[isapros] Re: Unix LOB Caching

  • From: "Greg Mulholland" <gmulholland@xxxxxxxxxxxx>
  • To: <isapros@xxxxxxxxxxxxx>
  • Date: Thu, 6 Sep 2007 08:10:41 +1000

LOL.. yeah ive had nothing but peace and quiet for the last two days, been
great!! :p  *switches to offline mode*

-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On
Behalf Of Amy Babinchak
Sent: Thursday, 6 September 2007 4:41 AM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: Unix LOB Caching

Just fitting in with your IM tag.

-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Steve Moffat
Sent: Wednesday, September 05, 2007 1:14 PM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: Unix LOB Caching

Why are my post's regarding this being ignored???


BWWAAAA!!!!

-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Amy Babinchak
Sent: Wednesday, September 05, 2007 1:29 PM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: Unix LOB Caching

I wouldn't have to care if the app were written better. 

This isn't about ISA caching. This is about the firewall client updating
the IE settings and removing my 10.0.0.2 exception to IE caching. 

-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Jason Jones
Sent: Wednesday, September 05, 2007 12:14 PM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: Unix LOB Caching

This seems to have got a bit confused...surely you just need the client
to bypass ISA for this particular address? If so the stuff from Jim
should do the trick. 

I don't see why you care about caching if ISA is being bypassed????

-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Amy Babinchak
Sent: 05 September 2007 17:01
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: Unix LOB Caching

Actually there is. I need to prevent ISA from overwriting the changes I
make to IE. If I add 10.0.0.2 to the exceptions list in IE. The firewall
client removes it.

-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Wednesday, September 05, 2007 11:46 AM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: Unix LOB Caching

If IE is caching the pages, *nothing* you can do at ISA will prevent
this.
if you don't have wpad support here, you should; it really makes things
so much easier (and centralized).

-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Amy Babinchak
Sent: Wednesday, September 05, 2007 8:50 AM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: Unix LOB Caching

I haven't implemented wpad at this location. The 10.0.0.x network is the
internal network. My probably is really that IE is caching the pages and
I can't prevent IE from doing that because the firewall client takes
over. I can setup a wpad if that will solve the problem.

-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Wednesday, September 05, 2007 10:58 AM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: Unix LOB Caching

Where is the 10.0.0.x subnet; internal, external or "side DMZ"?
Those are two separate problems.
Disable caching is a simple as building a web caching rule that says
"don't cache content from this site".
Configuring IE to treat certain IP ranges as "internal", especially when
IE is depending on the wpad script, is as simple as running the copylat
script.
How the FWC configured IE depends on the FWC options you select at ISA.

If IE is pulling a valid wpad script, there is no need to worry about
how the FWC configures IE, since the data it gets from ISA is correct.  
Do this at the ISA:
1. Open up the "Internal" network properties
2. Select the "Firewall Client" tab
3. Make sure *only* "automatically detect settings" is selected
4. Click the big "Apply" button if you changed anything
5. Get copylattowebproxy.js from isatools.org
6. Run it on the ISA (can be run repeatedly; doesn't do anything
different)

Do this at the test client:
1. open a cmd window
2. 'net stop fwcagent & net start fwcagent' (to force FWC policies
refresh)
3. Open your browser and go to http://wpad/wpad.dat (save it on the
desktop)
4. Open wpad.dat in notepad

..does the new wpad contain your selected address ranges?


-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Amy Babinchak
Sent: Wednesday, September 05, 2007 7:33 AM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: Unix LOB Caching

I want to disable caching for traffic destined for 10.0.0.2. I can do it
in IE by adding it to the exception list, but the firewall client
appears to be auto configuring IE and taking away my manual settings.
What I would like is to change the autoconfiguration behavior and add in
my 10.0.0.2 address so it will never be cached by IE or ISA.

-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Wednesday, September 05, 2007 10:00 AM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: Unix LOB Caching

What are you trying to solve:
1. using ISA for a local connection
2. disabling caching at ISA
?

If #1, you can include the "local IPs" in the list with the use of a
script I wrote.  Go to isatools.org and get copylattowebproxy.js in the
ISA 2004 section.  Run this on your ISA 2004 server (not required for
ISA 2006).

ISA 200x allows you to disable caching through the use of
destination-based cache rules (routing rules for ISA 2000).


-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Amy Babinchak
Sent: Tuesday, September 04, 2007 2:11 PM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Unix LOB Caching

I have a client with a LOB app that I need to exempt from caching.
Internet Explorer apparently ignores IP address when determining whether
the server is on the local network or not. KB: Internet Explorer Uses
Proxy Server for Local IP Address Even if the "Bypass Proxy Server for
Local Addresses" Option Is Turned On
http://support.microsoft.com/kb/262981
 

Now, entering in the IP address into the Do not use proxy server for
address beginning with: box does work but it gets removed periodically.
I think the firewall client is doing this. If so, where in ISA can I add
this IP address to the IE configuration it is pushing out?

Here's where I've tried to configure it:

Networks\Internal, Properties, Web Proxy tab. I added the address to the
directly access list. Didn't work.


Thanks,

Amy




All mail to and from this domain is GFI-scanned.






All mail to and from this domain is GFI-scanned.






All mail to and from this domain is GFI-scanned.
















Other related posts: