Welcome to ISAserver.org

Error Code: 403 Forbidden

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Web Publishing >> Error Code: 403 Forbidden

Page: [1]

Message

<< Older Topic Newer Topic >>

Error Code: 403 Forbidden - 16.Aug.2006 3:02:28 PM

still.myself

Posts: 7
Joined: 15.Aug.2006
Status: offline

I have a SPS Server on LAN and want to publish on the ISA 2004.
ISA Server has TWO NIC { Internal and External which is connected to PIX Internal}
Internet----PIX------ISA----LAN
On the PIX I have already natted Public to Private IP addresses and opened the required ports.
Server Publishing Rule is also done.

I am able to ping the SPS Server from the ISA but when try to access the SPS Portal Url I get the
error::::::
"Technical Information (for support personnel)

Error Code: 403 Forbidden. The ISA Server denied the specified Uniform Resource Locator (URL). (12202)"

Can someone tell me what wrong is done here............???????????

Questions :-
<>What should be the Default Gateway of the SPS Server and DNS Server address { Should it be ISP DNS or local LAN DNS }

Please someone reply at the earliest.

Thank You

Post #: 1

Featured Links*

RE: Error Code: 403 Forbidden - 22.Aug.2006 2:47:14 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Still,

What is the IP addressing information on the ISA firewall's internal and external interface?

What is the IP addressing on the pix packet filter's internal and external interface?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to still.myself)

Post #: 2

RE: Error Code: 403 Forbidden - 23.Aug.2006 8:15:27 AM

still.myself

Posts: 7
Joined: 15.Aug.2006
Status: offline

Mr. T Shinde,

Please find the details

ISA server is behind PIX Firewall
I have published a Portal Server on ISA 2004 but I cannot access the portal from
the Internet. Portal Server is on the LAN
I have natted the Public to Private IP address on the PIX Firewall
Internet--PIX--ISA--LAN

PIX IP address
External IP address : 60.1.2.100 ( public IP )
Internal IP address : 10.10.1.1 ( This interface is directly connected to ISA )

ISA Server IP address
External IP address : 10.10.1.2
Internal IP address : 192.168.1.1
DG : 10.10.1.1

Web-Portal Server IP address
IP address : 192.168.1.100
DG : 10.10.1.2

I am able to ping the Portal from the ISA Server and vice-versa
If I plug my laptop running IIS with 10.10.1.3 which is natted to public IP ; I am able to access it from Internet, but with ISA 2004 I cannot....

Please help me ....................

(in reply to still.myself)

Post #: 3

RE: Error Code: 403 Forbidden - 23.Aug.2006 2:54:56 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Still,

OK, I will. but you have to say

"pix packet filter. ISA firewall"

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to still.myself)

Post #: 4

RE: Error Code: 403 Forbidden - 23.Aug.2006 8:04:40 PM

still.myself

Posts: 7
Joined: 15.Aug.2006
Status: offline

Thanks Mr. Tom.

I desperately need URGENT Help.

Can you please tell me what exactly should be my firewall policy and Network Rule

Please rely me at the earliest.

(in reply to tshinder)

Post #: 5

RE: Error Code: 403 Forbidden - 23.Aug.2006 8:18:39 PM

gja

Posts: 50
Joined: 15.Aug.2006
From: The Netherlands
Status: offline

What I see is that your DG of the portal server is set to 10.10.1.2, I hope this is a typo. It should be the internal address of the ISA.

Is it possible to access the portal through the ISA server when your laptop is in the 10.10.1.x segment?

Thanks,
Gijs

(in reply to still.myself)

Post #: 6

RE: Error Code: 403 Forbidden - 23.Aug.2006 8:28:07 PM

still.myself

Posts: 7
Joined: 15.Aug.2006
Status: offline

Yes the DG of the Portal is the internal IP address of ISA Server.

From ISA Server I am able to access the Portal.

No I am not able to access the portal when I put my laptop with 10.10.1.x segment ?

Can you plz tell me whts wrong I am doing .....

(in reply to still.myself)

Post #: 7

RE: Error Code: 403 Forbidden - 24.Aug.2006 2:05:45 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

"PIX packet filter"
"ISA firewall!"

OK, what are the EXACT details of your Web publishing rule? That means REAL names that are on the TO and PUBLIC NAME tabs.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to still.myself)

Post #: 8

RE: Error Code: 403 Forbidden - 25.Aug.2006 12:05:06 AM

still.myself

Posts: 7
Joined: 15.Aug.2006
Status: offline

Thanks TOM for the reply...

WEB publishing policy is as follows:-

ALLOW

From        : ANYWHERE
To            : { IP address of the Portal }
Traffic      : http and https
Listner       : External
               : http
               : BASIC
               : Required all users to authenticate
Public Name : Public IP address { This IP address is natted on PIX to the internal IP of Portal }

FYI : As of Today we dont have a domain to point to the public IP address for the Portal ; But we have a
plan to do that very soon....

One Question : If I want to uninstall ISA 2004 and reinstall again on the same box ; do I need to format the Box or just install is sufficient.

(in reply to tshinder)

Post #: 9