Welcome to ISAserver.org

"The Parameter is Incorrect"?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> DMZ >> "The Parameter is Incorrect"?

Page: [1]

Message

<< Older Topic Newer Topic >>

"The Parameter is Incorrect"? - 29.Apr.2005 9:32:00 PM

cybersmith

Posts: 69
Joined: 21.Jul.2003
From: Michigan
Status: offline

I'm running two ISA servers B2B with a DMZ setup. There are some pages which the machines in the secured network cannot access which CAN be accessed perfectly fine from within the DMZ. An example of such a URL is:

http://www.state.mi.us/dmb/apps/oop/purchasing_user.asp?frm=itbs&cmd=list&cat_id=-1

I have researched for months now without a solution. I've even contacted the webmaster of the hosting site and they have told me that they can't help.

I found this article by Microsoft, but it didn't apply to my situation and I tried it anyways with no success.
http://support.microsoft.com/kb/185035/EN-US/

I have my secured network setup so that all the browsers (IE6) use the internal proxy IP of my internal firewall. I have no issues for most sites, but some just will not load. I find that if I add the domain to the Proxy Settings/Exceptions list in my network settings, the error changes to a DNS error. But this seems strange since I can always reach the pages from the DMZ. The only reference to this http request in the logs that I can find is the following, and it only applies when I add the domain to the proxy exceptions list:

2005-04-29 19:21:15 10.0.0.2 167.240.254.176 Tcp 3156 80 BLOCKED 10.0.0.2
2005-04-29 19:21:21 10.0.0.2 167.240.254.176 Tcp 3156 80 BLOCKED 10.0.0.2
2005-04-29 19:22:03 10.0.0.2 167.240.254.176 Tcp 3179 80 BLOCKED 10.0.0.2
2005-04-29 19:22:09 10.0.0.2 167.240.254.176 Tcp 3179 80 BLOCKED 10.0.0.2
2005-04-29 19:22:26 10.0.0.2 167.240.254.176 Tcp 3186 80 BLOCKED 10.0.0.2
2005-04-29 19:22:32 10.0.0.2 167.240.254.176 Tcp 3186 80 BLOCKED 10.0.0.2

Any ideas???

Post #: 1

Featured Links*

RE: "The Parameter is Incorrect"? - 29.Apr.2005 9:56:00 PM

cybersmith

Posts: 69
Joined: 21.Jul.2003
From: Michigan
Status: offline

I found a posted topic in the ISA2k4 forums that referenced http filter signatures. I couldn't find this in ISA2k, but I did see the "Web Filter" under Web Filters. I disabled that and the problem went away! I checked my External firewall and this filter is enabled. So why would the internal one cause this problem?? And what security features am I going to loose by leaving this disabled??

(in reply to cybersmith)

Post #: 2

RE: "The Parameter is Incorrect"? - 1.May2005 12:05:00 AM

Rickymag

Posts: 509
Joined: 26.Nov.2003
From: SA
Status: offline

Good day,

IF the filter is on, on one of the FW's then you should be fine.

HTH

RM

(in reply to cybersmith)

Post #: 3

RE: "The Parameter is Incorrect"? - 2.May2005 3:38:00 PM

cybersmith

Posts: 69
Joined: 21.Jul.2003
From: Michigan
Status: offline

At least I know I'm not loosing any security features then. Thanks!

But why would this happen if it were enabled on both firewalls? And what features does this filter offer?

(in reply to cybersmith)

Post #: 4

RE: "The Parameter is Incorrect"? - 10.May2005 2:59:00 PM

Rickymag

Posts: 509
Joined: 26.Nov.2003
From: SA
Status: offline

Filters offer intelegent application layer filtering and malicious code detection etc.

you may find on the rules there may be some discrepency or the rule on the external firewall can not get an authentication request though view the logs for more info.

regards

RM

under monitoring live logs are great for this type of problem [Smile]