Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Issue with ping internal interface

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> General >> Issue with ping internal interface Page: [1]
Login
Message << Older Topic   Newer Topic >>
Issue with ping internal interface - 21.Jul.2008 12:59:28 PM   
jmfwerner

 

Posts: 5
Joined: 21.Jul.2008
Status: offline 		Running ISA2006 Standard on Windows 2003 SP2.

I have enabled ICMP (ping) using the system policies. This works for a short time (after a reboot), then for some unknown reason, I can no longer ping to/from the server. Other protocols work fine.

No errors in Windows event logs. I don't see any denied connection messages in ISA logging regarding ping. Strange.

Any help would be appreciated.
Post #: 1
RE: Issue with ping internal interface - 21.Jul.2008 1:51:13 PM   
paulo.oliveira

 

Posts: 768
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline 		Hi,

run ISABPA and see if there´s any misconfiguration.

Regards,
Paulo Oliveira.

(in reply to jmfwerner)
Post #: 2
RE: Issue with ping internal interface - 21.Jul.2008 2:37:07 PM   
jmfwerner

 

Posts: 5
Joined: 21.Jul.2008
Status: offline 		Thank you for the reply.
I already ran the ISABPA. It reports everything ok - no issues.

(in reply to paulo.oliveira)
Post #: 3
RE: Issue with ping internal interface - 22.Jul.2008 11:32:07 AM   
tshinder

 

Posts: 47181
Joined: 10.Jan.2001
From: Texas
Status: offline 		Check the ISA firewall's log files to see what is happening to these ping requests.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to jmfwerner)
Post #: 4
RE: Issue with ping internal interface - 22.Jul.2008 12:37:21 PM   
jmfwerner

 

Posts: 5
Joined: 21.Jul.2008
Status: offline 		I query the log with the following settings:
Log Record Type = Firewall or Web Proxy
Log Time = Live
Protocol = Ping

I open a command windows on the ISA server, and ping a device on the local, private network. All pings fail. Nothing is logged in the ISA server.

If I ping the server itself, pings work fine. Still nothing is logged in the ISA server.

If I disable the NIC in Windows, then re-enable the NIC. The server can then ping once again. Items are listed in the log file as normal. After 10-60 minutes, pings will start to fail once again.

Nothing in the Windows event logs. Nothing in the ISA logs. Nothing on the Ethernet switch the server is connected to.

I'm out of ideas.

(in reply to tshinder)
Post #: 5
RE: Issue with ping internal interface - 23.Jul.2008 8:56:28 AM   
tshinder

 

Posts: 47181
Joined: 10.Jan.2001
From: Texas
Status: offline 		Is it only ping that fails, or do other types of connections fail?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to jmfwerner)
Post #: 6
RE: Issue with ping internal interface - 23.Jul.2008 9:08:17 AM   
jmfwerner

 

Posts: 5
Joined: 21.Jul.2008
Status: offline 		When the "issue" starts to occur. Pings fail, but I am still able to access the server via RDP. Some Internet browsing still works. The ability to VPN into the server from the outside seems to also fail.

To make things even better. I built a new server from scratch yesterday and put it in place of this one.

I had the same issue occur this morning. Different server, hardware, ports on the switch. Same IP addresses however (both inside/outside).


(in reply to tshinder)
Post #: 7
RE: Issue with ping internal interface - 23.Jul.2008 9:27:20 AM   
tshinder

 

Posts: 47181
Joined: 10.Jan.2001
From: Texas
Status: offline 		It sounds like the machine is going into lockdown mode.

Check the Event Viewer for that information and also check the log files and some packet traces to see what might be causing this.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to jmfwerner)
Post #: 8
RE: Issue with ping internal interface - 23.Jul.2008 10:17:26 AM   
jmfwerner

 

Posts: 5
Joined: 21.Jul.2008
Status: offline 		I do not see any reference of the server going into lock down mode, either in the event logs or ISA logs. No smoking gun jumps out at me while looking thru the logs.

(in reply to tshinder)
Post #: 9
RE: Issue with ping internal interface - 23.Jul.2008 11:38:55 AM   
paulo.oliveira

 

Posts: 768
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline 		Hi,

try to capture packets using a sniffer and see what´s happening.

Regards,
Paulo Oliveira.

(in reply to jmfwerner)
Post #: 10
RE: Issue with ping internal interface - 11.Sep.2008 7:26:32 PM   
varun25

 

Posts: 46
Joined: 24.Aug.2008
Status: offline 		Hi

Create a rule on the ISA firewall policy allowing PING from all networks to all networks for all users and see what happens?

Varun

(in reply to paulo.oliveira)
Post #: 11

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> General >> Issue with ping internal interface Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts