[isalist] Re: SSL Sites

  • From: "Andy Haigh" <ahaigh@xxxxxxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 20 Jul 2006 09:00:21 +1000

http://www.ISAserver.org
-------------------------------------------------------

I know what that is, I have just captured log info for just accessing
that SSL banking site. What I am not sure of is what I am looking for in
the log file itself!

Thanks 

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thomas W Shinder
Sent: Thursday, 20 July 2006 3:46 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SSL Sites

http://www.ISAserver.org
-------------------------------------------------------
  
URLs to the problematic sites?

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls

 

> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Andy Haigh
> Sent: Wednesday, July 19, 2006 3:24 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: SSL Sites
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> Ok I have some log file details of the process but I am not really 
> sure what I am looking for??
> 
> Should I be looking at both info from the FWC and WEB logs or just one

> of them?
> 
> Thanks
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Jim Harrison
> Sent: Tuesday, 11 July 2006 11:38 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: SSL Sites
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> What you'll have to do is examine the ISA logs for that same time 
> frame and originating from the test client.
> The ISA logs should be very informative, but since you can't discern 
> the links from the pages, you have to do a bit of sleuthing of your 
> own.
> Once you determine what requests to that bank are failing, we can 
> determine what action to take (if any).
> 
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org
>    Read the help / books / articles!
> -------------------------------------------------------
>  
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Andy Haigh
> Sent: Tuesday, July 11, 2006 05:12
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: SSL Sites
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> There are some "javascript()" links and some are just pictures.
> 
> It's odd though it works fine for a few pages then goes wrong.  There 
> is the "Error on page" message at the bottom left of the page as well 
> or the exclamation mark on the yellow traffic sign. Once this has 
> happened it becomes really slow and then times out.
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Jim Harrison
> Sent: Tuesday, 4 July 2006 12:09 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: SSL Sites
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> Do this:
> 1. hover over the broken links - what is the URL shown in the status 
> bar?
> 2. if it's not a "javascript()" link, use that information to scan 
> your ISA log for rejections or connection problems.
> 
> 
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org
>    Read the help / books / articles!
> -------------------------------------------------------
>  
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Andy Haigh
> Sent: Monday, July 03, 2006 00:58
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] SSL Sites
> 
> Hi All,
> I am having a hugh number of problems with https banking sites through

> ISA 2004.
> 
> The server is W2K3 SP1 Standard with ISA 2004 SP2 Standard, all 
> patches installed via Microsoft Update.
> 
> Everything works fine to the internet when just browsing normal http 
> sites but as soon as I go to any sites that require https access I get

> problems. Parts of the site (pictures, icons) don't get downloaded and

> just have the red x where they should be, pages timeout, displayed 
> with wrong font, page is displayed but with the error icon at the 
> bottom left of IE.
> 
> If I plug into the otherside of the firewall everything works fine. 
> 
> Anyone have any suggestions. 
> 
> Thanks
> 
> Andy
> 
> 
> All mail to and from this domain is GFI-scanned.
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> All mail to and from this domain is GFI-scanned.
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: