Re: !! Urgent !! RE: Telnet Access Problem with ISA 2000

From: "Jim Harrison" <jim@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Date: Fri, 8 Oct 2004 11:27:10 -0700
Nope; it's not broken.
SecureNAT clients can't resolve external names unless their configured DNS 
server can.
Firewall and web proxy clients "appear to" resolve external names only because 
they defer this process to the ISA server.
It's all covered in my ISA client articles on isaserver.org.

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!

----- Original Message ----- 
From: "Paul Crisp" <PCrisp@xxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, October 08, 2004 11:02
Subject: [isalist] Re: !! Urgent !! RE: Telnet Access Problem with ISA 2000


http://www.ISAserver.org

will do, thanks Jim & Shawn been more than helpful.
Looks like i'm going to be distributing FWClient to every PC in the office 
then !!

Whilst its not an actual problem does 2004 allow better solutions

Regards

Paul Crisp
----- Original Message ----- 
From: "Quillman Shawn (RBNA/CSA1) *" <Shawn.Quillman@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, October 08, 2004 5:03 PM
Subject: [isalist] Re: !! Urgent !! RE: Telnet Access Problem with ISA 2000


> http://www.ISAserver.org
>
>
> Ah, yes.  Didn't think about that.  That's definitely a good one to keep
> on the back burner.
>
> The problem, though, is that the fwclient is not installed on the
> problem children.
> Paul: check your web proxy logs for lines to that host where the method
> is CONNECT and the port is 23.  Sounds like it is actually tunneling
> through http.  If so, then that's your slowness problem (all the http
> overhead).
>
> -Shawn
>
> -----
> Shawn R. Quillman
> Robert Bosch Corporation RBNA/CSA1
> 38000 Hills Tech Drive
> Farmington Hills, MI 48331
> (248) 553-1164 (P) (248) 848-6969 (F)
> shawn.quillman@xxxxxxxxxxxx
>
> -----Original Message-----
> From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
> Sent: Friday, October 08, 2004 11:52 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Re: !! Urgent !! RE: Telnet Access Problem with ISA
> 2000
>
> http://www.ISAserver.org
>
> It's true that the web proxy only supports those protocols, but one
> thing you have to remember; the web proxy will allow you to
> connect using the http://thaplace.domain.tld:23 as well, effectively
> trying a telnet session across the web proxy.
> As I said, since it works with the FWClient enabled, leave it in place.
>
>  Jim Harrison
>  MCP(NT4, W2K), A+, Network+, PCG
>  http://isaserver.org/Jim_Harrison/
>  http://isatools.org
>  Read the help / books / articles!
>
> ----- Original Message ----- 
> From: "Quillman Shawn (RBNA/CSA1) *" <Shawn.Quillman@xxxxxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Friday, October 08, 2004 08:45
> Subject: [isalist] Re: !! Urgent !! RE: Telnet Access Problem with ISA
> 2000
>
>
> http://www.ISAserver.org
>
>
> Those are the only protocols available for the web proxy service.  It's
> possible to be a "multiple" client.  For example, web proxy client and
> snat client.  I am guessing that this is your case.
>
> -Shawn
>
> -----
> Shawn R. Quillman
> Robert Bosch Corporation RBNA/CSA1
> 38000 Hills Tech Drive
> Farmington Hills, MI 48331
> (248) 553-1164 (P) (248) 848-6969 (F)
> shawn.quillman@xxxxxxxxxxxx
>
> -----Original Message-----
> From: Paul Crisp [mailto:PCrisp@xxxxxxxxxxxxxxxxx]
> Sent: Friday, October 08, 2004 11:45 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Re: !! Urgent !! RE: Telnet Access Problem with ISA
> 2000
>
> http://www.ISAserver.org
>
> Thanks for coming back to me so quick Jim.
>
> I have been reading your articles on the various clients and in the Web
> Proxy client, it states that the only protocols that are available are
> HTTP,HTTPS, Gopher and FTP ?
>
> I have enabled Telnet and I am able to Telnet to an outside of the
> firewall
> server and connect correctly, just very slow ??
>
> I will check the logs also
>
> Paul Crisp
> Snr Network Support Analyst
> t: 020 7 827 5201
> f: 020 7 827 5266
>
> -----Original Message-----
> From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
> Sent: Friday, October 08, 2004 4:38 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Re: !! Urgent !! RE: Telnet Access Problem with ISA
> 2000
> Importance: High
>
> http://www.ISAserver.org
>
> If it works with the FWC installed and enabled, you're probably getting
> name
> resolution errors.
> Check your web proxy and firewall logs after making a test connection
> with
> the client..
>
>
>  Jim Harrison
>  MCP(NT4, W2K), A+, Network+, PCG
>  http://isaserver.org/Jim_Harrison/
>  http://isatools.org
>  Read the help / books / articles!
>
> ----- Original Message ----- 
> From: "Paul Crisp" <PCrisp@xxxxxxxxxxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Friday, October 08, 2004 08:08
> Subject: [isalist] !! Urgent !! RE: Telnet Access Problem with ISA 2000
>
>
> http://www.ISAserver.org
>
> Sorry guys this is quite urgent, can anyone help ???
> I know you've all moved to 2004 now :)
>
> Paul Crisp
> Snr Network Support Analyst
> t: 020 7 827 5201
> f: 020 7 827 5266
> -----Original Message-----
> From: Paul Crisp
> Sent: Friday, October 08, 2004 1:00 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Telnet Access Problem with ISA 2000
> Importance: High
>
> http://www.ISAserver.org
>
> Hi guys,
>
> Wonder if you could give me some assistance. Our company is installing a
> new
> database product which is hosted in the US and the desktops back in my
> office will basically be running a telnet client, it's called SBClient
> by
> Informix. SBClient initiates via a traditional text based screen and
> then
> after a few seconds it will return a GUI interface.
>
> I have a few site protocol rules, one which I call Regular Internet
> Access
> and this has Telnet, HTTP access. I also have another protocol rule
> called
> IT & Special Staff, which has the same plus a couple of extra protocols
> that
> is only applied to a specific set of users.
>
> My desktops are configured as web proxy clients on the whole, apart from
> the
> specific set of users who are in the IT & Special Staff protocol rule
> list
> which have firewall clients installed.
>
> If one of the web proxy clients uses this software, they can connect no
> problem but the GUI is very very slow
> If one of the firewall clients uses this software, the system operates
> normally
>
> I have proved this also by disabling a firewall client and trying the
> software again, and it becomes very slow.
>
> Has anyone got any clue whats happening or anything that I can change to
> get
> web proxy clients working correctly
>
> Paul Crisp
> Snr Network Support Analyst
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> pcrisp@xxxxxxxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> pcrisp@xxxxxxxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> shawn.quillman@xxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> shawn.quillman@xxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> pcrisp@xxxxxxxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Re: !! Urgent !! RE: Telnet Access Problem with ISA 2000

Other related posts:
