[isalist] Re: SSL Sites

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 19 Jul 2006 19:29:37 -0500

http://www.ISAserver.org
-------------------------------------------------------

You knowing what they are doesn't help anyone here figure out what the
problem is.

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls

 

> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx 
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Andy Haigh
> Sent: Wednesday, July 19, 2006 6:00 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: SSL Sites
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> I know what that is, I have just captured log info for just accessing
> that SSL banking site. What I am not sure of is what I am 
> looking for in
> the log file itself!
> 
> Thanks 
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx 
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Thomas W Shinder
> Sent: Thursday, 20 July 2006 3:46 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: SSL Sites
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> URLs to the problematic sites?
> 
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://blogs.isaserver.org/shinder/
> Book: http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> 
>  
> 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Andy Haigh
> > Sent: Wednesday, July 19, 2006 3:24 AM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: SSL Sites
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >   
> > Ok I have some log file details of the process but I am not really 
> > sure what I am looking for??
> > 
> > Should I be looking at both info from the FWC and WEB logs 
> or just one
> 
> > of them?
> > 
> > Thanks
> > 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Jim Harrison
> > Sent: Tuesday, 11 July 2006 11:38 PM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: SSL Sites
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >   
> > What you'll have to do is examine the ISA logs for that same time 
> > frame and originating from the test client.
> > The ISA logs should be very informative, but since you 
> can't discern 
> > the links from the pages, you have to do a bit of sleuthing of your 
> > own.
> > Once you determine what requests to that bank are failing, we can 
> > determine what action to take (if any).
> > 
> > -------------------------------------------------------
> >    Jim Harrison
> >    MCP(NT4, W2K), A+, Network+, PCG
> >    http://isaserver.org/Jim_Harrison/
> >    http://isatools.org
> >    Read the help / books / articles!
> > -------------------------------------------------------
> >  
> > 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Andy Haigh
> > Sent: Tuesday, July 11, 2006 05:12
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: SSL Sites
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >   
> > There are some "javascript()" links and some are just pictures.
> > 
> > It's odd though it works fine for a few pages then goes 
> wrong.  There 
> > is the "Error on page" message at the bottom left of the 
> page as well 
> > or the exclamation mark on the yellow traffic sign. Once this has 
> > happened it becomes really slow and then times out.
> > 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Jim Harrison
> > Sent: Tuesday, 4 July 2006 12:09 AM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: SSL Sites
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >   
> > Do this:
> > 1. hover over the broken links - what is the URL shown in 
> the status 
> > bar?
> > 2. if it's not a "javascript()" link, use that information to scan 
> > your ISA log for rejections or connection problems.
> > 
> > 
> > -------------------------------------------------------
> >    Jim Harrison
> >    MCP(NT4, W2K), A+, Network+, PCG
> >    http://isaserver.org/Jim_Harrison/
> >    http://isatools.org
> >    Read the help / books / articles!
> > -------------------------------------------------------
> >  
> > 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Andy Haigh
> > Sent: Monday, July 03, 2006 00:58
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] SSL Sites
> > 
> > Hi All,
> > I am having a hugh number of problems with https banking 
> sites through
> 
> > ISA 2004.
> > 
> > The server is W2K3 SP1 Standard with ISA 2004 SP2 Standard, all 
> > patches installed via Microsoft Update.
> > 
> > Everything works fine to the internet when just browsing 
> normal http 
> > sites but as soon as I go to any sites that require https 
> access I get
> 
> > problems. Parts of the site (pictures, icons) don't get 
> downloaded and
> 
> > just have the red x where they should be, pages timeout, displayed 
> > with wrong font, page is displayed but with the error icon at the 
> > bottom left of IE.
> > 
> > If I plug into the otherside of the firewall everything works fine. 
> > 
> > Anyone have any suggestions. 
> > 
> > Thanks
> > 
> > Andy
> > 
> > 
> > All mail to and from this domain is GFI-scanned.
> > 
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > 
> > All mail to and from this domain is GFI-scanned.
> > 
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials: 
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > 
> > 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx 
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/  
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/ 
> ISA Server Blogs: http://blogs.isaserver.org/ 
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com 
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
> Report abuse to listadmin@xxxxxxxxxxxxx 
> 
> 
> 
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: