Welcome to ISAserver.org

Failed Connection Attempt

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> General >> Failed Connection Attempt

Page: [1]

Message

<< Older Topic Newer Topic >>

Failed Connection Attempt - 30.Jan.2008 3:15:46 AM

wshamroukh

Posts: 28
Joined: 16.Aug.2005
Status: offline

I have an ISA server 2006 Enterprise Edition installed on win2003 server... I created an access policy to allow HTTP and HTTPS from localhost/local network to External Network(internet)... when i browse for example to http://www.gmail.com the page will take time and then i will get an error like this:
Error Code 10060: Connection timeout

when i go to the logging page of ISA server, I see the action coloumn this message:
Failed Connection Attempt

So what is the problem here guys? can you please help me?

Post #: 1

Featured Links*

RE: Failed Connection Attempt - 30.Jan.2008 12:47:53 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Enable Web Proxy listener on the localhost network.

Make the browser on the ISA Firewall a Web Proxy client.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to wshamroukh)

Post #: 2

RE: Failed Connection Attempt - 31.Jan.2008 12:24:14 AM

wshamroukh

Posts: 28
Joined: 16.Aug.2005
Status: offline

Web Proxy on both localhost, internal networks is alreadt enabled on port 8080... I configured the browser on the ISA server to point itsself in proxy connection... but still most pages come out with the error
Error Code 10060: Connection timeout

and the logging page is logging the same action

any other suggestions??!?!

(in reply to tshinder)

Post #: 3

RE: Failed Connection Attempt - 31.Jan.2008 11:17:50 AM

gofishin

Posts: 21
Joined: 23.Apr.2007
Status: offline

Do you not need to add the Internal Network to the source networks on the web access rule you have created. Cheers

(in reply to wshamroukh)

Post #: 4

RE: Failed Connection Attempt - 31.Jan.2008 11:22:14 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Gofishing,

Yes, the source would be Internal and destination external.

Web proxy client configuration sets the browser to using the IP address on the Internal interface.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to gofishin)

Post #: 5

RE: Failed Connection Attempt - 3.Feb.2008 12:37:37 AM

wshamroukh

Posts: 28
Joined: 16.Aug.2005
Status: offline

let me tell u how my ISA server is connected to the network
my isa server is connected only to LAN, the other network interface is not connected.. the lAN interface's default gateway is a sonicwall firewall which is connected to router. my network looks like this:
Internet -------> router -------> sonicwall -------> ISA ------->LAN
has the network something to do with this issue.. i mean the error i get when i open a website and a get Failed Connection Attempt

thanx in advance

(in reply to tshinder)

Post #: 6

RE: Failed Connection Attempt - 3.Feb.2008 3:21:11 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

You need to configure the ISA Firewall as a back end firewall behind the sonicwall. In that way you get full functinoality and it will fix problems you're having right now.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to wshamroukh)

Post #: 7

RE: Failed Connection Attempt - 4.Feb.2008 5:47:57 AM

wshamroukh

Posts: 28
Joined: 16.Aug.2005
Status: offline

but what if i want to keep my network design as it is... is there another solution of moving the ISA server to the backend of my network?

(in reply to tshinder)

Post #: 8

RE: Failed Connection Attempt - 4.Feb.2008 7:11:51 AM

gofishin

Posts: 21
Joined: 23.Apr.2007
Status: offline

Sounds like it might be a routing issue - does the Sonicwall firewall perform the NAT translation? If so, then you need to set up a route Network Rule in ISA rather than a NAT rule. If not, then the reverse.

I have a checkpoint firewall at both sides of the ISA array in a back firewall config - the ISA server just bridges 2 DMZ's..

(in reply to wshamroukh)

Post #: 9

RE: Failed Connection Attempt - 4.Feb.2008 3:03:37 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

You will need to do some small reworking of your network to support the ISA Firewall, since it's the back end Firewall, you need to configure you clients behind the ISA Firewall to use it as their Internet gateway.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to gofishin)

Post #: 10

RE: Failed Connection Attempt - 7.Feb.2008 12:24:22 AM

wshamroukh

Posts: 28
Joined: 16.Aug.2005
Status: offline

i will take this into consideration.. thank you all for ur help

(in reply to tshinder)

Post #: 11

RE: Failed Connection Attempt - 11.Sep.2008 5:15:09 AM

wshamroukh

Posts: 28
Joined: 16.Aug.2005
Status: offline

i did what u all saying but still i am getting the same error.. have a look at this post
http://forums.isaserver.org/m_2002073482/mpage_1/key_/tm.htm#2002073482

(in reply to wshamroukh)

Post #: 12