We've been answering four separate, unrelated questions: 1. "How to stop the FWC from changing IE settings" - you do this in one (or both) of two places): a. the FWC manglement applet in the client systray. The last tab is "Web Browser Configuration". In here, you can uncheck "Configure Web browser..." and click "Apply". The FWC will stop changing the IE settings b. do what I said previously, except in "do this at the ISA", unselect "automatically detect settings" in step 3. Continue with the remaining steps as listed. 2. "How to manually configure IE for local access of internal IP addresses" - Amy self-solved that with the KB she listed in her original post, but Q1 got in the way. 3. "How to configure ISA to disable caching for site 'x'" - this is done via Web Chaining rules. 4. "how to disable IE local caching for site 'x'" - ISA and the FWC have a separate and combined effect of diddly, squat and bupkus in this regard. This can only be controlled at the server. Jim -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Amy Babinchak Sent: Wednesday, September 05, 2007 9:29 AM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Unix LOB Caching I wouldn't have to care if the app were written better. This isn't about ISA caching. This is about the firewall client updating the IE settings and removing my 10.0.0.2 exception to IE caching. -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jason Jones Sent: Wednesday, September 05, 2007 12:14 PM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Unix LOB Caching This seems to have got a bit confused...surely you just need the client to bypass ISA for this particular address? If so the stuff from Jim should do the trick. I don't see why you care about caching if ISA is being bypassed???? -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Amy Babinchak Sent: 05 September 2007 17:01 To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Unix LOB Caching Actually there is. I need to prevent ISA from overwriting the changes I make to IE. If I add 10.0.0.2 to the exceptions list in IE. The firewall client removes it. -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Wednesday, September 05, 2007 11:46 AM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Unix LOB Caching If IE is caching the pages, *nothing* you can do at ISA will prevent this. if you don't have wpad support here, you should; it really makes things so much easier (and centralized). -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Amy Babinchak Sent: Wednesday, September 05, 2007 8:50 AM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Unix LOB Caching I haven't implemented wpad at this location. The 10.0.0.x network is the internal network. My probably is really that IE is caching the pages and I can't prevent IE from doing that because the firewall client takes over. I can setup a wpad if that will solve the problem. -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Wednesday, September 05, 2007 10:58 AM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Unix LOB Caching Where is the 10.0.0.x subnet; internal, external or "side DMZ"? Those are two separate problems. Disable caching is a simple as building a web caching rule that says "don't cache content from this site". Configuring IE to treat certain IP ranges as "internal", especially when IE is depending on the wpad script, is as simple as running the copylat script. How the FWC configured IE depends on the FWC options you select at ISA. If IE is pulling a valid wpad script, there is no need to worry about how the FWC configures IE, since the data it gets from ISA is correct. Do this at the ISA: 1. Open up the "Internal" network properties 2. Select the "Firewall Client" tab 3. Make sure *only* "automatically detect settings" is selected 4. Click the big "Apply" button if you changed anything 5. Get copylattowebproxy.js from isatools.org 6. Run it on the ISA (can be run repeatedly; doesn't do anything different) Do this at the test client: 1. open a cmd window 2. 'net stop fwcagent & net start fwcagent' (to force FWC policies refresh) 3. Open your browser and go to http://wpad/wpad.dat (save it on the desktop) 4. Open wpad.dat in notepad ..does the new wpad contain your selected address ranges? -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Amy Babinchak Sent: Wednesday, September 05, 2007 7:33 AM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Unix LOB Caching I want to disable caching for traffic destined for 10.0.0.2. I can do it in IE by adding it to the exception list, but the firewall client appears to be auto configuring IE and taking away my manual settings. What I would like is to change the autoconfiguration behavior and add in my 10.0.0.2 address so it will never be cached by IE or ISA. -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Wednesday, September 05, 2007 10:00 AM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Re: Unix LOB Caching What are you trying to solve: 1. using ISA for a local connection 2. disabling caching at ISA ? If #1, you can include the "local IPs" in the list with the use of a script I wrote. Go to isatools.org and get copylattowebproxy.js in the ISA 2004 section. Run this on your ISA 2004 server (not required for ISA 2006). ISA 200x allows you to disable caching through the use of destination-based cache rules (routing rules for ISA 2000). -----Original Message----- From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Amy Babinchak Sent: Tuesday, September 04, 2007 2:11 PM To: isapros@xxxxxxxxxxxxx Subject: [isapros] Unix LOB Caching I have a client with a LOB app that I need to exempt from caching. Internet Explorer apparently ignores IP address when determining whether the server is on the local network or not. KB: Internet Explorer Uses Proxy Server for Local IP Address Even if the "Bypass Proxy Server for Local Addresses" Option Is Turned On http://support.microsoft.com/kb/262981 Now, entering in the IP address into the Do not use proxy server for address beginning with: box does work but it gets removed periodically. I think the firewall client is doing this. If so, where in ISA can I add this IP address to the IE configuration it is pushing out? Here's where I've tried to configure it: Networks\Internal, Properties, Web Proxy tab. I added the address to the directly access list. Didn't work. Thanks, Amy All mail to and from this domain is GFI-scanned. All mail to and from this domain is GFI-scanned. All mail to and from this domain is GFI-scanned. All mail to and from this domain is GFI-scanned.