Welcome to ISAserver.org

Internet Explorer Hangs on Close when SecureNat to External Network is Disabled

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> SecureNAT Client >> Internet Explorer Hangs on Close when SecureNat to External Network is Disabled

Page: [1]

Message

<< Older Topic Newer Topic >>

Internet Explorer Hangs on Close when SecureNat to Exte... - 26.Mar.2007 5:26:38 PM

LinxPatrickH

Posts: 5
Joined: 20.Oct.2006
Status: offline

I have created a SecureNat Firewall Policy that is very similar to the one that was installed with ISA Server 2004 running on SBS 2003. The main difference is that instead of specifying the External network I've specified some very specific URLs to prevent SecureNAT client users from going anywhere on the Internet.

The problem is that with the default SecureNAT policy disabled, SecureNAT users have a problem where Internet Explorer 6 or 7 hangs when shutting down. IE is apparently trying to access something on the External network but I can't figure out what it is.

ISA Server 2004 and SBS have all updates applied.

Any ideas as to what SecureNAT clients need access to in order to prevent this problem?

Patrick.

Post #: 1

Featured Links*

RE: Internet Explorer Hangs on Close when SecureNat to ... - 26.Mar.2007 8:22:15 PM

Rotorblade

Posts: 976
Joined: 27.Feb.2007
Status: offline

Patrick,

In your access rule, how are you controlling access of SecureNAT clients? Is it based on client IP (computer set) or a user/group?

Your URL destination sets, are any of them to HTTPS sites and are you publishing any servers through your ISA?

RB

(in reply to LinxPatrickH)

Post #: 2

RE: Internet Explorer Hangs on Close when SecureNat to ... - 26.Mar.2007 8:43:39 PM

LinxPatrickH

Posts: 5
Joined: 20.Oct.2006
Status: offline

I have an ftp site that is accessable from the internet but no Websites are available from the outside. I do have a couple development Websites running but they are only available to internal clients.

The policy specifies All Protected Networks in the From: column. For the To: side it specifies the Fink (Apple Program) project as an IP range with one IP address. It also specifies a Domain Name set that I set up to allow access to a limited set of sites. All of the entries in the Domain Name Set are specified as '*.domain.com'.

The policy only specifies 'All Users'.

When IE is closed there is an entry in the log for Destination IP 255.255.255.255 and Port 712 coming from the IP address of the ISA server, not the IE client machine. This entry gets denied and IE hangs.

I'm not a firewall guru so I hope my response answers your questions.

Patrick.

(in reply to Rotorblade)

Post #: 3

RE: Internet Explorer Hangs on Close when SecureNat to ... - 26.Mar.2007 8:49:43 PM

LinxPatrickH

Posts: 5
Joined: 20.Oct.2006
Status: offline

I should have mentioned that there are the Web Publishing Rules that the installation set up for OWA and RWW but I've not messed with them and don't use either service.

Patrick.

(in reply to Rotorblade)

Post #: 4