[isalist] Re: SSL Sites

  • From: "Andy Haigh" <ahaigh@xxxxxxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 19 Jul 2006 21:29:31 +1000

http://www.ISAserver.org
-------------------------------------------------------

I have a lot of failed connections which are caused by it trying to use
anonymous via the proxy using a SSL-tunnel.

The last entries are from my PC to the ISA box but the web browser is
not displaying anything else and eventually shows the page cannot be
display page.

The last entries just keeps showing Initiated Connection on a few ports
then it closes those ports with a Closed Connection, there is no more
communication to the outside world. The result code for the closed
connections is 0x80074e20

Does this provide any clues to what's happening?

Thanks

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Andy Haigh
Sent: Wednesday, 19 July 2006 6:24 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SSL Sites

http://www.ISAserver.org
-------------------------------------------------------
  
Ok I have some log file details of the process but I am not really sure
what I am looking for??

Should I be looking at both info from the FWC and WEB logs or just one
of them?

Thanks 

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Tuesday, 11 July 2006 11:38 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SSL Sites

http://www.ISAserver.org
-------------------------------------------------------
  
What you'll have to do is examine the ISA logs for that same time frame
and originating from the test client.
The ISA logs should be very informative, but since you can't discern the
links from the pages, you have to do a bit of sleuthing of your own. 
Once you determine what requests to that bank are failing, we can
determine what action to take (if any).

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Andy Haigh
Sent: Tuesday, July 11, 2006 05:12
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SSL Sites

http://www.ISAserver.org
-------------------------------------------------------
  
There are some "javascript()" links and some are just pictures.

It's odd though it works fine for a few pages then goes wrong.  There is
the "Error on page" message at the bottom left of the page as well or
the exclamation mark on the yellow traffic sign. Once this has happened
it becomes really slow and then times out.

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Tuesday, 4 July 2006 12:09 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SSL Sites

http://www.ISAserver.org
-------------------------------------------------------
  
Do this:
1. hover over the broken links - what is the URL shown in the status
bar?
2. if it's not a "javascript()" link, use that information to scan your
ISA log for rejections or connection problems.


-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Andy Haigh
Sent: Monday, July 03, 2006 00:58
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] SSL Sites

Hi All,
I am having a hugh number of problems with https banking sites through
ISA 2004. 

The server is W2K3 SP1 Standard with ISA 2004 SP2 Standard, all patches
installed via Microsoft Update. 

Everything works fine to the internet when just browsing normal http
sites but as soon as I go to any sites that require https access I get
problems. Parts of the site (pictures, icons) don't get downloaded and
just have the red x where they should be, pages timeout, displayed with
wrong font, page is displayed but with the error icon at the bottom left
of IE.

If I plug into the otherside of the firewall everything works fine. 

Anyone have any suggestions. 

Thanks 

Andy 


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx 


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: