Welcome to ISAserver.org

12202 ISA denied the specified URL when I've changed Content types when connect to https site

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> General >> 12202 ISA denied the specified URL when I've changed Content types when connect to https site

Page: [1]

Message

<< Older Topic Newer Topic >>

12202 ISA denied the specified URL when I've changed Co... - 30.May2008 4:22:17 AM

petpet

Posts: 4
Joined: 28.May2008
Status: offline

HI, I'm using isa 2006 with single network adapter. When I wanted to reach https site I've got thie error:
Error Code: 502 Proxy Error. The ISA Server denied the specified Uniform Resource Locator (URL). (12202)

Before I've selected some content types in the Content Type option. When I turn it back it works.
My rule are:

my_name - Allow - http,https,ftp - internal,localhost - internal -all users,text,application ...
defaul_rule ....

When I put another https rule before this one it works right:

https - Allow - https - internal,localhost - internal - all users
my_name - Allow - http,https,ftp - internal,localhost - internal - all users,text,application....
defaul_rule ....

Is this normal behaviour ?

I've found something here http://support.microsoft.com/kb/831140 but i don't know if this is same.

thx

pet

Post #: 1

Featured Links*

RE: 12202 ISA denied the specified URL when I've change... - 30.May2008 11:54:52 AM

tshinder

Posts: 47644
Joined: 10.Jan.2001
From: Texas
Status: offline

For SSL sites, the content type is hidden in the SSL tunnel, so the ISA firewall can't tell what it is. It default to secure and denies the connection.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to petpet)

Post #: 2

RE: 12202 ISA denied the specified URL when I've change... - 30.May2008 2:10:56 PM

ferrix

Posts: 375
Joined: 16.Mar.2005
Status: offline

Depending what you need to do, you could use ClearTunnel to expose the inside the SSL tunnel for ISA to inspect.

(in reply to tshinder)

Post #: 3

RE: 12202 ISA denied the specified URL when I've change... - 30.May2008 3:37:33 PM

tshinder

Posts: 47644
Joined: 10.Jan.2001
From: Texas
Status: offline

Good point!

I should have thought of that.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ferrix)

Post #: 4