I'm having a problem in accessing a Java-based website (as we use the web proxy service normally) and after reading several postings on this wonderful forum, I am trying to install the firewall client to access this website.
Unfortunately, the firewall client installs ok and connects to the ISA server ok but the browser, IE5.5 does NOT talk to the internet.
Can someone help please?
We don't use DHCP and use the Workgroup (standalone server) setting instead of Domains on the ISA Server and i can't seem to use DNS to configure for automatic firewall client discovery. Is this the problem??
The ISA Server is already set up as Integrated - supporting firewall and web caching.
There are 2 sites which we can't access for which you need to be subscriber - one is www.delphion.com and the tool we're trying to use is the Citation link. I've already contacted their technical support who say that as long as ports 80 and 443 are open there should be no problem. As i was having problems still using the web proxy service, I searched this forum for anyone else having similar problems and it transpired that a firewall client should be able to resolve the problem in accessing the Java-based web page.
to debug that issue, make sure the client is configured as a web proxy and firewall client. Next, start with an open protocol (all IP) and site&content (all destinations/content) rule. Run a test session and analyse the ISA logs.
To get the most information out of the logfiles, I strongly recommend to enable the logging of all fields. In the MMC, go to the node Monitoring Configuration, then select Logs. In the details pane, right-click the applicable service and then click Properties. On the Fields tab, click Select All.
>>and the second question?
is the lan interface from the isa server in the same SUBNET?<<
The subnet setting for the lan card on the ISA Server is the same as the client setting i.e 255.0.0.0
>>do the clients have a gateway to the isa server?<<
The clients only use the web proxy service at present using port 8080 on IE5 >>do the clients have a public dns? (for testing)<< The clients cannot access any public dns -can only be done from the ISA Server.
>>can you ping or ftp on a client to an outside server? (ftp.microsoft.com?)<<
Can't ping from any of the clients - only from the ISA Server.
Q2 was : can pc's browse.. not at all or not to the 2 websites?
how are your site and content rules set up? how are your protocol rules set up? how is your proxy authentication and http redir setup? are there any configuration alerts? is packet filtering marked? is ip routing marked?
and for testing, can you try this:
set gateway on pc to ip lan interface isa. set public dns on pc. use firewall client.
can the client resolve a name/browse/access ssl sites?