That's the key. -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jason Jones Sent: Monday, February 25, 2008 7:05 AM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Connectivity Verifier Weirdness The remote ISA servers have to traverse the central ISA server to get to the actual perimeter network where the web servers are located... -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: 25 February 2008 15:02 To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Connectivity Verifier Weirdness Since the WP filter on each ISA is the source, the IP should be different when the request is coming from a separate server. This makes me wonder about your CV and CARP settings. - are the CV defined as "Web (Internet)" or "published servers"? - do you have CARP enabled in the network object where the web servers reside? -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jason Jones Sent: Monday, February 25, 2008 6:29 AM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Connectivity Verifier Weirdness No, I think it is the fact this it is being handled by the web proxy filter (as HTTP) as the primary site - hence the source IP is masked - this feasible? -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: 25 February 2008 14:27 To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Connectivity Verifier Weirdness Ew; ISA traffic has to traverse some sort of NAT between it and the web servers? -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jason Jones Sent: Monday, February 25, 2008 3:12 AM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Connectivity Verifier Weirdness Kinda hard to explain the exact traffic flow, but I modified the CVs paths (e.g. used a fake virtual directory) at the remote locations and I can now see these specific CVs in the IIS logs. As I suspected, they are seen with the same IP address due to the traffic flow. Anyhow, problem solved! :-) -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: 22 February 2008 18:45 To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Connectivity Verifier Weirdness That makes no sense. You'll get IP conflicts according to your description. "HTTP" isn't relevant. CV requests to the IIS should be logged as the ISA internal IP. -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jason Jones Sent: Friday, February 22, 2008 9:20 AM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Connectivity Verifier Weirdness Think I have worked this out now...we have some other ISA Servers at other locations that also have CVs that pass though the first array...as it is HTTP I guess these appear to come from the same source, but that aren't really... Jason Jones | Security | Silversands Limited | Desk: +44 (0)1202 360489 | Mobile: +44 (0)7971 500312 | Email/MSN: jason.jones@xxxxxxxxxxxxxxxxx -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jason Jones Sent: 22 February 2008 17:01 To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Connectivity Verifier Weirdness Nope, as I say, the ISA logs show a steady stream of 1 from each every 60 seconds...could IIS be somehow getting it wrong? Single farm using HTTP, no other CV to that destination... -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: 22 February 2008 16:51 To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Connectivity Verifier Weirdness How many CV have they configured to that server? If you define CV manually, and then create web farm rules that include this server in the farm, you'll get double-CV action to the farm member. -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jason Jones Sent: Friday, February 22, 2008 8:10 AM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Connectivity Verifier Weirdness Hi, We have a customer who claims that their web server logs shows connectivity verifiers checks happening more frequently from one particular node, of a two node array. Looking at the firewall logs, I see a steady stream of 1 check per array member every 30 seconds (as per expected). However, they have now produced an IIS log which shows node 1 making four connections for every one connection from node 2. Any ideas??? Cheers JJ ________________________________ This email and any files transmitted with it are confidential and intended solely for the use of the individual to whom it is addressed. If you have received this email in error, or if you believe this email is unsolicited and wish to be removed from any future mailings, please contact our Support Desk immediately on 01202 360360 or email helpdesk@xxxxxxxxxxxxxxxxx If this email contains a quotation then unless otherwise stated it is valid for 7 days and offered subject to Silversands Professional Services Terms and Conditions, a copy of which is available on request. Any pricing information, design information or information concerning specific Silversands' staff contained in this email is considered confidential or of commercial interest and exempt from the Freedom of Information Act 2000. Any view or opinions presented are solely those of the author and do not necessarily represent those of Silversands Silversands Limited, 3 Albany Park, Cabot Lane, Poole, BH17 