Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Failed Connection Attempt

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> General >> Failed Connection Attempt Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
Failed Connection Attempt - 18.Aug.2008 3:27:48 AM   
mrjahnara

 

Posts: 54
Joined: 12.Aug.2008
From: Dubai
Status: offline
Dear All,

      Please find below the error , ISA server is keep on logging whenever outlook configured in the Client Pc's are trying to access External Exchange Server.

Failed Connection Attempt

Log Type: Web proxy(Forward)
Status     :  995 The I/O operation has been aborted because of either a thread exit or an application request.

Note: Even there is an error in the ISA logs, Outlook is still working  but taking long time to send or receive mail.

Please any body help me to solve this problem.

Regards

Abdul Rahuman.M

Post #: 1
RE: Failed Connection Attempt - 18.Aug.2008 9:13:16 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Are you using RPC/HTTP on the Outlook clients?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mrjahnara)
Post #: 2
RE: Failed Connection Attempt - 18.Aug.2008 9:16:17 AM   
mrjahnara

 

Posts: 54
Joined: 12.Aug.2008
From: Dubai
Status: offline
Yes Outlook is configured to access https://mail.getgroup.com Exchange server.


Regards

Abdul Rahuman.M

(in reply to tshinder)
Post #: 3
RE: Failed Connection Attempt - 18.Aug.2008 9:55:54 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Are you requiring authentication for the rule that allows the outbound connection for the Outlook RPC/HTTP client?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mrjahnara)
Post #: 4
RE: Failed Connection Attempt - 18.Aug.2008 10:04:32 AM   
mrjahnara

 

Posts: 54
Joined: 12.Aug.2008
From: Dubai
Status: offline
How do i check the authentication in the rule? I Simply created a default rule to allow all the outbound traffic to all the users.


Regards

Abdul Rahuman.M



(in reply to tshinder)
Post #: 5
RE: Failed Connection Attempt - 19.Aug.2008 8:18:48 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
The default rule denies all connections. How did you create a "default rule"?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mrjahnara)
Post #: 6
RE: Failed Connection Attempt - 19.Aug.2008 10:17:45 AM   
mrjahnara

 

Posts: 54
Joined: 12.Aug.2008
From: Dubai
Status: offline
I have created a new rule to allow all outbound traffic from internal to external.

New Rule --->All Outbound traffic---> Internal Network---->External Network -----> All Users.



Regards

Abdul Rahuman.M

(in reply to tshinder)
Post #: 7
RE: Failed Connection Attempt - 21.Aug.2008 8:42:42 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Did that work?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mrjahnara)
Post #: 8
RE: Failed Connection Attempt - 21.Aug.2008 8:46:56 AM   
mrjahnara

 

Posts: 54
Joined: 12.Aug.2008
From: Dubai
Status: offline
No. Even i allow all the outbound traffic, the error message is appearing.



Thanks

Abdul Rahuman.M

(in reply to tshinder)
Post #: 9
RE: Failed Connection Attempt - 21.Aug.2008 9:35:51 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Are they using the firewall as their default gateway?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mrjahnara)
Post #: 10
RE: Failed Connection Attempt - 21.Aug.2008 10:08:28 AM   
mrjahnara

 

Posts: 54
Joined: 12.Aug.2008
From: Dubai
Status: offline
Their default gateway is the router which is directly connected to the internet.

Please note , the ISA firewall client is installed in all the client machines.



Thanks and Regards

Abdul Rahuman.M

(in reply to tshinder)
Post #: 11
RE: Failed Connection Attempt - 22.Aug.2008 9:25:53 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Is the ISA firewall and all machines connecting to the firewall members of the same domain?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mrjahnara)
Post #: 12
RE: Failed Connection Attempt - 22.Aug.2008 10:25:10 AM   
mrjahnara

 

Posts: 54
Joined: 12.Aug.2008
From: Dubai
Status: offline
Yes , all the machines including ISA server are in the same Domain.



Regards

Abdul Rahuman.M

(in reply to tshinder)
Post #: 13
RE: Failed Connection Attempt - 24.Aug.2008 12:36:52 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Are the Firewall clients successfully connecting to the ISA firewall? Is the Firewall cliient configuration updating the Web Proxy client configuration correctly?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mrjahnara)
Post #: 14
RE: Failed Connection Attempt - 25.Aug.2008 4:11:16 AM   
mrjahnara

 

Posts: 54
Joined: 12.Aug.2008
From: Dubai
Status: offline
          All the Firewall clients are working well , all the users are browsing fine. The error is occuring in the server only, when anyone browse the htpps site and working on outlook since it is configured to access exchange server through https.
 
 
 
Regards

Abdul Rahuman.M

(in reply to tshinder)
Post #: 15
RE: Failed Connection Attempt - 25.Aug.2008 9:38:27 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
The problem occurs for all SSL connections?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mrjahnara)
Post #: 16
RE: Failed Connection Attempt - 26.Aug.2008 1:58:26 AM   
mrjahnara

 

Posts: 54
Joined: 12.Aug.2008
From: Dubai
Status: offline
Yes , you are correct.


Regards

Abdul Rahuman.M

(in reply to tshinder)
Post #: 17
RE: Failed Connection Attempt - 26.Aug.2008 8:38:58 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
OK, that sounds like the rule you created to allow outbond HTTPS connections has a path limitation or maybe you set it to restrict to certain MIME types. Also, if you set an HTTP Security Filter setting for the SSL rule, it might block connections too, since the firewall can't see inside the SSL tunnel without using ClearTunnel.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mrjahnara)
Post #: 18
RE: Failed Connection Attempt - 26.Aug.2008 10:10:35 AM   
mrjahnara

 

Posts: 54
Joined: 12.Aug.2008
From: Dubai
Status: offline
Thanks for your kind response again.

I havent block any outbound traffic. I have created only one rule which is to allow all the outbound traffic to external network from internal.




Regards

Abdul Rahuman.M

(in reply to tshinder)
Post #: 19
RE: Failed Connection Attempt - 28.Aug.2008 8:15:01 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
I'm out of ideas. Maybe you can find somebody local to look at your firewall configuration. I'm sure it's something simple that somebody knowledgeable about the firewall will be able to easily fix.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to mrjahnara)
Post #: 20

Page:   [1] 2   next >   >> << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> General >> Failed Connection Attempt Page: [1] 2   next >   >>
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts