Welcome to ISAserver.org

Failed Connection Attempt 0x8 0x9

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Cache] >> Web Proxy client >> Failed Connection Attempt 0x8 0x9

Page: [1]

Message

<< Older Topic Newer Topic >>

Failed Connection Attempt 0x8 0x9 - 12.May2007 1:02:07 PM

mharald

Posts: 4
Joined: 12.May2007
Status: offline

Hi guys,

I have the following problem:

We have blocked direct Internet Access for 1 desktop (there is a block rule on a 3rd party firewall--CiscoPIX--which is behind the ISA Server) and it is having problems accessing a download site for a Microsoft Application.

We need to block all direct internet access from all desktops but we're waiting to resolve this issue!

We are in Argentina (Greetings!!) and Internet is in Canada

Here is the topology:

Internet - Canada
CiscoPIX (firewall blocking direct internet access)- Canada
MPLS (eVPN from AT&T)- Argentina <-> Canada
2 ISA STD 2004 (with NLB on Internal Interface- using Failover)
desktops

The ISA External Interfaces are allowed on the CiscoPIX

We have been working on this for several days and have gathered the following log information:

10.198.228.21 131.107.115.27 443 Failed Connection Attempt SSL-tunnel Sites to Bypass Authentication(This rule allows anonymous access) Proxy anonymous Internal External update.crm.msn.com:443 0x8 TCP Internet 0x0 Web Proxy Filter

10.198.228.21 65.54.179.193 443 Failed Connection Attempt SSL-tunnel Sites to Bypass Authentication(This rule allows anonymous access) Proxy anonymous Internal External loginnet.passport.com:443 0x9 TCP Internet 0x0 Web Proxy Filter

When the desktop has direct internet access, I get the same log entries, but the Software then tries to download the content directly from the Internet and succeeds.

Both ISA 2004 STD Servers have the 916106 patch and SP2 installed

Any help is highly appreciated!!

_____________________________

Harald Milz