7BX. Company Registration Number : 2141393. This email and any files transmitted with it are confidential and intended solely for the use of the individual to whom it is addressed. If you have received this email in error, or if you believe this email is unsolicited and wish to be removed from any future mailings, please contact our Support Desk immediately on 01202 360360 or email helpdesk@xxxxxxxxxxxxxxxxx If this email contains a quotation then unless otherwise stated it is valid for 7 days and offered subject to Silversands Professional Services Terms and Conditions, a copy of which is available on request. Any pricing information, design information or information concerning specific Silversands' staff contained in this email is considered confidential or of commercial interest and exempt from the Freedom of Information Act 2000. Any view or opinions presented are solely those of the author and do not necessarily represent those of Silversands Silversands Limited, 3 Albany Park, Cabot Lane, Poole, BH17 7BX. Company Registration Number : 2141393. This email and any files transmitted with it are confidential and intended solely for the use of the individual to whom it is addressed. If you have received this email in error, or if you believe this email is unsolicited and wish to be removed from any future mailings, please contact our Support Desk immediately on 01202 360360 or email helpdesk@xxxxxxxxxxxxxxxxx If this email contains a quotation then unless otherwise stated it is valid for 7 days and offered subject to Silversands Professional Services Terms and Conditions, a copy of which is available on request. Any pricing information, design information or information concerning specific Silversands' staff contained in this email is considered confidential or of commercial interest and exempt from the Freedom of Information Act 2000. Any view or opinions presented are solely those of the author and do not necessarily represent those of Silversands Silversands Limited, 3 Albany Park, Cabot Lane, Poole, BH17 7BX. Company Registration Number : 2141393. This email and any files transmitted with it are confidential and intended solely for the use of the individual to whom it is addressed. If you have received this email in error, or if you believe this email is unsolicited and wish to be removed from any future mailings, please contact our Support Desk immediately on 01202 360360 or email helpdesk@xxxxxxxxxxxxxxxxx If this email contains a quotation then unless otherwise stated it is valid for 7 days and offered subject to Silversands Professional Services Terms and Conditions, a copy of which is available on request. Any pricing information, design information or information concerning specific Silversands' staff contained in this email is considered confidential or of commercial interest and exempt from the Freedom of Information Act 2000. Any view or opinions presented are solely those of the author and do not necessarily represent those of Silversands Silversands Limited, 3 Albany Park, Cabot Lane, Poole, BH17 7BX. Company Registration Number : 2141393. This email and any files transmitted with it are confidential and intended solely for the use of the individual to whom it is addressed. If you have received this email in error, or if you believe this email is unsolicited and wish to be removed from any future mailings, please contact our Support Desk immediately on 01202 360360 or email helpdesk@xxxxxxxxxxxxxxxxx If this email contains a quotation then unless otherwise stated it is valid for 7 days and offered subject to Silversands Professional Services Terms and Conditions, a copy of which is available on request. Any pricing information, design information or information concerning specific Silversands' staff contained in this email is considered confidential or of commercial interest and exempt from the Freedom of Information Act 2000. Any view or opinions presented are solely those of the author and do not necessarily represent those of Silversands Silversands Limited, 3 Albany Park, Cabot Lane, Poole, BH17 7BX. Company Registration Number : 2141393. This email and any files transmitted with it are confidential and intended solely for the use of the individual to whom it is addressed. If you have received this email in error, or if you believe this email is unsolicited and wish to be removed from any future mailings, please contact our Support Desk immediately on 01202 360360 or email helpdesk@xxxxxxxxxxxxxxxxx If this email contains a quotation then unless otherwise stated it is valid for 7 days and offered subject to Silversands Professional Services Terms and Conditions, a copy of which is available on request. Any pricing information, design information or information concerning specific Silversands' staff contained in this email is considered confidential or of commercial interest and exempt from the Freedom of Information Act 2000. Any view or opinions presented are solely those of the author and do not necessarily represent those of Silversands Silversands Limited, 3 Albany Park, Cabot Lane, Poole, BH17 7BX. Company Registration Number : 2141393.