[isalist] Re: Users bumped out of Live Meeting when uploading PowerPoints
- From: Jerry Young <jerrygyoungii@xxxxxxxxx>
- To: isalist@xxxxxxxxxxxxx
- Date: Mon, 1 Feb 2010 16:56:53 -0500
Looks like Hosted Live Meeting.
http://www.dnsstuff.com/tools/ipall/?tool_id=67&token=&toolhandler_redirect=0&ip=65.221.5.36
The IP is in Redmond and the denial is being done on traffic bound for the
External network of the ISA Server from its Internal network.
As I understand it, however, the FWX_E_TCP_NOT_SYN_PACKET_DROPPED is
something you see commonly with stateful inspection on the ISA Server;
indeed, this error code is generally indicative of packets being dropped
because of stateful inspection; this traffic didn't match any conversation
currently in the ISA Server's state tables. That being said, a possible
cause of this is an asymmetric route between your client and the
destination.
Do your internal clients use the ISA Server as their default gateway or
another router? Is the return traffic to the client taking the same path
into of your environment as the original client traffic took leaving it?
For example, if you assume the ISA Server is used the default gateway by the
internal clients, the traffic flow of an asymmetric route might look at
follows:
Client -> ISA Server -> Router -> LiveMeeting -> Router -> Client.
That may not be the cause, though, as there are still other questions to
consider. Are the users able to upload any files at all? Is it just the
PowerPoint files that can't be uploaded? Are there any status error or
warning codes that preceed this one? If so, what are they?
Try taking a network trace and looking at that. That might ultimately be
what you need to do to determine the root cause.
On Mon, Feb 1, 2010 at 2:55 PM, D PIETRUSZKA USWRN INTERLINK INFRA SHIFT MGR
<DPietruszka@xxxxxx> wrote:
> Is it you own livemeeting or livemeeting service?
>
>
>
> Regards
>
> *Diego R. Pietruszka*
>
>
>
> *From:* isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
> *On Behalf Of *Rob Moore
> *Sent:* Monday, February 01, 2010 2:49 PM
> *To:* isalist@xxxxxxxxxxxxx
> *Subject:* [isalist] Users bumped out of Live Meeting when uploading
> PowerPoints
>
>
>
> Hi all—
>
>
>
> Using ISA 2006, patched to the latest version. (Getting ready to go to TMG,
> not there yet.)
>
>
>
> Users on my network suddenly can no longer upload PowerPoints to their Live
> Meetings. If they use their computer elsewhere (home or whatever) and are
> NOT connected to my VPN, then they can upload them just fine.
>
>
>
> I did some monitoring on one of these failures and here’s the result:
>
> Original Client IP Client Agent Authenticated
> Client Service Server Name Referring Server
> Destination Host Name Transport MIME Type Object
> Source Source Proxy Destination Proxy
> Bidirectional Client Host Name Filter
> Information Network Interface Raw IP Header Raw
> Payload GMT Log Time Source Port Processing
> Time Bytes Sent Bytes Received HTTP Status
> Code Cache Information Log Record
> Type Authentication Server Log Time Destination
> IP Destination Port Protocol Action
> Rule Client IP Client Username Source
> Network Destination Network HTTP Method
> URL Result Code Error Information
>
> 172.17.201.34
> PHL-ISA3 - TCP
> -
>
> - 2/1/2010
> 7:28:42 PM 31707 0 0
> 0 0x0 Firewall
> - 2/1/2010 2:28:42 PM 65.221.5.36 443
> HTTPS Denied Connection 172.17.201.34
> Internal External
> - - 0xc0040017
> FWX_E_TCP_NOT_SYN_PACKET_DROPPED 0x0
>
>
>
> I feel fairly certain that this error has been queried to the list before
> (maybe not with Power Points being uploaded into Live Meetings), but I
> couldn’t find any answers in the archive.
>
>
>
> Thanks,
>
> Rob
>
>
>
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
>
> Rob Moore
>
> Network Manager
>
> 215-241-7870
>
> Helpdesk: 800-500-AFSC
>
>
>
--
Cordially yours,
Jerry G. Young II
Microsoft Certified Systems Engineer
Young Consulting & Staffing Services Company - Owner
www.youngcss.com
Other related posts:
