• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA Error codes

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> ISA Error codes Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA Error codes - 22.Dec.2005 2:05:40 AM   
lay69u

 

Posts: 3
Joined: 22.Dec.2005
Status: offline
Hi,

I have set up a reverse proxy website using ISA and redirecting port 80 to port 8083. This seems to work fine and the site is avaliable from the internet.

However, there is one part of the website which doesn't work. There is an option to download some data as an excel spreadsheet. When I click on the link I get the following:

ERROR
Access Denied



  • Access Denied by security policy

The security policy for your network prevents your request from being allowed at this time. Please contact your administrator if you feel this is incorrect.

***********************************************************************

I have used ISA logging to track what happens and I get the following at the point of clicking on the link to generate the excel data:





























Original Client IP
Authenticated Client
Service
Server Name
Destination Host Name
Transport
Source Port
Result Code
HTTP Status Code
Error Information
Log Record Type
Log Time
Destination IP
Destination Port
Protocol
Action
Rule
Client IP
Client Username
Source Network
Destination Network
HTTP Method
URL

192.168.105.212
 
 
DOCISA03
 
TCP
57957
0x0
 
0x0
Firewall
21/12/2005 13:46
172.16.10.75
80
HTTP
Initiated Connection
 
192.168.105.212
 
Internal
Local Host
-
-

0.0.0.0
No
Reverse Proxy
DOCISA03
www.statefleetportal.com
TCP
104105
 
200
0x580
Web Proxy Filter
21/12/2005 13:46
172.16.15.74
8083
http
Allowed Connection
State Fleet Reverse Proxy
192.168.105.212
anonymous
Internal
 
GET
http://172.16.15.74:8083/SASWebReportViewer/StreamContentServlet?NOOP=true

0.0.0.0
No
Reverse Proxy
DOCISA03
www.statefleetportal.com
TCP
150151
 
154155
0x582
Web Proxy Filter
21/12/2005 13:46
172.16.15.74
8083
http
Failed Connection Attempt
State Fleet Reverse Proxy
192.168.105.212
anonymous
Internal
 
GET
http://172.16.15.74:8083/SASWebReportViewer/dialog.cdd?APNAME=AP56&CMDID=tvc11857_mb_ET&AP56_mode=COMMIT&type=formatted&AP56_graphName=null&AP56_outputType=HTML&AP56_rows=A&AP56_repeatLabels=1&AP56_formatted=1&AP56_cssURL=http%3A%2F%2Fwww.statefleetportal.com%2FSASWebReportViewer%2Fstyles%2Fcitation.css&AP56_cssMIMEType=&AP56_cssMediaList=.&AP56_cssTitle=&AP56_cssURL=http%3A%2F%2Fwww.statefleetportal.com%2FSASWebReportViewer%2Fstyles%2Fcitation_table.css&AP56_cssMIMEType=&AP56_cssMediaList=.&AP56_cssTitle=&AP56_cssURL=http%3A%2F%2Fwww.statefleetportal.com%2FSASWebReportViewer%2Fstyles%2FwrsStyle.css&AP56_cssMIMEType=&AP56_cssMediaList=.&AP56_cssTitle=&AP56_cssURL=http%3A%2F%2Fwww.statefleetportal.com%2FSASWebReportViewer%2Fstyles%2Fcitation_dialog.css&AP56_cssMIMEType=&AP56_cssMediaList=.&AP56_cssTitle=&AP56_cssURL=&AP56_cssMIMEType=&AP56_cssMediaList=.&AP56_cssTitle=

172.16.10.75
 
 
DOCISA03
 
TCP
1919
0x80074e20
 
0x0
Firewall
21/12/2005 13:46
172.16.15.74
8083
Unidentified IP Traffic
Closed Connection
 
172.16.10.75
 
Local Host
Internal
-
-

192.168.105.212
 
 
DOCISA03
 
TCP
57936
0x80074e21
 
0x0
Firewall
21/12/2005 13:46
172.16.10.75
256257
HTTP
Closed Connection
 
192.168.105.212
 
Internal
Local Host
-
-





























 
 
Could somebody please explain what the error information relates to?
 
Cheers























Post #: 1
RE: ISA Error codes - 22.Dec.2005 2:16:30 AM   
lay69u

 

Posts: 3
Joined: 22.Dec.2005
Status: offline
the logging detail didn't display as I was hoping (just thats what happens when you forget to preview before submitting). Basically, I want to know what these error codes relate to:







Error Information

0x0

0x580

0x582







HTTP Status Code

 

200

64

(in reply to lay69u)
Post #: 2
RE: ISA Error codes - 23.Dec.2005 6:18:11 AM   
ClintD

 

Posts: 1848
Joined: 26.Jan.2001
From: Keller, TX
Status: offline
Use the way-cool Excel spreadsheets from www.isascripts.org - http://www.isascripts.org/scripts.zip, specifically, the ISA_2004_Error_Codes.xls file.

0x0 = Success (no error)

The other ones are obtained by adding the numerous lines in the Error Field Worksheet - typically, they're not very helpful.
0x580 = 400 + 100 + 80
400 = ERROR_INFO_RESPONSE_HAS_BODY
100 = ERROR_INFO_SERVER_KA
80 = ERROR_INFO_CLIENT_KA

You get the idea...

The entry I'm most niterested in is this one...

0.0.0.0
No
Reverse Proxy
DOCISA03
www.statefleetportal.com
TCP
150151

154155
0x582
Web Proxy Filter
21/12/2005 13:46
172.16.15.74
8083
http
Failed Connection Attempt
State Fleet Reverse Proxy
192.168.105.212
anonymous
Internal

GET
http://172.16.15.74:8083/SASWebReportViewer/dialog.cdd?APNAME=AP56&CMDID=tvc11857_mb_ET&AP56_mode=COMMIT&type=formatted&AP56_graphName=null&AP56_outputType=HTML&AP56_rows=A&AP56_repeatLabels=1&AP56_formatted=1&AP56_cssURL=http%3A%2F%2Fwww.statefleetportal.com%2FSASWebReportViewer%2Fstyles%2Fcitation.css&AP56_cssMIMEType=&AP56_cssMediaList=.&AP56_cssTitle=&AP56_cssURL=http%3A%2F%2Fwww.statefleetportal.com%2FSASWebReportViewer%2Fstyles%2Fcitation_table.css&AP56_cssMIMEType=&AP56_cssMediaList=.&AP56_cssTitle=&AP56_cssURL=http%3A%2F%2Fwww.statefleetportal.com%2FSASWebReportViewer%2Fstyles%2FwrsStyle.css&AP56_cssMIMEType=&AP56_cssMediaList=.&AP56_cssTitle=&AP56_cssURL=http%3A%2F%2Fwww.statefleetportal.com%2FSASWebReportViewer%2Fstyles%2Fcitation_dialog.css&AP56_cssMIMEType=&AP56_cssMediaList=.&AP56_cssTitle=&AP56_cssURL=&AP56_cssMIMEType=&AP56_cssMediaList=.&AP56_cssTitle=


This looks like the most relevant section of the errors you posted - it has a 'Failed Connection Attempt' listed. This URL is 883 characters long - it hasn't been normalized yet (there are still escape characters '%' in the URL) so I don't know how long the true URL is - depending if you've decreased the Max URL length in the HTTP filtering, this might be an issue.

Not much help I'm afraid - the error below doesn't look like it's coming from ISA - at least, it's not an error I've seen generated by ISA.

< Message edited by ClintD -- 23.Dec.2005 6:19:57 AM >

(in reply to lay69u)
Post #: 3

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> ISA Error codes Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts