The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
47 views

ISA Server 2006: no network protocols were successfully negotiated

I've upgraded one old and reliable ISA Server 2004 to 2006 (running on WS2003R2, nothing else runs on that server), it is an edge firewall and VPN provider. Later this year, it will be replaced by ...
0
votes
1answer
95 views

How do I determine where an SSL certificate is being served from?

I am having the same issue described in this question: IIS 7 Still Serving old SSL Certificate I have replaced an old SSL certificate with a new one and completely removed the old certificate from ...
0
votes
0answers
19 views

How to find out “UNKNOWN” site in ISA 2000

On the "Top Web Sites" section of my ISA 2000 Web Usage report, there is a site called "UNKNOWN" with 625 unique user. Is there any find out what this "UNKNOWN" site is?
0
votes
0answers
47 views

collabnet svn ssl server behind isa 2004 firewall

I've setup an ISA 2004 firewall with a linux server running collabnet svn using ssl -- everything is working fine but when I setup URL path mapping everything breaks for example anything that contains ...
1
vote
0answers
150 views

Only ICMP traffic allowed inbound on ISA Server 2006

I have recently set up a connection to a remote site. The connection between the sites is done at the ISP level (ie, this is not a B2B tunnel on ISA). I'm fairly lightweight in the networking realm, ...
3
votes
0answers
81 views

ISA wrong translation of the schema URL included in WSDL

I have a WSDL behind ISA server. The WSDL includes a schema <xsd:include schemaLocation="myschema.xsd"/> However, when accessed through ISA, some implicit mapping changes the server name to the ...
2
votes
0answers
3k views

Can't get past “pending Phase 2” on OpenSWAN <-> ISA Server IPSec VPN

The issue I´m having quite a hard time configuring OpenSWAN on my Linux server (Ubuntu 12.04) to connect to an ISA Server 2004 IPSec VPN. There is apparently something wrong in the configuration that ...
0
votes
1answer
581 views

Getting “403 - Forbidden: Access is denied” when hitting the URL without “www” prefix

I'm facing problem in my domain area. when i hit for example http://abc.com then I'm not able to access the site which are hosted on my domain. It gives the below error 403 - Forbidden: Access is ...
0
votes
1answer
161 views

Forefront TMG and IIS on one internet gateway server

I have two servers in a datacenter. One is IIS and another is SQL Server machine. I'd like to install Forefront on a gateway server to make use of "smart" web site publishing and VPN that come with ...
0
votes
1answer
453 views

Juniper SSG Firewall - TMG 2010 publishing SSL website issue?

I have an ASP.NET application working in HTTPS (SSL). This is working well in my local computer and Amazon AWS (production environment). But when I host this application in office (for testing) some ...
0
votes
1answer
3k views

'The RPC server is unavailable' when converting a physical ISA/Forefront TMG machine to virtual (P2V) in SCVMM

When I try to convert a physical ISA/TMG machine to virtual using SCVMM, i keep getting an error in the Collect machine configuration step ('Scan Now' button): VMM is unable to complete the ...
1
vote
0answers
116 views

ISA SSL Could not create SSL/TLS secure channel

I'm working on solution that uploads large amount of data through web service to the server. Between Client and Web Service implemented ISA server. Client use certificate to authenticate on ISA ...
1
vote
2answers
580 views

ISA or IIS removing HTTP Authorization header when published

I am developing web api by using Asp.Net WebApi (RC) and passing user credentials via http "Authorization" header. I am getting trouble on receiving "Authorization" http header on server side. I am ...
0
votes
2answers
1k views

Block port 25 on SBS 2003; allow Exchange

I know this is a noob question, but I haven't been able to find an answer on exactly what I'm looking for. My mail server was recently blacklisted due to being infected with cutwail. Part of the ...
1
vote
1answer
1k views

ISA 2006 switch to kerberos causes authentication problems for some users

In our large corporate environment we have 4 ISA 2006 servers set up. The users (WinXP IE8) are configured with an automatic proxy configuration script. Recently, the PAC was modified to return FQDN ...
1
vote
1answer
3k views

WDS DHCP same server on Windows Server 2008

I have been struggling with a problem on my Windows Server 2008 for the past 4 - 5 hours and cannot figure out whats wrong. I have tried pretty much everything that I found on google and all the links ...
0
votes
1answer
1k views

ISA 2006 , two listeners on the same port with different certificates and methods of authentifications

I couldn't find an clear answer to the question : -Does ISA 2006 support more than 1 listener on the same port (HTTPS /443 , with the same certificate / and different method of authentication - one ...
1
vote
0answers
174 views

Rewrite cookies for ISA: add Secure

We've developed a web application. One of our customers decided to run it over HTTP internally and use an ISA server to function as a reverse proxy. The access to the ISA server from the outside world ...
0
votes
1answer
316 views

Isa server 2006 proxy chaining : Why my Isa don't use proxy after one connection loose?

I have a ISA server 2006 and all my HTTP request are forward to another proxy. I have configure ISA for that, when the proxy is unreachable, ISA does the request directly. My problem is that when the ...
0
votes
1answer
320 views

Isa server 2006 proxy chaining : How to chain only HTTP traffic?

I am trying to configure ISA server 2006 to chain all HTTP request to another proxy (which propose compression services). But this proxy don't support HTTPS traffic. For the moment, I use the web ...
0
votes
1answer
140 views

Two factor mechanism to differentiate lan from wan side users

I'm in a situation where a customer of mine would like 2-factor authentication (e.g. log in and receive e-mail with access URL) according to the following rules: If the users is on the LAN, do not ...
0
votes
1answer
589 views

Replacing ISA firewall, on SBS 2003, with hardware firewall and what to do with the redundant NIC

We currently have a SBS 2003 with 2 NICs - one LAN side, one WAN. The SBS has an ISA Firewall. We are replacing this server with new hardware and SBS 2011, in the near future. As part of this change, ...
1
vote
2answers
866 views

Publishing multiple web servers with reverse proxy on localhost, retaining original client IP and hostname

I have been using ISA on Windows Server 2003 to publish multiple web servers hosted on the same machine. Setup as follows: ISA HTTP/S listener bound to 127.0.0.1 + external IP IIS bound to 127.0.0.2 ...
1
vote
0answers
79 views

ISA Block List not working

I have created a new Access Rule with Action: Deny Protocols: All From: internal, localhost, vpn To: URL Block List Users: Employee Users (and then of course I have specific employee ...
1
vote
2answers
1k views

Is there a way to make SQL Browser service work behind ISA firewall? What would be the proper config if there is?

I have an issue with ISA Server and SQL Server... In SQL Server Management Studio there can be done a query for server instances to network servers. This is done by broadcasting to SQL Browser ...
1
vote
2answers
229 views

Dedicated Server, Multiple VMs on the back, HyperV Up Front… Where do i put TMG?

As a follow up question to How Do i host multiple servers on HyperV with only a few public IP Addresses I am now trying to figure out where to put the ISA/TMG Server? Should it be virtualized, ...
2
votes
2answers
710 views

ISA 2006 does not allow traffic using FQDN

I experience an issue accessing Tomcat running over SSL with MS ISA 2006 in front. When I access using the internal IP address (e.g. https://10.0.42.136/...) everything works fine and ...
2
votes
3answers
819 views

Can arbitrary email addresses be stored in AD userPrincipalName?

I have a web app that is front-ended by ISA, natively authenticating against AD. All users currently log on with sAMAccountName. I would like to allow users to provide a personal email address and be ...
1
vote
4answers
10k views

How to block SKYPE when it's using port 80 & 443?

How to block SKYPE when it's using port 80 & 443 in a network. ( better if I can do it by using ISA 2006 and without disabling web) I know if users can't install skype they wont be able to use it. ...
0
votes
1answer
61 views

ISA server 2004

I have a problem with setting up ISA 2004 on Windows SBS 2003. The problem is after setting up the deny and access rules: I added the group of users that I wanted to deny. It works but for everyone ...
0
votes
1answer
139 views

ISA Net connection goes down periodically

Thanks for taking the time to help out. I have been working at the IT Dept of a company for the past 6 months, thus there are a lot of things I don't know and am not sure about. Yet I can verify/seek ...
1
vote
1answer
476 views

789 connecting Forefront VPN

I am receiving event 789 when connecting to my Forefront TMG VPN server from windows 7 clients via L2TP. This does not occur on XP systems. I've run through the debugging at ...
1
vote
1answer
349 views

Threat Management Gateway can't access share on NAS

My network looks like this: DC - SERVER01 - Windows Server 2008 SBS TMG - TMG01 - Windows Server R2 Standard NAS - DATASTORE - Cisco NSS6000 All machines and devices are joined to the ...
4
votes
1answer
804 views

AuthResend query string being appended to URL

One of our clients is having an issue where POSTBACK seems to be broken when they connect to our Sharepoint application. When they navigate to a URL, an erroneous query string gets appended to the ...
0
votes
1answer
1k views

Bypass external proxy in web chaining for one URL

We have an ISA in a school that has to pass all traffic to the local authority's proxy to get to the internet. We do that in the web chaining rule. The local authority have created a website on their ...
2
votes
2answers
2k views

TMG/ISA FWX_E_NETWORK_RULES_DENIED

I've got three disparit networks that all terminate at a TMG machine. I am trying to communicate between two of these networks, but the TMG firewall keeps dropping the connection as ...
2
votes
1answer
816 views

ISA Proxy - HTTPS Traffic

We have an ISA 2006 setup for our organisations proxy. It's been working well for the last few months just blocking everything except a few allowed web site and web applications. We need to allow ...
2
votes
3answers
1k views

Are there other application layer firewalls like Microsoft TMG (ISA) that do advanced http rules?

Since the old days, ISA and now TMG have had several great features that I often want to deploy to my customers because of the enhanced functionality and security, but often the cost of an additinal ...
0
votes
1answer
282 views

Forefront TMG - URL Overrides - how long does it take for them to come into play?

Adding a URL to a category seems seems to take an age, somewhere along the lines of 3 to 4 hours. Is this normal behaviour? Could someone tell me what is the default length of time that it takes ...
0
votes
1answer
277 views

ISA Server VSS Writer encountered a failure while backing up

On our ISA system the following warning is logged: Event Type: Warning Event Source: Microsoft ISA Server Storage Event ID: 21326 Description: The ISA Server VSS Writer encountered a failure while ...
1
vote
1answer
120 views

ISA and IIS logs

In our network there is an ISA (2000) webproxy. It forwards requests to various IIS servers further down. Each request results in a log entry on the ISA server and another log entry on the IIS server ...
0
votes
1answer
269 views

ISA 2006 Log Analyzer

We have been using Internet Access Monitor in the past to analyze our ISA logs. This is now playing up (inconsistent data when comparing to logs from within ISA Server Management. Any suggestions ...
0
votes
2answers
155 views

Tutorials for making ISA and Cache Servers?

i am looking to create a LAN network i want to make an ISA and cache server for better performance and security i am looking easy to understand and complete tutorials, help required and also ...
1
vote
2answers
2k views

IIS not listening on port 80

We have server 2003 and ISA 2004 with IIS 6 on same machnie. Everything worked well till yesterday, when we try to make some new rule in ISA..but this is a long story... Unfortunatelly something ...
0
votes
1answer
350 views

isa 2004 - banned site rule cause slow internet

We have windows server 2003 with isa 2004. Our clients uses internet with proxy. We have two isa rule: order name action protocolls from/listener to ...
2
votes
3answers
231 views

network topology including many services

I know this is yet another question on how to setup network but I hope you are not bored of such questions yet. The site is also an office, so it includes windows dc, windows ad, exchange, sql, file ...
0
votes
1answer
42 views

What are the different network schemas for ISA server?

Where can I read more about network schemas for ISA server? Maybe this is the wrong name as I'm translating from Spanish. For example, there's the perimetal and the back-to-front, etc. Thanks for ...
0
votes
1answer
237 views

SBS 2003 VPN suddenly fails with 691 after reboot

After allowing two seemingly inoccuous Windows Updates (KB2388210 and KB982632) our production Windows Small Business Server 2003 (SP2) required a reboot. After the reboot all VPN connections failed ...
0
votes
1answer
4k views

Open source alternative to ISA/Forefront TMG?

I'm using Forefront TMG to do web server publishing & SSO and very little else. Are there any open source alternatives that can satisfy all (or at least most) of these features: Web server ...
1
vote
1answer
1k views

Client VPN works, but only from certain locations (ISA/TMG)

I've done something very simple. Or so I thought... I have setup VPN client access in TMG (or ISA, they're pretty alike). I created a group called VPN in AD, added that as allowed VPN users in TMG, ...