SSL or non-SSL connections, but don't see anyway to force it to be required. I'll contact SurfControl and see if they know of anything like that. ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Tuesday, February 20, 2007 9:12 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Publishing in ISA2006 Unfortunately, there's no way for me to review the SC settings - does it have any way to enforce SSL? From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan Sent: Tuesday, February 20, 2007 5:44 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Publishing in ISA2006 Well, it appears that it might be a configuration issue. I did an almost total rebuild yesterday; I exported the ISA settings, formatted the drive, reinstalled ISA and SurfControl (left RainConnect out), and got the same exact symptoms. I'm thinking I'm going to have to rewrite all my ISA settings from scratch now. ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Sunday, February 11, 2007 5:05 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Publishing in ISA2006 I did and so far, the data doesn't line up. The capture clearly indicates that ISA is the one responding with the "muse use SSL", but none of the configuration seems to require it. I tried your site today and I get a "302" redirect, but the SSL listener is apparently deaf. This too is a non-functional combination. I'll have to format the tracing and see what shakes out. We may have to repeat this process a time or two... From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan Sent: Tuesday, February 06, 2007 11:18 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Publishing in ISA2006 Were you able to make sense of the info I sent you? ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Friday, February 02, 2007 11:12 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Publishing in ISA2006 Get an ISABPAPack in repro mode and send me the results. You can get ISABPA from MS downloads. The instructions for running ISABPAPack in repro mode are part of the package. From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan Sent: Friday, February 02, 2007 6:05 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Publishing in ISA2006 Sorry, problem still exists, that was just a question I ran across while troubleshooting... Sent captures to Jim, he confirms it is an ISA setting causing it, so I'm back to square one... ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Moffat Sent: Friday, February 02, 2007 7:14 AM To: ISA Mailing List Subject: [isalist] Re: Publishing in ISA2006 And there you have it......answered by Jim on Monday and ignored...... s From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan Sent: Thursday, February 01, 2007 10:39 PM To: ISA Mailing List Subject: [isalist] Re: Publishing in ISA2006 Thanks... Taking off the redirection does enable those options, mystery solved! ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder Sent: Thursday, February 01, 2007 3:22 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Publishing in ISA2006 Hi Dan, The settings on the Web listener might complete the story. Thomas W Shinder, M.D. Site: www.isaserver.org <http://www.isaserver.org/> Blog: http://blogs.isaserver.org/shinder/ Book: http://tinyurl.com/3xqb7 MVP -- Microsoft Firewalls (ISA) ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan Sent: Thursday, February 01, 2007 2:10 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Publishing in ISA2006 This screenshot of my web publishing rule is troubling me more as I think about it. I've tried to find as many tutorials as I could on the Internet that had rule snapshots, and I have yet to see another one that has grayed-out options on this menu. I've created many different web-publishing rules, using different variations in options, and no matter what I do those options are grayed-out. Even my OWA publishing rule grayed-out. After looking at all the tutorials Tom as put together for ISA2006, I'm beginning to think that this is not the way it is supposed to be. All mail to and from this domain is GFI-scanned. All mail to and from this domain is GFI-scanned. All mail to and from this domain is GFI-scanned. All mail to and from this domain is GFI-scanned.