Welcome to ISAserver.org

Firewall client not picking up proxy exceptions

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Firewall Client >> Firewall client not picking up proxy exceptions

Page: [1]

Message

<< Older Topic Newer Topic >>

Firewall client not picking up proxy exceptions - 25.Mar.2008 7:42:15 AM

AdminUser123

Posts: 1
Joined: 25.Mar.2008
Status: offline

There are a number of users within our organisation who are using the Microsoft ISA Firewall Client. When the client is enabled it is not possible to access sites in the proxy exceptions list. As soon as the client is disabled the same sites can be accessed again.

One site that needs to be accessed by internal users is our website however this can not be done through the ISA server so a proxy exception is required. It is possible to access the site by using its external IP address when the Firewall Client is enabled.

We have 2 load balanced ISA2004 servers. I have tried configuring the firewall client using the cluster IP address for the servers as well as each of the individual servers, the client will automatically detect 1 of the 2 ISA servers. I have also tried using the "Enable web browser automatic configuration" option but none of the client side configuraitons have made any difference.

On the ISA server I have defined the following for the internal network:

Web Browser:
Enabled "Bypass proxy for webservers in this network."
Enabled "Directly access computers specified in the domain tab."
"Directly access these servers or domains." - Contains a list of all the proxy exceptions including the webserver's DNS name and IP address.
"If ISA server is unavailable use this backup route to connect to the Internet." 2nd ISA server in cluster defined.
Firewall Client:
"Enable firewall client support for this network." - Cluster IP address defined.
I have experimented with the other options (use automatic configuration script & web proxy) in different combinations and none seem to work.
Could anyone offer any advice on what the problem or solution may be. I will be happy to provide more information if required.

Many thanks,

Ben.

if(typeof(dstb)!= "undefined"){ dstb();}

Post #: 1

Featured Links*

RE: Firewall client not picking up proxy exceptions - 24.Apr.2008 7:31:14 AM

holteend

Posts: 5
Joined: 13.Mar.2006
Status: offline

Ben, I have also noticed this behaviour in the ISA client. Can you try adding the whole subnets to the Proxy Exceptions list, rather than the individual addresses? This works for us.

Regards, Derrick

(in reply to AdminUser123)

Post #: 2

RE: Firewall client not picking up proxy exceptions - 24.Apr.2008 7:46:06 AM

elmajdal

Posts: 5028
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

check this article : http://support.microsoft.com/kb/920715

use this format for direct access lists : *.example.com/*

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to AdminUser123)

Post #: 3