• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA not blocking all sites in Custom URL list

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> ISA not blocking all sites in Custom URL list Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA not blocking all sites in Custom URL list - 31.Dec.2007 7:16:33 AM   
skuht2

 

Posts: 2
Joined: 31.Dec.2007
Status: offline
Hi,

I'm running ISA 2004 (sp3) on a W2k3 (SP2) server. Users are a mix of proxy and secureNAT clients.

the problem i got is this:

I have setup a Access Rule to block certan internet sites.

eg. bebo

I have done this with creating a custom URL set.

This works fine for all the sites in the URL list ( for both proxy and sNAT clients ) EXCEPT www.facebook.com is still accessible for secureNAT clients, although all the other sites in the URL list for sNAT clients are successfully blocked.

How does that work?
Post #: 1
RE: ISA not blocking all sites in Custom URL list - 4.Jan.2008 4:47:35 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Hi,

I have set myself as a SecureNet client only and created a rule to block Facebook and it worked perfectly !

what rules do u have on ur ISA Server?

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to skuht2)
Post #: 2
RE: ISA not blocking all sites in Custom URL list - 4.Jan.2008 6:49:49 AM   
royh

 

Posts: 318
Joined: 23.Feb.2007
From: Lebanon
Status: offline
Watch out tunneling and proxy avoidance tools in your network!!!



_____________________________

Roy Haddad,M.Sc
CCNA, MCSE 2003 Messaging & Security,C|EH
www.foxminds.com

(in reply to skuht2)
Post #: 3
RE: ISA not blocking all sites in Custom URL list - 4.Jan.2008 8:02:57 AM   
skuht2

 

Posts: 2
Joined: 31.Dec.2007
Status: offline
Hi thanks for the repies.

the testing has been done from my own machine using IE7 and also done from a Vpc using IE6, so it's not an issue with proxy avoidance.

The Rule is DENY All Outbound Traffic FROM Internal/Local Host/ VPN Clients TO Blacklist

Blacklist is a custom URL set that i've created which contains the website entries. Eg:
www.facebook.*
www.bebo.*

The issue is:

IE7 / IE6 set with a proxy server blocks both these sites no problem, but if the proxy server ISN'T set it only blocks bebo.

(in reply to skuht2)
Post #: 4
RE: ISA not blocking all sites in Custom URL list - 4.Jan.2008 8:58:28 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
This is the right format to block sites :


*.domain.tld

such as :  *.facebook.com

HTH,
Tarek

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to skuht2)
Post #: 5
RE: ISA not blocking all sites in Custom URL list - 15.Oct.2010 10:29:17 AM   
gazy007

 

Posts: 43
Joined: 29.Aug.2008
Status: offline
I  have tried http://*facebook.com
                           *facebook.com but still no joy.

(in reply to elmajdal)
Post #: 6

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> ISA not blocking all sites in Custom URL list Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts