Welcome to ISAserver.org

IE Proxy Exception list problem when using ISA Firewall Client

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Web Proxy] >> Web Proxy Client >> IE Proxy Exception list problem when using ISA Firewall Client

Page: [1]

Message

<< Older Topic Newer Topic >>

IE Proxy Exception list problem when using ISA Firewall... - 20.Dec.2007 7:22:55 AM

Norn Iron Leaf

Posts: 8
Joined: 11.May2007
Status: offline

We use the ISA proxy server to go to internet internally.

We also use group policy to control the IE settings.

We distribute some settings for IE by GPO.

For Example - We have configured IE to use proxy server, put a check on "bypass proxy server for local addresses" and added an internal web address with it's external FQDN into the exception list in order to bypass the proxy for local web sites.

I must use the exception list, because the option "bypass proxy server for local addresses" doesn't work when it is not in there.

At the same time, some computers in the local network contain ISA firewall client.

We would like to fully roll this out however the problem is beginning just here.

Exception list is cleared by the firewall client. So the internal request goes to the proxy also and times out as an error.

If the firewall client is not on the machone, the exception list stays there as in the GPO and can be accessed fine.

For myself, I have to use the firewall client and the FQDNs of the internal web sites.

But the hassle of typing each address in manually is a hassle.

In ISA Management Configuration, Networks:

I checked the Internal network and have all internally IP Addresses bypassing the proxy and have put in the FQDN for the offending address but it still tries going through the proxy and times out.

This is for our https over RPC to connect exchange and would cause major disruption to any user that works from home also.

Is there any way I can get around this issue?

Post #: 1

Featured Links*

RE: IE Proxy Exception list problem when using ISA Fire... - 20.Dec.2007 7:58:20 AM

elmajdal

Posts: 5074
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

quote:

I checked the Internal network and have all internally IP Addresses bypassing the proxy and have put in the FQDN for the offending address but it still tries going through the proxy and times out.

this is maybe because you are manually configuring the firewall client, and not detecting the ISA Server automatically.

check this : http://support.microsoft.com/default.aspx/kb/920715

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to Norn Iron Leaf)

Post #: 2

RE: IE Proxy Exception list problem when using ISA Fire... - 26.Dec.2007 11:45:49 AM

abqtech

Posts: 216
Joined: 9.Mar.2004
Status: offline

I think you'll probably need to keep your GPO that set's the proxy server with all your bypass hosts, and on the ISA Server goto:
Configuration -> Networks -> Firewall Client <TAB>
And select the following:
Enable Firewall client support for this network (and specify your ISA Server name or IP Address)
and then de-select all other options below Web browser configuration on the firewall client computer.

That way your GPO is responsible for setting Proxy information on your web browser, and the Firewall client will only pickup winsock traffic. Of course you're going to have to ensure that you've properly accounted for your domains in Domains <TAB> of the internal network, so that the winsock traffic for you internal network also bypasses ISA.

Please let me know if/how this suggestion works, as I have a few other suggestions that may be helpful for you.

(in reply to elmajdal)

Post #: 3

RE: IE Proxy Exception list problem when using ISA Fire... - 4.Jan.2008 5:38:38 AM

Norn Iron Leaf

Posts: 8
Joined: 11.May2007
Status: offline

quote:

ORIGINAL: abqtech

I think you'll probably need to keep your GPO that set's the proxy server with all your bypass hosts, and on the ISA Server goto:
Configuration -> Networks -> Firewall Client <TAB>
And select the following:
Enable Firewall client support for this network (and specify your ISA Server name or IP Address)
and then de-select all other options below Web browser configuration on the firewall client computer.

That way your GPO is responsible for setting Proxy information on your web browser, and the Firewall client will only pickup winsock traffic. Of course you're going to have to ensure that you've properly accounted for your domains in Domains <TAB> of the internal network, so that the winsock traffic for you internal network also bypasses ISA.

Please let me know if/how this suggestion works, as I have a few other suggestions that may be helpful for you.

Thanks a million abqtech, that suggestion works an absolute treat now

Also, thank you Tarik for your reply, you were correct that I had manually configured the firewall client but it wouldn't detect the server manually so I felt I had to do that.

(in reply to abqtech)

Post #: 4

RE: IE Proxy Exception list problem when using ISA Fire... - 10.Jan.2008 3:29:09 PM

abqtech

Posts: 216
Joined: 9.Mar.2004
Status: offline

Burn Stewart glad the suggestion worked, thanks for replying!

(in reply to Norn Iron Leaf)

Post #: 5

RE: IE Proxy Exception list problem when using ISA Fire... - 18.Jan.2008 8:51:58 AM

Norn Iron Leaf

Posts: 8
Joined: 11.May2007
Status: offline

quote:

ORIGINAL: abqtech

Burn Stewart glad the suggestion worked, thanks for replying!

Just thought I'd update this a bit I have done a bit of tweaking as it didn't allow me to view images in the Outlook client.

Therefore I ticked the script option and bingo stingo, the images appeared in the emails too.

Thanks again

(in reply to abqtech)

Post #: 6