Welcome to ISAserver.org

Content groups - Audio & Video problems

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Firewall Client >> Content groups - Audio & Video problems

Page: [1]

Message

<< Older Topic Newer Topic >>

Content groups - Audio & Video problems - 27.Apr.2004 2:17:00 PM

Danee

Posts: 18
Joined: 22.Mar.2004
Status: offline

Hi All,

I'm trying to recreate some settings I use on my ISA 2000 box regarding Audio & Video but experience some problems:

1. When the media player (WMP 9) is set to use the 2004 proxy an error is displayed: Windows Media Player cannot open the file (0xc00d11d2), when I use the 2000 proxy a logonbox is displayed and after supplying the right credentials the stream is played. Seems like 2004 sends an authentication request which isn't accepted by WMP 9
When I use the Firewall client the stream is played, the logged user is correct... but without the domain info!
When I disable the Firewall client WMP 9 displayes: Cannot connect to server (0xC00D1198)

2. Then I set up a rule:
Deny - http - internal - external - all users, Audio, Video
And have a redirect to a warningpage on our intranet-site about the use of audio & video on our network.
When browsing to a media stream the warning page gets nicely displayed, so that's ok, but browsing to other sites shows some eratic behaviour! At some sites pictures are not displayed (.gif files) and other sites (even when I clicked Preview Post when entering this message!) the warning page is displayed! (which doesn't happen when using the ISA 2000 box!) I've tried it with all protocols, and even different usergroups, but can't get it to work correctly!

Anybody any ideas??

Cheers,

Danee

Post #: 1

Featured Links*

RE: Content groups - Audio & Video problems - 29.Apr.2004 1:36:00 AM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Danee,

I don't have problems with WMP9. However, I always configure machines as both Web Proxy and Firewall clients to provide optimal performance and security. What happens when you configure the machines as both firewall and web proxy clients?

Thanks!
Tom

(in reply to Danee)

Post #: 2

RE: Content groups - Audio & Video problems - 29.Apr.2004 11:17:00 AM

Danee

Posts: 18
Joined: 22.Mar.2004
Status: offline

Hi Tom, thanks for the reply!

Here's the situation:
If I make a rule that allows HTTP from internal to external for all users I have no problem, routing works, FW client works and proxy works. Which is normal behaviour imo, since no authentication is asked (in the monitor the traffic shows up as anonymous.)

If I change the rule to a user group to which I added my domain account the following happens:
1 - routing stops working, as expected
2 - using the FW client works as expected, the displayed user in the monitor however does not contain a domain part
3 - using the proxy (with or without the FW client enabled) doesn't work but produces an error. The displayed user in the monitor is in the form of domain\user.

If I change my proxy settings to my ISA 2000 I get a logon screen in which I can logon both with my username and domain\username.

To this point I haven't even come to trying to block audio/video, I want to get this working first.

Reading back my other posts in the firewall client part of the forum I begin to suspect there is something wrong with my firewall client setup, I'll uninstall it first and revert back to the 2000 version and see how this works.

cheers,

Danee

(in reply to Danee)

Post #: 3

RE: Content groups - Audio & Video problems - 2.May2004 5:06:00 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Danee,

Great! Let us know what happens when you fix up your Firewall Client setup.

Thanks!
Tom

(in reply to Danee)

Post #: 4

RE: Content groups - Audio & Video problems - 5.May2004 1:22:00 PM

Danee

Posts: 18
Joined: 22.Mar.2004
Status: offline

Hi Tom,

Removed the Firewall Client and rennstalled it... Didn't help.

Anyone any ideas for me??

Cheers,

Danee

(in reply to Danee)

Post #: 5

RE: Content groups - Audio & Video problems - 5.May2004 8:10:00 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Danee,

What Access Rules do you have on the firewall?

Is the firewall a member of the user domain?

Are the users logging into the domain?

Thanks!
Tom

(in reply to Danee)

Post #: 6

RE: Content groups - Audio & Video problems - 6.May2004 10:14:00 AM

Danee

Posts: 18
Joined: 22.Mar.2004
Status: offline

Hi Tom,

The relevant rules (in the most basic form) are:

1 - Block Radio - Deny - Http - Internal - External - All Users;Audio;Video
2 - Allow all - allow - All protocols - Internal - External - All Users

The ISA is a member of the same (NT4) domain as the clients logon to.

If the first rule has 'All users' as a condition, and allow as the action, I can see in the monitor that the rule allows the traffic... but it also allows certion .gif images. If I change it back to deny those images (seems random) are blocked. If I also add the redirect the browser gets redirected to my internal warning page about Audio/Video streams, so that works great but it should ONLY be triggered bij Audio/Video streams.

I've tried changing the rules in may different ways, but can't get it to work as it does on my ISA 2000.

What I want to accieve is that 'normal' browsing is allowed, but as soon as an audio or video stream is opened a warning page is displayed.

Thanks,

Danee

(in reply to Danee)

Post #: 7

RE: Content groups - Audio & Video problems - 7.May2004 12:02:00 PM