Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

"Failed Connection Attempt"

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> General >> "Failed Connection Attempt" Page: [1]
Login
Message << Older Topic   Newer Topic >>
"Failed Connection Attempt" - 17.Jul.2008 11:02:18 PM   
sander99

 

Posts: 13
Joined: 17.Jul.2008
Status: offline
I have some clients that do not specify a proxy server in the browser settings (all checkboxes are blank). These clients generate the "failed conenction attempt" error. As soon as I configure a proxy in the client's browser settings everything works. However, for the corporate laptop I would not like to change the browser setting.
It seems that the reason for my issue that none of the rules seems to apply.
Is there a solution? For some reason this setup used to work with the WinProxy product.
Post #: 1
RE: "Failed Connection Attempt" - 19.Jul.2008 11:44:25 AM   
tshinder

 

Posts: 47181
Joined: 10.Jan.2001
From: Texas
Status: online
Remember that the ISA firewall is a firewall, so you need to configure the firewall to allow the connections you want through the firewall.

What rules have you configured on the firewall to allow the outbound connections?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to sander99)
Post #: 2
RE: "Failed Connection Attempt" - 19.Jul.2008 12:08:08 PM   
sander99

 

Posts: 13
Joined: 17.Jul.2008
Status: offline
At this point I have a simple rule that allows all internal network traffic to go to the external network, through all ports, for all users (I'm not using authentication).

(in reply to tshinder)
Post #: 3
RE: "Failed Connection Attempt" - 20.Jul.2008 10:27:18 AM   
tshinder

 

Posts: 47181
Joined: 10.Jan.2001
From: Texas
Status: online
Are they using the firewall as their default gateway?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to sander99)
Post #: 4
RE: "Failed Connection Attempt" - 20.Jul.2008 10:47:06 AM   
sander99

 

Posts: 13
Joined: 17.Jul.2008
Status: offline
Yes, the default gateway is the IP of the box with ISA. The DHCP server (on the smae box) has a gateway entry that gets distributed.

(in reply to tshinder)
Post #: 5
RE: "Failed Connection Attempt" - 21.Jul.2008 9:36:02 AM   
tshinder

 

Posts: 47181
Joined: 10.Jan.2001
From: Texas
Status: online
How are the SecureNAT clients resolving names?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to sander99)
Post #: 6
RE: "Failed Connection Attempt" - 21.Jul.2008 7:12:34 PM   
sander99

 

Posts: 13
Joined: 17.Jul.2008
Status: offline
I have a DNS (Windoes) server on the same box.
To make things more complicated, one client works in the meantime again...

(in reply to tshinder)
Post #: 7
RE: "Failed Connection Attempt" - 22.Jul.2008 11:35:49 AM   
tshinder

 

Posts: 47181
Joined: 10.Jan.2001
From: Texas
Status: online
When you run nslookup on the clients, can they resolve Internet host names?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to sander99)
Post #: 8
RE: "Failed Connection Attempt" - 22.Jul.2008 11:57:24 AM   
sander99

 

Posts: 13
Joined: 17.Jul.2008
Status: offline
Yes, that part is working. The browse seems even to find the the ISA sever proxy as it serves up an ISA generated web page. I suspect that an ISA rule doesn't trigger, doesn't recognize the client.

(in reply to tshinder)
Post #: 9
RE: "Failed Connection Attempt" - 23.Jul.2008 8:50:43 AM   
tshinder

 

Posts: 47181
Joined: 10.Jan.2001
From: Texas
Status: online
Check the firewall logs on the firewall and see what is happening to the connection attempts through the firewall when the clients can't get past the firewall.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to sander99)
Post #: 10

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> General >> "Failed Connection Attempt" Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts