0

a few weeks ago we installed the new MS Forefront Firewall server. Since that day we have trouble in our network.

example: a user is trying to visit www.google.com -> his browser opens www.facebook.com

a user is trying to go to msdn.microsoft.com -> his browser tries to open msdn.facebook.com/... This happens irregular. Its not easy to reproduce it.

Some of our users have reported that this kind of error happens much more when they try to visit SSL secured web sites (https://).

We already tried to analyze the log files of forefront firewall and our MS DNS server. But no luck...

Do you have any idea?

0

2 Answers 2

2

Sounds like you have a Facebook related rule somewhat jacked up. Have you analyzed all of your firewall rules, specifically any dealing with facebook.com?

2
  • 2
    Especially a Web Chaining rule.
    – TristanK
    May 26, 2011 at 21:38
  • No there are no rules.
    – Ferhat
    May 27, 2011 at 10:57
1

If yuo are using forefront as a proxy the problem lies in the proxy ruies. Examing the rulesets and you should discover the issue.

1
  • As far as I know we are not using the proxy.
    – Ferhat
    May 27, 2011 at 10:59

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .