Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
12156 Error...Please help
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
12156 Error...Please help - 25.Oct.2006 1:18:55 PM
|
|
|
cmmosman
Posts: 1
Joined: 25.Oct.2006
Status: offline
|
I have recenlty installed ISA 2006 Std and have run into a problem access www.wellmark.com The error I recieve is:
12156 The HTTP message includes an unsupported header or an unsupported combination of headers
The ISA log shows:
Log Time Destination IP Destination Port Protocol Action Rule Client IP Client Username Source Network Destination Network HTTP Method URL Original Client IP Client Agent Authenticated Client Service Server Name Referring Server Destination Host Name Transport MIME Type Object Source Source Proxy Destination Proxy Bidirectional Client Host Name Filter Information Network Interface Raw IP Header Raw Payload GMT Log Time Source Port Processing Time Bytes Sent Bytes Received Result Code HTTP Status Code Cache Information Error Information Log Record Type Authentication Server
10/25/2006 12:08:03 PM 198.245.34.121 80 http Failed Connection Attempt Internet - Highly Trusted 192.168.5.41 anonymous Internal External GET http://198.245.34.121/ 0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 1.1.4322) Yes Proxy VIR-ISA-002 198.245.34.121 TCP Internet - - - Req ID: 05f2b865 - - - 10/25/2006 5:08:03 PM 0 485 2307 341 12156 The HTTP message includes an unsupported header or an unsupported combination of headers. 0x0 0x0 Web Proxy Filter
I have read the post:
http://forums.isaserver.org/ISA_Server_2006_messes_up_display/m_2002024483/tm.htm
and tried everything mentioned in it.
Is anyone else seeing this problem? I know ISA 2004 SP2 had a lot of problems with this but I have been unable to find much about ISA 2006
Please help,
Chris
|
|
|
|
RE: 12156 Error...Please help - 20.Dec.2006 4:01:32 PM
|
|
|
lazyman
Posts: 6
Joined: 4.Dec.2006
Status: offline
|
Hello, I too am having this problem with a site that some of our employees are trying to access. I am new to ISA and have been able to resolve most of our issues with the use of the forums here and microsoft's information. But this one seems to be unable to be resolved with fixes that should work.
Our setup is a windows server 2003 appliance from celestix running surfcontrol. I have a deny rule with user defined protocols for http & https set to all users. I then have a allow rule to the default http & https protocols set to our domain users. These rules force all traffic to authenticate so that is passes through surfcontrol to be filtered. I have then added individual rules for any sites that need to be accessed w/o authentication (such as MS updates, etc) using the user defined http & https protocols. It does not require authentication using the proxy settings on the internal network object nor does it have the web proxy filter bound to the default http protocol. I have tried tried to configure direct access to this site under the web browser tab on the internal network object by ip address, by url in multiple formats specified in different threads here. I have even added this site to our GPO settings where we set the proxy settings to bypass the proxy server for this site. I think that is everything we have done, if anyone has additional settings to try or can point to where I have possibly made an error it would be greatly appreciated. Thanks, Jeremy
also, for troubleshooting sake the site in question is...
http://egov.co.pg.md.us/lis/
edited to add:
I failed to mention before that no matter how the address was added to direct access it never seemed to take. The traffic still shows in the monitor and still registers a failed connection with the 12156 HTTP Status Code.
It was added in the following fomrats:
*/egov.co.pg.md.us/*
*/egov.co.pg.md.us/lis/*
http://egov.co.pg.md.us/lis/*
egov.co.pg.md.us
sorry.. just edited had switched the 'co' and the 'pg' in the address
< Message edited by lazyman -- 29.Dec.2006 10:44:21 AM >
|
|
|
|
RE: 12156 Error...Please help - 4.Jan.2007 11:55:42 AM
|
|
|
lazyman
Posts: 6
Joined: 4.Dec.2006
Status: offline
|
Update:
For anyone else who is experiencing this problem, maybe our solution will help. Turns out is was a configuration problem on our end... i know - surprise... We had a firewall policy where we were only allowing dns traffic out from our internal dns server for dns forwards. This was working for everything else but I guess caused issues with the direct access sites. We changed this rule to allow all clients access to dns unauthorized and we now have direct access to the site in question. Hopefully this will help anyone else struggling with the same issues we were having.
Jeremy
|
|
|
|
|
RE: 12156 Error...Please help - 7.Jan.2007 9:29:52 AM
|
|
|
tshinder
Posts: 47644
Joined: 10.Jan.2001
From: Texas
Status: online
|
Jeremy,
Interesting. For Direct Access sites, the clients will either need to be able to resolve the names themselves (if they're acting as SecureNAT clients) or they will need the ISA Firewall to resolve names on their behalf (if they're acting as Firewall clients).
Thanks!
Tom
_____________________________
Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/
GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
