The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
1k views

Enabling cipher TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa) on Windows Server 2003+ISA 2006

I have been given a task to disable all "weak" ciphers/protocols on our very old ISA server based on Windows Server 2003. I have disabled all protocols but TLS1.0, and all ciphers but RC2/128, RC4/128 ...
0
votes
0answers
64 views

ISA Server 2006: no network protocols were successfully negotiated

I've upgraded one old and reliable ISA Server 2004 to 2006 (running on WS2003R2, nothing else runs on that server), it is an edge firewall and VPN provider. Later this year, it will be replaced by ...
0
votes
1answer
151 views

How do I determine where an SSL certificate is being served from?

I am having the same issue described in this question: IIS 7 Still Serving old SSL Certificate I have replaced an old SSL certificate with a new one and completely removed the old certificate from ...
0
votes
0answers
21 views

How to find out “UNKNOWN” site in ISA 2000

On the "Top Web Sites" section of my ISA 2000 Web Usage report, there is a site called "UNKNOWN" with 625 unique user. Is there any find out what this "UNKNOWN" site is?
0
votes
0answers
684 views

Outlook Anywhere with ISA 2006 autodiscover failing isa denying the url (exchange 2013)

we are trying to get outlook anywhere working using NTLM, at the moment im stuck on autodiscover failing on my ntlm rule. Rule Settings: From: Anywhere To: Internalmail.domain Traffic: HTTP/HTTPS ...
1
vote
0answers
177 views

Only ICMP traffic allowed inbound on ISA Server 2006

I have recently set up a connection to a remote site. The connection between the sites is done at the ISP level (ie, this is not a B2B tunnel on ISA). I'm fairly lightweight in the networking realm, ...
3
votes
0answers
88 views

ISA wrong translation of the schema URL included in WSDL

I have a WSDL behind ISA server. The WSDL includes a schema <xsd:include schemaLocation="myschema.xsd"/> However, when accessed through ISA, some implicit mapping changes the server name to the ...
1
vote
0answers
347 views

Site-to-Site VPN between Draytek Vigor and ISA 2006 Authentication Issue

I currently have a remote satellite office that has been configured as a site-to-site VPN. There is a Draytek Vigor 2830 router that is connected to an ISA 2006 server. I am having issues with ...
2
votes
1answer
4k views

Can't get past “pending Phase 2” on OpenSWAN <-> ISA Server IPSec VPN

The issue I´m having quite a hard time configuring OpenSWAN on my Linux server (Ubuntu 12.04) to connect to an ISA Server 2004 IPSec VPN. There is apparently something wrong in the configuration that ...
0
votes
1answer
670 views

Getting “403 - Forbidden: Access is denied” when hitting the URL without “www” prefix

I'm facing problem in my domain area. when i hit for example http://abc.com then I'm not able to access the site which are hosted on my domain. It gives the below error 403 - Forbidden: Access is ...
0
votes
1answer
175 views

Forefront TMG and IIS on one internet gateway server

I have two servers in a datacenter. One is IIS and another is SQL Server machine. I'd like to install Forefront on a gateway server to make use of "smart" web site publishing and VPN that come with ...
0
votes
1answer
478 views

Juniper SSG Firewall - TMG 2010 publishing SSL website issue?

I have an ASP.NET application working in HTTPS (SSL). This is working well in my local computer and Amazon AWS (production environment). But when I host this application in office (for testing) some ...
0
votes
1answer
4k views

'The RPC server is unavailable' when converting a physical ISA/Forefront TMG machine to virtual (P2V) in SCVMM

When I try to convert a physical ISA/TMG machine to virtual using SCVMM, i keep getting an error in the Collect machine configuration step ('Scan Now' button): VMM is unable to complete the ...
1
vote
0answers
118 views

ISA SSL Could not create SSL/TLS secure channel

I'm working on solution that uploads large amount of data through web service to the server. Between Client and Web Service implemented ISA server. Client use certificate to authenticate on ISA ...
1
vote
2answers
659 views

ISA or IIS removing HTTP Authorization header when published

I am developing web api by using Asp.Net WebApi (RC) and passing user credentials via http "Authorization" header. I am getting trouble on receiving "Authorization" http header on server side. I am ...
0
votes
2answers
1k views

Block port 25 on SBS 2003; allow Exchange

I know this is a noob question, but I haven't been able to find an answer on exactly what I'm looking for. My mail server was recently blacklisted due to being infected with cutwail. Part of the ...
1
vote
1answer
1k views

ISA 2006 switch to kerberos causes authentication problems for some users

In our large corporate environment we have 4 ISA 2006 servers set up. The users (WinXP IE8) are configured with an automatic proxy configuration script. Recently, the PAC was modified to return FQDN ...
1
vote
1answer
3k views

WDS DHCP same server on Windows Server 2008

I have been struggling with a problem on my Windows Server 2008 for the past 4 - 5 hours and cannot figure out whats wrong. I have tried pretty much everything that I found on google and all the links ...
0
votes
1answer
508 views

Allow VPN to external site through ISA 2006 firewall

I'v followed the instrutions from here, but still it doesn't connect. (while the VPN setup does work when I try via my home network) http://support.microsoft.com/?scid=kb;en-us;838245 When I try ...
0
votes
1answer
1k views

ISA 2006 , two listeners on the same port with different certificates and methods of authentifications

I couldn't find an clear answer to the question : -Does ISA 2006 support more than 1 listener on the same port (HTTPS /443 , with the same certificate / and different method of authentication - one ...
0
votes
1answer
74 views

IMAP traffic bandwidth usage

I want to find out how much of my bandwidth is related to email downloads. We use Google Apps for our email and have around 60 iMAC users donwloading email via IMAP. Our firewall is an ISA Server ...
1
vote
0answers
176 views

Rewrite cookies for ISA: add Secure

We've developed a web application. One of our customers decided to run it over HTTP internally and use an ISA server to function as a reverse proxy. The access to the ISA server from the outside world ...
0
votes
1answer
356 views

Isa server 2006 proxy chaining : Why my Isa don't use proxy after one connection loose?

I have a ISA server 2006 and all my HTTP request are forward to another proxy. I have configure ISA for that, when the proxy is unreachable, ISA does the request directly. My problem is that when the ...
0
votes
1answer
351 views

Isa server 2006 proxy chaining : How to chain only HTTP traffic?

I am trying to configure ISA server 2006 to chain all HTTP request to another proxy (which propose compression services). But this proxy don't support HTTPS traffic. For the moment, I use the web ...
1
vote
1answer
129 views

Mirror traffic from x network card to VMware player

I have 2 Network cards and I am trying to monitor traffic going through one of them (the internet facing one), so that I can see what sites are visited the most and how much data is being used. I'v ...
0
votes
1answer
142 views

Two factor mechanism to differentiate lan from wan side users

I'm in a situation where a customer of mine would like 2-factor authentication (e.g. log in and receive e-mail with access URL) according to the following rules: If the users is on the LAN, do not ...
1
vote
0answers
284 views

Reading ISA logs files with awstats

I keep getting dropped or currupt records but no new ones. Phase 1 : First bypass old records, searching new record... Searching new records from beginning of log file... Jumped lines in file: 0 ...
0
votes
1answer
2k views

How to configure apache to basic authentication or allow when ntlm while proxying?

Here is my study case: browser ---> apache proxy ---> ISA server ---> internet The ISA server requires an authentication. The issue is to allow HTTPS through the two proxies. A configuration that ...
0
votes
1answer
658 views

Replacing ISA firewall, on SBS 2003, with hardware firewall and what to do with the redundant NIC

We currently have a SBS 2003 with 2 NICs - one LAN side, one WAN. The SBS has an ISA Firewall. We are replacing this server with new hardware and SBS 2011, in the near future. As part of this change, ...
-2
votes
1answer
171 views

Get top 50 websites visited by traffic [closed]

I'm logging both web proxy and firewall traffic under the logging tab. How would I get a top 50 list of websites that use the most traffic. I need the website addresses, not just the IP address as an ...
1
vote
2answers
941 views

Publishing multiple web servers with reverse proxy on localhost, retaining original client IP and hostname

I have been using ISA on Windows Server 2003 to publish multiple web servers hosted on the same machine. Setup as follows: ISA HTTP/S listener bound to 127.0.0.1 + external IP IIS bound to 127.0.0.2 ...
2
votes
3answers
500 views

How to send authentication credentials to a published web site without prepending the AD domain name?

ISA Server 2006 publishing a web site; ISA does forms-based authentication against an Active Directory domain (which ISA itself is joined to), then, if the user is authorized, ISA sends the user's ...
1
vote
0answers
80 views

ISA Block List not working

I have created a new Access Rule with Action: Deny Protocols: All From: internal, localhost, vpn To: URL Block List Users: Employee Users (and then of course I have specific employee ...
1
vote
2answers
1k views

Is there a way to make SQL Browser service work behind ISA firewall? What would be the proper config if there is?

I have an issue with ISA Server and SQL Server... In SQL Server Management Studio there can be done a query for server instances to network servers. This is done by broadcasting to SQL Browser ...
4
votes
1answer
548 views

LAN segregation for security reasons using VLAN

I was asked to segregate the testing environment in our network to improve our security. Our structure includes: 1 switch Dell Power Connect 3448 1 switch Dell Power Connect 2748 A few 5 ports Star ...
1
vote
2answers
236 views

Dedicated Server, Multiple VMs on the back, HyperV Up Front… Where do i put TMG?

As a follow up question to How Do i host multiple servers on HyperV with only a few public IP Addresses I am now trying to figure out where to put the ISA/TMG Server? Should it be virtualized, ...
2
votes
2answers
762 views

ISA 2006 does not allow traffic using FQDN

I experience an issue accessing Tomcat running over SSL with MS ISA 2006 in front. When I access using the internal IP address (e.g. https://10.0.42.136/...) everything works fine and ...
2
votes
3answers
889 views

Can arbitrary email addresses be stored in AD userPrincipalName?

I have a web app that is front-ended by ISA, natively authenticating against AD. All users currently log on with sAMAccountName. I would like to allow users to provide a personal email address and be ...
1
vote
4answers
11k views

How to block SKYPE when it's using port 80 & 443?

How to block SKYPE when it's using port 80 & 443 in a network. ( better if I can do it by using ISA 2006 and without disabling web) I know if users can't install skype they wont be able to use it. ...
1
vote
2answers
969 views

Forefront 0xc0040017

I recently began to receive a huge (600 thousand to 2 million per day) number of FWX_E_TCP_NOT_SYN_PACKET_DROPPED, 0xc0040017 entries in my Forefront TMG logs. If the top 3 source IPs are any ...
0
votes
1answer
61 views

ISA server 2004

I have a problem with setting up ISA 2004 on Windows SBS 2003. The problem is after setting up the deny and access rules: I added the group of users that I wanted to deny. It works but for everyone ...
1
vote
1answer
293 views

ISA 2006 - Can it route HTTP traffic to both standard and non-standard ports on the same physical server?

I am working with an administrator at my company. We recently added MS ISA 2006. I do not have access to the server, so my question is more theory based. Is it possible to setup ISA to route HTTP ...
0
votes
1answer
140 views

ISA Net connection goes down periodically

Thanks for taking the time to help out. I have been working at the IT Dept of a company for the past 6 months, thus there are a lot of things I don't know and am not sure about. Yet I can verify/seek ...
2
votes
1answer
2k views

IP address conflict with MAC address 00:00:00:00:00:00

One of our Windows 2003 R2 ISA firewall servers recently had a 1-hour spell of intermittent connectivity to our Internet WAN connection, which was fixed after disabling then re-enabling the network ...
1
vote
1answer
511 views

789 connecting Forefront VPN

I am receiving event 789 when connecting to my Forefront TMG VPN server from windows 7 clients via L2TP. This does not occur on XP systems. I've run through the debugging at ...
0
votes
1answer
411 views

Publishing VisualSVN via Apache mod_proxy

We are having issues publishing a Windows based VisualSVN Server via an Appache mod_proxy. Company IS policy does not allow SSL connections to be initiated from external networks and enter into the ...
1
vote
1answer
366 views

Threat Management Gateway can't access share on NAS

My network looks like this: DC - SERVER01 - Windows Server 2008 SBS TMG - TMG01 - Windows Server R2 Standard NAS - DATASTORE - Cisco NSS6000 All machines and devices are joined to the ...
4
votes
1answer
840 views

AuthResend query string being appended to URL

One of our clients is having an issue where POSTBACK seems to be broken when they connect to our Sharepoint application. When they navigate to a URL, an erroneous query string gets appended to the ...
0
votes
1answer
287 views

Publishing an internal mail server to mobile clients using ISA Server 2004

First, let's start with a picture to illustrate my problem... Naturally, IP addresses have been obfuscated for security reasons. I have an internal LAN, 192.168.1.x behind ISA Server 2004. On this ...
0
votes
1answer
1k views

Bypass external proxy in web chaining for one URL

We have an ISA in a school that has to pass all traffic to the local authority's proxy to get to the internet. We do that in the web chaining rule. The local authority have created a website on their ...