RE: !! Urgent !! RE: Telnet Access Problem with ISA 2000

  • From: "Quillman Shawn (RBNA/CSA1) *" <Shawn.Quillman@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 8 Oct 2004 10:27:38 -0500

Hi Paul,

1) Are your web proxy clients also snat clients?  Try doing a tracert on
one of each of the types of clients to see if the traffic for the web
proxy clients is travelling over some funky route when going to/coming
from your ISA.

2) What are the protocols in the IT & Staff rule that are not included
in the other one?

3) This is an outside thought.  What protocols does the SBClient gui
talk on?  I'm wondering if maybe it's something like RealPlayer that can
use a couple different ones, including http.  The thought is that maybe
the gui is trying to use its default protocol(s) and, not being
successful, is tunneling through http.  This would have much more
overhead as the http headers have to be dealt with then the data has to
be parsed out of the http messages.

4) Have you done a network trace on the 2 different types of clients to
see differences in the traffic?

-Shawn

-----
Shawn R. Quillman
Robert Bosch Corporation RBNA/CSA1
38000 Hills Tech Drive
Farmington Hills, MI 48331
(248) 553-1164 (P) (248) 848-6969 (F)
shawn.quillman@xxxxxxxxxxxx

-----Original Message-----
From: Paul Crisp [mailto:PCrisp@xxxxxxxxxxxxxxxxx] 
Sent: Friday, October 08, 2004 11:08 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] !! Urgent !! RE: Telnet Access Problem with ISA 2000
Importance: High

http://www.ISAserver.org

Sorry guys this is quite urgent, can anyone help ???
I know you've all moved to 2004 now :)

Paul Crisp
Snr Network Support Analyst
t: 020 7 827 5201
f: 020 7 827 5266
-----Original Message-----
From: Paul Crisp 
Sent: Friday, October 08, 2004 1:00 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Telnet Access Problem with ISA 2000
Importance: High

http://www.ISAserver.org

Hi guys,

Wonder if you could give me some assistance. Our company is installing a
new
database product which is hosted in the US and the desktops back in my
office will basically be running a telnet client, it's called SBClient
by
Informix. SBClient initiates via a traditional text based screen and
then
after a few seconds it will return a GUI interface.

I have a few site protocol rules, one which I call Regular Internet
Access
and this has Telnet, HTTP access. I also have another protocol rule
called
IT & Special Staff, which has the same plus a couple of extra protocols
that
is only applied to a specific set of users. 

My desktops are configured as web proxy clients on the whole, apart from
the
specific set of users who are in the IT & Special Staff protocol rule
list
which have firewall clients installed. 

If one of the web proxy clients uses this software, they can connect no
problem but the GUI is very very slow
If one of the firewall clients uses this software, the system operates
normally

I have proved this also by disabling a firewall client and trying the
software again, and it becomes very slow.

Has anyone got any clue whats happening or anything that I can change to
get
web proxy clients working correctly

Paul Crisp
Snr Network Support Analyst


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
pcrisp@xxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
shawn.quillman@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



Other related posts: