[isapros] Re: Strange errors
- From: Jim Harrison <Jim@xxxxxxxxxxxx>
- To: "isapros@xxxxxxxxxxxxx" <isapros@xxxxxxxxxxxxx>
- Date: Wed, 1 Aug 2012 18:33:41 +0000
Do this:
1. Disable automatic name registration in all of your TMG computer
network interfaces. TMG should be using a static internal IP, so dynamic
registration is irrelevant
2. Clear all TMG-registered names from your DNS server
3. Create a static DNS registration for TMG and disallow dynamic updates
for it
4. Disable DHCP auto-DNS-registration
This will prevent the TMG computer and DHCP from registering the RAS interface
IPs.
Jim Harrison
E: jim@xxxxxxxxxxxx<mailto:jim@xxxxxxxxxxxx>
C: 425-591-6122
Astrophysicists assure us that the universe has no center; therefore, you
cannot be it.
David McCullough Jr.
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On
Behalf Of Ball, Dan
Sent: Wednesday, August 01, 2012 11:29
To: 'isapros@xxxxxxxxxxxxx'
Subject: [isapros] Re: Strange errors
Well, so much for that idea... Still having problems.
More symptoms: When a workstation is having problems, it gets the yellow
warning icon on the network icon in the system tray that says "No Internet
Access".
Watching the traffic from those stations shows them hitting the default rule
with the HTTP Proxy protocol, but the destination IP is an RAS IP that was
picked up by the TMG server (via DHCP) for use with VPN clients. Disabling the
proxy settings in IE allows them to web browse, but doesn't fix the issue
completely.
From: isapros-bounce@xxxxxxxxxxxxx<mailto:isapros-bounce@xxxxxxxxxxxxx>
[mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Ball, Dan
Sent: Wednesday, August 01, 2012 1:19 PM
To: 'isapros@xxxxxxxxxxxxx'
Subject: [isapros] Re: Strange errors
Nevermind, used an alternate e-mail address and got it quickly. Strange how
it doesn't want to send to this one...
From: isapros-bounce@xxxxxxxxxxxxx<mailto:isapros-bounce@xxxxxxxxxxxxx>
[mailto:isapros-bounce@xxxxxxxxxxxxx]<mailto:[mailto:isapros-bounce@xxxxxxxxxxxxx]>
On Behalf Of Ball, Dan
Sent: Wednesday, August 01, 2012 1:05 PM
To: 'isapros@xxxxxxxxxxxxx'
Subject: [isapros] Re: Strange errors
Nope, not in there. Tried to request it again but it says the system is
currently unavailable. I'll check the Exchange logs.
From: isapros-bounce@xxxxxxxxxxxxx<mailto:isapros-bounce@xxxxxxxxxxxxx>
[mailto:isapros-bounce@xxxxxxxxxxxxx]<mailto:[mailto:isapros-bounce@xxxxxxxxxxxxx]>
On Behalf Of Jim Harrison
Sent: Wednesday, August 01, 2012 12:07 PM
To: isapros@xxxxxxxxxxxxx<mailto:isapros@xxxxxxxxxxxxx>
Subject: [isapros] Re: Strange errors
It shouldn't take more than a few minutes.
Not to be obvious, but have you checked your junk folder or spam filters?
Jim Harrison
E: jim@xxxxxxxxxxxx<mailto:jim@xxxxxxxxxxxx>
C: 425-591-6122
Astrophysicists assure us that the universe has no center; therefore, you
cannot be it.
David McCullough Jr.
From: isapros-bounce@xxxxxxxxxxxxx<mailto:isapros-bounce@xxxxxxxxxxxxx>
[mailto:isapros-bounce@xxxxxxxxxxxxx]<mailto:[mailto:isapros-bounce@xxxxxxxxxxxxx]>
On Behalf Of Ball, Dan
Sent: Wednesday, August 01, 2012 08:43
To: 'isapros@xxxxxxxxxxxxx'
Subject: [isapros] Re: Strange errors
Requested that a long time ago, still awaiting a response. How long does it
usually take?
From: isapros-bounce@xxxxxxxxxxxxx<mailto:isapros-bounce@xxxxxxxxxxxxx>
[mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Dieter Rauscher
Sent: Wednesday, August 01, 2012 10:51 AM
To: 'isapros@xxxxxxxxxxxxx'
Subject: [isapros] Re: Strange errors
Sure!
And it's easy: http://support.microsoft.com/kb/2689195
You can request it online.
--
Dieter Rauscher
MVP Forefront
Website: http://www.msisafaq.de<http://www.msisafaq.de/>
Blog: http://msmvps.com/rauscher/
Twitter: @Dieter_Rauscher
Buch: http://www.msisafaq.de/buch/
From: isapros-bounce@xxxxxxxxxxxxx<mailto:isapros-bounce@xxxxxxxxxxxxx>
[mailto:isapros-bounce@xxxxxxxxxxxxx]<mailto:[mailto:isapros-bounce@xxxxxxxxxxxxx]>
On Behalf Of Ball, Dan
Sent: Dienstag, 31. Juli 2012 16:30
To: 'isapros@xxxxxxxxxxxxx'
Subject: [isapros] Re: Strange errors
Is it worth requesting SP2 RU2?
From: Ball, Dan
Sent: Monday, July 30, 2012 7:01 AM
To: 'isapros@xxxxxxxxxxxxx'
Subject: RE: Strange errors
It looks like it is this version:
SP2 RU1 7.0.9193.515
From: isapros-bounce@xxxxxxxxxxxxx<mailto:isapros-bounce@xxxxxxxxxxxxx>
[mailto:isapros-bounce@xxxxxxxxxxxxx]<mailto:[mailto:isapros-bounce@xxxxxxxxxxxxx]>
On Behalf Of Jim Harrison
Sent: Friday, July 27, 2012 4:04 PM
To: isapros@xxxxxxxxxxxxx<mailto:isapros@xxxxxxxxxxxxx>
Subject: [isapros] Re: Strange errors
There was a problem with TMG SP1 that would cause that behavior.
What update level do you have installed?
If you're not sure, use
http://blogs.technet.com/b/isablog/archive/2009/02/25/isa-server-build-numbers.aspx
to sort it out.
Jim Harrison
E: jim@xxxxxxxxxxxx<mailto:jim@xxxxxxxxxxxx>
C: 425-591-6122
Astrophysicists assure us that the universe has no center; therefore, you
cannot be it.
David McCullough Jr.
From: isapros-bounce@xxxxxxxxxxxxx<mailto:isapros-bounce@xxxxxxxxxxxxx>
[mailto:isapros-bounce@xxxxxxxxxxxxx]<mailto:[mailto:isapros-bounce@xxxxxxxxxxxxx]>
On Behalf Of Ball, Dan
Sent: Friday, July 27, 2012 12:27
To: 'isapros@xxxxxxxxxxxxx'
Subject: [isapros] Strange errors
I'm having TONS of errors in the TMG log, clients are working fine one minute,
and a minute later they cannot browse the Internet. This is intermittent.
Sometimes they can wait and it will clear, other times I reboot the TMG server
and it clears up.
Looking at the logs, they are hitting the default rule with a 0x800733f5
WSA_RWS_ERROR_ACCESS_DENIED error.
Before I had suspected the Websense filter plug-in as the culprit, but they are
still getting that error when that plug-in is disabled.
Anyone got a good starting place to troubleshoot this issue?
Other related posts:
