• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA 2006 fails to load some web sites

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> General >> ISA 2006 fails to load some web sites Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA 2006 fails to load some web sites - 11.Aug.2007 2:09:19 AM   
hunglikethor

 

Posts: 112
Joined: 12.Oct.2006
Status: offline
In particular www.wsj.com, msdn.microsoft.com (login to premium content) and www.mapquest.com

There may be others, but these are the most notable for me.  The error obtained is

Network Access Message: The page cannot be displayed

Explanation: There is a problem with the page you are trying to reach and it cannot be displayed.

Try the following: Refresh page: Search for the page again by clicking the Refresh button. The timeout may have occurred due to Internet congestion. Check spelling: Check that you typed the Web page address correctly. The address may have been mistyped. Access from a link: If there is a link to the page you are looking for, try accessing the page from that link. If you are still not able to view the requested page, try contacting your administrator or Helpdesk.



Technical Information (for support personnel) Error Code: 502 Proxy Error. The request was rejected by the HTTP filter. Contact your ISA Server administrator. (12217) IP Address: 192.168.1.105 Date: 8/11/2007 6:03:57 AM [GMT] Server: isagate.mmicmanhomenet.local Source: web filter The Wall Street Journal site usually loads after teh second or third time.  This error is present on IE as well as Firefox.

Might this be a compression issue?
Post #: 1
RE: ISA 2006 fails to load some web sites - 14.Aug.2007 11:20:32 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Are the clients configured as Web Proxy clients and are they configured to use HTTP 1.1 through proxy connections?

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to hunglikethor)
Post #: 2
RE: ISA 2006 fails to load some web sites - 20.Aug.2007 10:11:02 PM   
hunglikethor

 

Posts: 112
Joined: 12.Oct.2006
Status: offline
Yes, the browser clients are configured properly.  The error paged received has the following info:

Network Access Message: The page cannot be displayed

Explanation: There is a problem with the page you are trying to reach and it cannot be displayed.

Try the following: Refresh page: Search for the page again by clicking the Refresh button. The timeout may have occurred due to Internet congestion. Check spelling: Check that you typed the Web page address correctly. The address may have been mistyped. Access from a link: If there is a link to the page you are looking for, try accessing the page from that link. If you are still not able to view the requested page, try contacting your administrator or Helpdesk.



Technical Information (for support personnel) Error Code: 502 Proxy Error. The request was rejected by the HTTP filter. Contact your ISA Server administrator. (12217) IP Address: 192.168.1.105 Date: 8/21/2007 2:06:34 AM [GMT] Server: isagate.mmicmanhomenet.local Source: web filter Clicking on the page link 2-3 times (in this case my home page of wsj.com) usually does the trick.  However this doe snot work with msdn.microsoft.com login.  Same error page appears, and I have to switch to another proxy (Linux/Squid) to login to my MSDN site.  Same error page appears.

(in reply to tshinder)
Post #: 3
RE: ISA 2006 fails to load some web sites - 21.Aug.2007 11:53:15 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Check the HTTP Security Filter configuration -- it should say in the log file what caused the page to be denied.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to hunglikethor)
Post #: 4
RE: ISA 2006 fails to load some web sites - 23.Aug.2007 12:01:43 PM   
hunglikethor

 

Posts: 112
Joined: 12.Oct.2006
Status: offline
BTW, Is there a site that lists the error codes and their meaning?

(in reply to tshinder)
Post #: 5
RE: ISA 2006 fails to load some web sites - 23.Aug.2007 1:46:52 PM   
hunglikethor

 

Posts: 112
Joined: 12.Oct.2006
Status: offline
Pardon the dumb question but where is the log file for the HTTP filter and how do I access it?

(in reply to hunglikethor)
Post #: 6
RE: ISA 2006 fails to load some web sites - 25.Aug.2007 11:39:04 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
You need to enable that column in the log viewer.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to hunglikethor)
Post #: 7
RE: ISA 2006 fails to load some web sites - 3.Sep.2007 2:18:37 AM   
hunglikethor

 

Posts: 112
Joined: 12.Oct.2006
Status: offline
And where might I find the log viewer?

I am a UNIX/Juniper/Cisco guru;  I have little expereince in how ISA is setup.  It is not intuitively obvious where the log viewer is.  I have found the log files, which are useless I presume without the log viewer.

I suppose I could use SQL commands, as the files are in a SQL database.

(in reply to tshinder)
Post #: 8
RE: ISA 2006 fails to load some web sites - 3.Sep.2007 2:27:16 AM   
hunglikethor

 

Posts: 112
Joined: 12.Oct.2006
Status: offline
If the log view you are referring to is the "Logging" sub-tab in the Monitoring tab that is not really what I am look for.  I want to review prior loggs not generate new ones.

(in reply to hunglikethor)
Post #: 9
RE: ISA 2006 fails to load some web sites; logging of d... - 3.Sep.2007 3:47:29 AM   
hunglikethor

 

Posts: 112
Joined: 12.Oct.2006
Status: offline
After thinking and poking around I was able to grab the "Denied Connections" to the MSDN web site.  Sorry for the garbled result, but I copied and pasted.  It appears the failure is due to authorization issues:

Original Client IP    Client Agent    Authenticated Client    Service    Server Name    Referring Server    Destination Host Name    Transport    MIME Type    Object Source    Source Proxy    Destination Proxy    Bidirectional    Client Host Name    Filter Information    Network Interface    Raw IP Header    Raw Payload    GMT Log Time    Source Port    Processing Time    Bytes Sent    Bytes Received    Result Code    HTTP Status Code    Cache Information    Error Information    Log Record Type    Authentication Server    Log Time    Destination IP    Destination Port    Protocol    Action    Rule    Client IP    Client Username    Source Network    Destination Network    HTTP Method    URL
0.0.0.0    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; WOW64; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; InfoPath.2; Media Ce...    Yes    Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn2.microsoft.com    TCP    -                        Req ID: 00f3e00a; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:47:09 AM    0    1    4703    1581        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:47:09 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/js.aspx?l=en-us&i=/&ct=msdn&cl=mtpsloginstatus;mtps_pagemetadata;mtps_surveylauncherctrl;userrecognitionflyout;removeanonymousprofile;instrumentedlink;localemanagementflyout;templatedflyout;quicklinksflyout;tabstrip;toolbar;eyebrowmenubar;rssskinner;bulletedlist;webmetrix;aploggingctrl;mtps_footerctrl;webtrends;leftnavigation;mtpsmanageprofile;bpglobal;header;videoscroller;mtpslocaleview;basicheadlines;mtpsmsnadscontrol;bphome;hideeyebrow;contentinclude;containerbox;altpage;bperrors;simplesearch;showratings;ktablecontrol;codesnippet;collapsiblearea;rolloverimage;currencypickerctrl;pricingctrl;memberlink;mtpscontentplaceholder;bumperpage
0.0.0.0    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; WOW64; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; InfoPath.2; Media Ce...    Yes    Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn2.microsoft.com    TCP    -                        Req ID: 00f3e009; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:47:09 AM    0    1    4703    1582        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:47:09 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/css.aspx?l=en-us&i=/&ct=msdn&cl=mtpsloginstatus;mtps_pagemetadata;mtps_surveylauncherctrl;userrecognitionflyout;removeanonymousprofile;instrumentedlink;localemanagementflyout;templatedflyout;quicklinksflyout;tabstrip;toolbar;eyebrowmenubar;rssskinner;bulletedlist;webmetrix;aploggingctrl;mtps_footerctrl;webtrends;leftnavigation;mtpsmanageprofile;bpglobal;header;videoscroller;mtpslocaleview;basicheadlines;mtpsmsnadscontrol;bphome;hideeyebrow;contentinclude;containerbox;altpage;bperrors;simplesearch;showratings;ktablecontrol;codesnippet;collapsiblearea;rolloverimage;currencypickerctrl;pricingctrl;memberlink;mtpscontentplaceholder;bumperpage
0.0.0.0    Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; WOW64; SLCC1; .NET CLR 2.0.50727; .NET CLR 3.0.04506; InfoPath.2; Media Ce...    Yes    Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn2.microsoft.com    TCP    -                        Req ID: 00f3e008; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:47:09 AM    0    1    4703    994        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x800    Web Proxy Filter    -    9/2/2007 11:47:09 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/msdn/MasterPages/TobagoPageType/TobagoPageType_master.css
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/subscriptions/default.aspx    msdn2.microsoft.com    TCP    -                        Req ID: 00f3dfb5; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:46:43 AM    0    1    4703    1145        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:46:43 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/en-us/subscriptions/bb496521.headline_glyph(en-us,MSDN.10).gif
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    -    msdn2.microsoft.com    TCP    -                        Req ID: 00f3df97; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:46:42 AM    0    1    4703    1119        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:46:42 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/subscriptions/default.aspx
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn2.microsoft.com    TCP    -                        Req ID: 00f3df7d; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:46:31 AM    0    1    4703    1271        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:46:31 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/msdn/Controls/webtrends/msdnwtnv.js
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn2.microsoft.com    TCP    -                        Req ID: 00f3df79; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:46:31 AM    0    16    4703    1299        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x800    Web Proxy Filter    -    9/2/2007 11:46:31 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/msdn/controls/videoscroller/en-us/attention.gif
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    http://msdn2.microsoft.com/css.aspx?l=en-us&i=/&ct=msdn&cl=mtpsloginstatus;mtps_pagemetadata;mtps_surveylauncherctrl;userrecognitionflyout;localemanagementflyout;templatedflyout;quicklinksflyout;tabstrip;instrumentedlink;toolbar;eyebrowmenubar;leftnavi...    msdn2.microsoft.com    TCP    -                        Req ID: 00f3df76; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:46:31 AM    0    1    4703    1967        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x800    Web Proxy Filter    -    9/2/2007 11:46:31 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/msdn/controls/leftnavigation/en-us/LeftNavBullet.gif
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    http://msdn2.microsoft.com/msdn/MasterPages/TobagoPageType/TobagoPageType_master.css    msdn2.microsoft.com    TCP    -                        Req ID: 00f3df74; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:46:31 AM    0    1    4703    1333        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:46:31 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/msdn/MasterPages/TobagoPageType/bullet.gif
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn2.microsoft.com    TCP    -                        Req ID: 00f3df73; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:46:31 AM    0    1    4703    1300        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:46:31 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/en-us/ms348103.headline_glyph(en-us,MSDN.10).gif
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn.microsoft.com    TCP    -                        Req ID: 00f3df70; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:46:31 AM    0    1    4703    1119        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:46:31 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn.microsoft.com/nodehomes/graphics/rss_button.gif
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    http://msdn2.microsoft.com/css.aspx?l=en-us&i=/&ct=msdn&cl=mtpsloginstatus;mtps_pagemetadata;mtps_surveylauncherctrl;userrecognitionflyout;localemanagementflyout;templatedflyout;quicklinksflyout;tabstrip;instrumentedlink;toolbar;eyebrowmenubar;leftnavi...    msdn2.microsoft.com    TCP    -                        Req ID: 00f3df72; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:46:31 AM    0    1    4703    1940        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x800    Web Proxy Filter    -    9/2/2007 11:46:31 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/msdn/images/msdn_logo.gif
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    http://msdn2.microsoft.com/css.aspx?l=en-us&i=/&ct=msdn&cl=mtpsloginstatus;mtps_pagemetadata;mtps_surveylauncherctrl;userrecognitionflyout;localemanagementflyout;templatedflyout;quicklinksflyout;tabstrip;instrumentedlink;toolbar;eyebrowmenubar;leftnavi...    msdn2.microsoft.com    TCP    -                        Req ID: 00f3df6f; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:46:31 AM    0    1    4703    1965        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x800    Web Proxy Filter    -    9/2/2007 11:46:31 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/msdn/Controls/TabStrip/en-US/search_down_arrow.gif
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn2.microsoft.com    TCP    -                        Req ID: 00f3df4b; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:46:30 AM    0    1    4703    1265        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:46:30 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/css/global.css
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    -    msdn2.microsoft.com    TCP    -                        Req ID: 00f3df46; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:46:30 AM    0    1    4703    1239        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:46:30 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/en-us/default.aspx
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    -    msdn2.microsoft.com    TCP    -                        Req ID: 00f3df45; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:46:30 AM    0    63    4703    1221        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x0    Web Proxy Filter    -    9/2/2007 11:46:30 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    -    msdn.microsoft.com    TCP    -                        Req ID: 00f3df33; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:46:29 AM    0    62    4703    1110        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x80    Web Proxy Filter    -    9/2/2007 11:46:29 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn.microsoft.com/
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn2.microsoft.com    TCP    -                        Req ID: 00f3d9c2; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:31:53 AM    0    1    4703    1359        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:31:53 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/WebResource.axd?d=1odrcHMztlHVfip62CrWotDWgKWMWjRU5ZbCBc-js_c1&t=633209694922046362
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn2.microsoft.com    TCP    -                        Req ID: 00f3d988; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:31:52 AM    0    1    4703    1940        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:31:52 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/js.aspx?l=en-us&i=/&ct=msdn&cl=mtpsloginstatus;mtps_pagemetadata;mtps_surveylauncherctrl;userrecognitionflyout;removeanonymousprofile;instrumentedlink;localemanagementflyout;templatedflyout;quicklinksflyout;tabstrip;toolbar;eyebrowmenubar;leftnavigation;header;videoscroller;mtpslocaleview;rssskinner;basicheadlines;bulletedlist;mtpsmsnadscontrol;bphome;bpglobal;webmetrix;aploggingctrl;mtps_footerctrl;hideeyebrow;webtrends;mtpsmanageprofile;contentinclude;containerbox;bperrors;collapsiblearea;codesnippet;simplesearch;memberlink;mtpsloginview;currencypickerctrl;pricingctrl;bpdownloads;downloads;showratings;ktablecontrol;mtpscontentplaceholder;altpage;bumperpage;rolloverimage
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6    Yes    Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn2.microsoft.com    TCP    -                        Req ID: 00f3d986; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:31:52 AM    0    1    4703    1956        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:31:52 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/css.aspx?l=en-us&i=/&ct=msdn&cl=mtpsloginstatus;mtps_pagemetadata;mtps_surveylauncherctrl;userrecognitionflyout;removeanonymousprofile;instrumentedlink;localemanagementflyout;templatedflyout;quicklinksflyout;tabstrip;toolbar;eyebrowmenubar;leftnavigation;header;videoscroller;mtpslocaleview;rssskinner;basicheadlines;bulletedlist;mtpsmsnadscontrol;bphome;bpglobal;webmetrix;aploggingctrl;mtps_footerctrl;hideeyebrow;webtrends;mtpsmanageprofile;contentinclude;containerbox;bperrors;collapsiblearea;codesnippet;simplesearch;memberlink;mtpsloginview;currencypickerctrl;pricingctrl;bpdownloads;downloads;showratings;ktablecontrol;mtpscontentplaceholder;altpage;bumperpage;rolloverimage
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6        Proxy    ISAGATE    http://msdn2.microsoft.com/msdn/MasterPages/TobagoPageType/TobagoPageType_master.css    msdn2.microsoft.com    TCP    -                        Req ID: 00f3d90d; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:28:42 AM    0    1    4703    1084        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:28:42 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/msdn/MasterPages/TobagoPageType/bullet.gif
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6        Proxy    ISAGATE    http://msdn2.microsoft.com/css.aspx?l=en-us&i=/&ct=msdn&cl=mtpsloginstatus;mtps_pagemetadata;mtps_surveylauncherctrl;userrecognitionflyout;localemanagementflyout;templatedflyout;quicklinksflyout;tabstrip;instrumentedlink;toolbar;eyebrowmenubar;leftnavi...    msdn2.microsoft.com    TCP    -                        Req ID: 00f3d90c; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:28:42 AM    0    1    4703    1718        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:28:42 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/msdn/controls/leftnavigation/en-us/LeftNavBullet.gif
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6        Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn.microsoft.com    TCP    -                        Req ID: 00f3d907; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:28:42 AM    0    1    4703    870        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:28:42 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn.microsoft.com/nodehomes/graphics/rss_button.gif
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6        Proxy    ISAGATE    http://msdn2.microsoft.com/css.aspx?l=en-us&i=/&ct=msdn&cl=mtpsloginstatus;mtps_pagemetadata;mtps_surveylauncherctrl;userrecognitionflyout;localemanagementflyout;templatedflyout;quicklinksflyout;tabstrip;instrumentedlink;toolbar;eyebrowmenubar;leftnavi...    msdn2.microsoft.com    TCP    -                        Req ID: 00f3d906; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:28:42 AM    0    1    4703    1691        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x880    Web Proxy Filter    -    9/2/2007 11:28:42 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/msdn/images/msdn_logo.gif
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6        Proxy    ISAGATE    http://msdn2.microsoft.com/css.aspx?l=en-us&i=/&ct=msdn&cl=mtpsloginstatus;mtps_pagemetadata;mtps_surveylauncherctrl;userrecognitionflyout;localemanagementflyout;templatedflyout;quicklinksflyout;tabstrip;instrumentedlink;toolbar;eyebrowmenubar;leftnavi...    msdn2.microsoft.com    TCP    -                        Req ID: 00f3d90f; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:28:42 AM    0    1    4703    1716        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x800    Web Proxy Filter    -    9/2/2007 11:28:42 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/msdn/Controls/TabStrip/en-US/search_down_arrow.gif
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6        Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn2.microsoft.com    TCP    -                        Req ID: 00f3d90b; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:28:42 AM    0    1    4703    1086        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x800    Web Proxy Filter    -    9/2/2007 11:28:42 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/WebResource.axd?d=1odrcHMztlHVfip62CrWotDWgKWMWjRU5ZbCBc-js_c1&t=633209722727557174
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6        Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn2.microsoft.com    TCP    -                        Req ID: 00f3d909; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:28:42 AM    0    15    4703    1086        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x800    Web Proxy Filter    -    9/2/2007 11:28:42 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/WebResource.axd?d=i_hGPjbfLWp2O6XoiuZNbUomv9vYp-GUYnStmCvhdfE1&t=633209722727557174
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6        Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn2.microsoft.com    TCP    -                        Req ID: 00f3d905; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:28:42 AM    0    1    4703    1065        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x800    Web Proxy Filter    -    9/2/2007 11:28:42 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/WebResource.axd?d=UTv1moRTqqtBCoHLmMmXYQ2&t=633209722727557174
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6        Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn2.microsoft.com    TCP    -                        Req ID: 00f3d903; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:28:42 AM    0    1    4703    1049        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x800    Web Proxy Filter    -    9/2/2007 11:28:42 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/msdn/Controls/TabStrip/en-us/search_button.gif
0.0.0.0    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6        Proxy    ISAGATE    http://msdn2.microsoft.com/en-us/default.aspx    msdn2.microsoft.com    TCP    -                        Req ID: 00f3d8e8; Compression: client=No, server=No, compress rate=0% decompress rate=0%                9/3/2007 6:28:41 AM    0    1    4703    1016        12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.     0x0    0x800    Web Proxy Filter    -    9/2/2007 11:28:41 PM    192.168.1.105    8080    http    Denied Connection    Web Access Only    192.168.1.1    anonymous    Internal    External    GET    http://msdn2.microsoft.com/css/global.css

(in reply to hunglikethor)
Post #: 10
RE: ISA 2006 fails to load some web sites; logging of d... - 3.Sep.2007 10:20:34 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
The Web Proxy filter of the ISA Firewall service needs the user to authenticate. Are the clients configured as Web proxy clients?

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to hunglikethor)
Post #: 11
RE: ISA 2006 fails to load some web sites; logging of d... - 3.Sep.2007 1:20:25 PM   
hunglikethor

 

Posts: 112
Joined: 12.Oct.2006
Status: offline
Yes.  Machines have the Firewall Client Agent installed, and have kerberos tickets from the ISA 2006 Server.  Please notes that this is an issue ONLY with some sites: 

http://online.wsj.com/home/us (occasionally; reloading usually gets me to the site)

https://login.live.com/ppsecure/secure.srf?lc=1033&id=42814&ru=https%3a%2f%2fprofile.microsoft.com%3a443%2fRegSysProfileCenter%2fwizard.aspx%3fwizid%3db28a479f-4189-428a-8f89-4ace6507a68c%26lcid%3d1033%26wp%3dMCMBI%26fu%3dhttp%253a%252f%252fprofile.microsoft.com%252fpersonalization%252fapplications%252fmsdnsync%252fSyncProfile.aspx%253fst%253d1%2526ru%253dhttps%253a%252f%252fmsdn2.microsoft.com%252fen-US%252fsubscriptions%252fmanage%252fdefault.aspx%253fCA%253dXena%257c%257c5564DC0F-6C4D-4CEA-AACF-824641A81B07%26cu%3dhttps%253a%252f%252fmsdn2.microsoft.com%252fen-US%252fsubscriptions%252fmanage%252fdefault.aspx%253fCA%253dXena%257c%257c5564DC0F-6C4D-4CEA-AACF-824641A81B07&tw=1800&fs=1&kv=6&ct=1188839477&cb=LCID%3d1033%26WizID%3db28a479f-4189-428a-8f89-4ace6507a68c%26ReturnURL%3dhttps%253a%252f%252fprofile.microsoft.com%253a443%252fRegSysProfileCenter%252fwizard.aspx%253fwizid%253db28a479f-4189-428a-8f89-4ace6507a68c%2526lcid%253d1033%2526wp%253dMCMBI%2526fu%253dhttp%25253a%25252f%25252fprofile.microsoft.com%25252fpersonalization%25252fapplications%25252fmsdnsync%25252fSyncProfile.aspx%25253fst%25253d1%252526ru%25253dhttps%25253a%25252f%25252fmsdn2.microsoft.com%25252fen-US%25252fsubscriptions%25252fmanage%25252fdefault.aspx%25253fCA%25253dXena%25257c%25257c5564DC0F-6C4D-4CEA-AACF-824641A81B07%2526cu%253dhttps%25253a%25252f%25252fmsdn2.microsoft.com%25252fen-US%25252fsubscriptions%25252fmanage%25252fdefault.aspx%25253fCA%25253dXena%25257c%25257c5564DC0F-6C4D-4CEA-AACF-824641A81B07&ems=1&seclog=10&ver=2.1.6000.1&rn=OPQtLJ1D&tpf=b54e2b77000620bad3e2fa5a69c32581 (MSDN Login site; never works after typing in username and password and click "Sign In"; the error 12217 appears and I have to switch to another non-microsoft proxy to get through)

These are the only sites that I know of (and go to regularly) that this error pops up.  The firewall log message makes no sense as I am already authenticated to the ISA Server (use of TCP port 1745 for authentication) and have a "HTTP" Kerberos ticket from the ISA Server.  Both the WSJ and MSDN sites are logion sites.  The WSJ has my username and password already saved via cookie so I do not have to manually login to the site every time.  The MSDN site does not have the username and password saved.  Other sites I go to (i.e. banking, credir reporting, etec) that require a login have no issues.

I have a feeling that this is a bug that will be difficult to track down.

(in reply to tshinder)
Post #: 12
RE: ISA 2006 fails to load some web sites; logging of d... - 4.Sep.2007 10:56:30 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Thor,

It might be that you need to configure the MSDN site for Direct Access. I do that for all the Microsoft sites, including the Windows Update site, because a lot of the MS properties don't work with authenticating proxies (go figure).

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to hunglikethor)
Post #: 13

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> General >> ISA 2006 fails to load some web sites Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts