[isapros] Re: A Strange Possibly ISA issue

  • From: Jim Harrison <Jim@xxxxxxxxxxxx>
  • To: "isapros@xxxxxxxxxxxxx" <isapros@xxxxxxxxxxxxx>
  • Date: Wed, 25 Jun 2008 13:36:56 -0700

I'm not clear; what other protocols are being tested and what is the client 
state for these?
If it's not a web proxy request, you'll never see a "timeout packet" (response) 
from ISA, since non-HTTP protocols don't generally provide for such messaging.



-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On 
Behalf Of Amy Babinchak
Sent: Wednesday, June 25, 2008 10:43 AM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] A Strange Possibly ISA issue

I was on a call with a guy in Wyoming last night looking to see if ISA
could be the source of his problem. I concluded that it most likely
wasn't but couldn't be 100% certain.

Here's the situation:

ISA 2004 SP3. SBS with Windows SP2 installed. Client computers are all
running XP SP3, the Firewall client and are all members of the domain.
Checked for the chimney off-loading stuff on the server and it is all
set correctly. Ran the BPA and it comes back clean.

Client computers are unable to access any service on the Internet except
http and https. The request for anything else results in a timeout
packet on ISA from the Internet access rule. The server does not have
this problem. The server can access any service on the Internet.

Using NetMon I saw that the request from the client made it to the
external NIC on the server. The name of the service resolved correctly
in DNS. And then no response...it times out.

Has me completely stumped. But since I didn't see anything wrong with
ISA, I decided it wasn't an ISA issue. What do you think?

thanks,

Amy Babinchak


Harbor Computer Services |(248) 850-8616

Tech Blog http://securesmb.harborcomputerservices.net
Client Blog http://smalltechnotes.blogspot.com
Website http://www.harborcomputerservices.net

Buy My House http://tinyurl.com/5gb5n8







Other related posts: