Welcome to ISAserver.org

Firewall Client and Auto Discovery setting for web browsers problem

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Firewall Client >> Firewall Client and Auto Discovery setting for web browsers problem

Page: [1]

Message

<< Older Topic Newer Topic >>

Firewall Client and Auto Discovery setting for web brow... - 28.May2008 9:31:16 AM

dranizz

Posts: 23
Joined: 5.May2008
Status: offline

I recently changed my ISA server for the 2006 version. I have changed the machine so the name of the server changed also.

I have configured the DHCP Scope to point the 252 option on the new server and also changed the DNS WPAD address on my DNS server.

I have clients who have the Firewall Client installed and some don't. So here's the trouble...

Some users with FIREWALL CLIENT did found ot the new Proxy server automaticcaly, but some did not...

And all user's computer who don't have FIREWALL CLIENT installed, did not found out the new proxy settings on internet EXPLORER

One behavior that i get on the firewall client is the green arrow.

It's not there, but when I use the fwctool pingserver command, the green arrow appear and disapear after 5 sec.

What could it be?

Post #: 1

Featured Links*

RE: Firewall Client and Auto Discovery setting for web ... - 28.May2008 12:47:58 PM

pwindell

Posts: 751
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

I recently changed my ISA server for the 2006 version. I have changed the machine so the name of the server changed also.

I have configured the DHCP Scope to point the 252 option on the new server and also changed the DNS WPAD address on my DNS server.

If you created a WPAD entry in DNS using a CNAME,...then create the entry in DHCP using the CNAME (wpad.myaddomain.local),...then you would never have to change the DHCP Option ever again. If the proxy changes you simply change the A-Record that the CNAME points to.

I have seen the autodetection fail on DHCP Clients for no appearant reason. On the problem machines you need to open a command prompt and force a refresh with:

c:\> IPConfig /release
c:\> IPConfig /renew

If that does not get it going, then you may have to call Product Support Services. That is what I had to do on this issue when I had simialr problems.

_____________________________

Phillip Windell
www.wandtv.com

(in reply to dranizz)

Post #: 2

RE: Firewall Client and Auto Discovery setting for web ... - 28.May2008 1:26:24 PM

dranizz

Posts: 23
Joined: 5.May2008
Status: offline

Is there a way to see the DHCP options received by the client?

Example: DHCP Option 252

Thanks

(in reply to pwindell)

Post #: 3

RE: Firewall Client and Auto Discovery setting for web ... - 28.May2008 3:41:32 PM

pwindell

Posts: 751
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

Hmmm,...can't remember. Maybe someone else here will know.

_____________________________

Phillip Windell
www.wandtv.com

(in reply to dranizz)

Post #: 4

RE: Firewall Client and Auto Discovery setting for web ... - 28.May2008 3:42:53 PM

HePa

Posts: 135
Joined: 9.May2008
From: Sweden, Gothenburg
Status: offline

I would go through this Troubleshooting guide for WPAD berfore making the call:
http://technet.microsoft.com/en-us/library/cc302643.aspx

_____________________________

HePa

(in reply to dranizz)

Post #: 5

RE: Firewall Client and Auto Discovery setting for web ... - 28.May2008 4:02:32 PM

pwindell

Posts: 751
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

Thanks Henrik,
I'll have to keep a copy of that link myself.

_____________________________

Phillip Windell
www.wandtv.com

(in reply to HePa)

Post #: 6

RE: Firewall Client and Auto Discovery setting for web ... - 29.May2008 8:03:17 AM

dranizz

Posts: 23
Joined: 5.May2008
Status: offline

Ok thanks.

Ill check that out!

(in reply to pwindell)

Post #: 7

RE: Firewall Client and Auto Discovery setting for web ... - 29.May2008 10:32:34 AM

dranizz

Posts: 23
Joined: 5.May2008
Status: offline

I guess it's a cache problem with Internet Explorer.

In the link your provided, they give a solution with the Autoproxutil command, but I can't find it.

Any ideas?

(in reply to dranizz)

Post #: 8

RE: Firewall Client and Auto Discovery setting for web ... - 2.Jun.2008 2:05:02 AM

HePa

Posts: 135
Joined: 9.May2008
From: Sweden, Gothenburg
Status: offline

No problems Philip!
The link is great and gives good tips of troubleshooting.

_____________________________

HePa

(in reply to dranizz)

Post #: 9

RE: Firewall Client and Auto Discovery setting for web ... - 2.Jun.2008 2:06:31 AM

HePa

Posts: 135
Joined: 9.May2008
From: Sweden, Gothenburg
Status: offline

Oh, missed to reply on you post darnizz*SORRY*
Google on "Troubleshooting Automatic Detection" and the select the fist hit and you should be transferd to the site (http://technet.microsoft.com/en-us/library/cc302643.aspx). Try it out and come back if it doesnt work.

_____________________________

HePa

(in reply to HePa)

Post #: 10

RE: Firewall Client and Auto Discovery setting for web ... - 3.Jun.2008 11:22:09 AM

dranizz

Posts: 23
Joined: 5.May2008
Status: offline

Alright checking that out!

But, what i've done seems to work, it's just a PITA to do.

You have to go into internet explorer options, uncheck proxy settings, exit IE, restart it again and re-check the proxy settings.

But, hey, it works.

Only thing left, is the green arrow thing that i dont understand

(in reply to HePa)

Post #: 11

RE: Firewall Client and Auto Discovery setting for web ... - 3.Jun.2008 3:01:34 PM

pwindell

Posts: 751
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

If you are asking about the green arrow in the firewall client icon, it just means there is activity via the firewall client.

A red "x" means it has failed to detect the ISA or has fail to authenticate the user.

A "plain" icon means it connected to the ISA and has authenticated the user but is currently not doing anything.

_____________________________

Phillip Windell
www.wandtv.com

(in reply to dranizz)

Post #: 12