Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

SP2 URL problem

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> General >> SP2 URL problem Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
SP2 URL problem - 9.Feb.2006 11:42:55 AM   
amber1

 

Posts: 15
Joined: 9.Feb.2006
Status: offline
Hi,
I'm Running ISA 2004 as a web proxy on w2k3 sp1. I've just updated ISA 2004 from sp1 to sp2.

I have noticed a problem when accessing this web site http://www.icc-credit.co.uk/services/credit_services_uk/
Our users use the ICC Aquila section and login to site sucessfully with an ID and P/word, however when they attempt to access some information on a PDF format they get the Error code 502 Proxy error. The ip address is 194.24.233.4.

If I bypass the proxy server I can access the required information via the PDF link

I am able to access other web sites and access PDF links (Say a whitepaper) without fail

We had no problems before on SP1 but SP2 won't let us access this info.

Is there some setting thats been adjusted in Sp2 that i need to switch off ?

Any help will be useful

Thanks
Post #: 1
RE: SP2 URL problem - 9.Feb.2006 9:26:35 PM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Amber,

Check the Filter Information field in the ISA firewall's log file to find out what might be blocking the connection.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to amber1)
Post #: 2
RE: SP2 URL problem - 10.Feb.2006 11:04:27 AM   
amber1

 

Posts: 15
Joined: 9.Feb.2006
Status: offline
Thanks I'll give it a go, although I have noticed that me socks v4 filter has been disabled since applying the SP2 patch.
Perhaps this maybe the source of the issue ?



(in reply to amber1)
Post #: 3
RE: SP2 URL problem - 12.Feb.2006 7:33:23 PM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Amber,

If you're not using SOCKS clients, then the SOCKS filter should not be enabled.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to amber1)
Post #: 4
RE: SP2 URL problem - 13.Feb.2006 4:26:44 PM   
amber1

 

Posts: 15
Joined: 9.Feb.2006
Status: offline
Ok Tom, thanks for you help again

(in reply to tshinder)
Post #: 5
RE: SP2 URL problem - 14.Feb.2006 10:32:40 AM   
amber1

 

Posts: 15
Joined: 9.Feb.2006
Status: offline
Tom,

Here's the error code: 502 proxy error. the HTTP request includes a non-supported header.Contact your ISA Server Administrator (12156) ip Address 194.24.233.4

Thanks

(in reply to amber1)
Post #: 6
RE: SP2 URL problem - 14.Feb.2006 3:00:47 PM   
LLigetfa

 

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
If you search this forum for that particular error, you would find that it is a known issue with no current workaround except to uninstall SP2.

<edit>Hmm... maybe not...

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to amber1)
Post #: 7
RE: SP2 URL problem - 15.Feb.2006 3:44:10 AM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Amber,

Can you provide the URL that you're seeing that error?

I'd like to repro it and do some packet traces.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to LLigetfa)
Post #: 8
RE: SP2 URL problem - 15.Feb.2006 3:45:38 AM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Amber,

Is there any way I can access one of the URLs that gives you the problem other than logging on?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to tshinder)
Post #: 9
RE: SP2 URL problem - 15.Feb.2006 3:34:58 PM   
amber1

 

Posts: 15
Joined: 9.Feb.2006
Status: offline
Hi Tom,

Sorry for the delay.

Its  http://www.icc-credit.co.uk/services/credit_services_uk/ and then icc aquila

https://secure.icc-credit.co.uk/cgi-bin/register.cgi?page=2 But these are ok

Unfortunately you will then require a login and Password. Once in then you can access Credit Information, then via links to a pdf format file which looks to be a scanned document.

I know its probably a bit tricky as you have to login & P/word, I've noticed that all the pages that we're able to access end in .jsp
format.

I'll try and find a contact at ICC also and ask them about it.

Thanks

Dave


(in reply to tshinder)
Post #: 10
RE: SP2 URL problem - 15.Feb.2006 4:53:38 PM   
tshinder

 

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Dave,

That's unfortunate. However, if you can get me a packet trace on the external interface of the ISA firewall while this is happening, and an ISAinfo output and send those to me, I'll forward that information directly to someone who can get things moving toward a definitive fix.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to amber1)
Post #: 11
RE: SP2 URL problem - 22.Feb.2006 1:03:12 PM   
amber1

 

Posts: 15
Joined: 9.Feb.2006
Status: offline
Tom,
 
Apologies for the delay. This is the info I get from the Isa server logging, I made a filter that equals to  194.24.233.4
I have also concealed out our ip with an xx and have used relpaced the  domain/user name in bold also.
I hope this is useful.
 
Thanks again Dave
 
 
Original Client IP         Client Agent            Authenticated Client            Service            Server Name            Referring Server            Destination Host Name            Transport        MIME Type    Object Source Source Proxy            Destination Proxy            Bidirectional     Client Host Name            Filter Information            Network Interface            Raw IP Header Raw Payload            Source Port            Processing Time            Bytes Sent     Bytes Received            Result Code    HTTP Status Code            Cache Information            Error Information            Log Record Type            Log Time            Destination IP            Destination Port            Protocol         Action            Rule            Client IP         Client Username            Source Network            Destination Network            HTTP Method            URL
0.0.0.0            Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)      Yes            Proxy            WEBSENSE              194.24.233.4   TCP                 Internet            -            -                       -                       -            -            -            0            141            27786            790                  200             0x60000004    0x680            Web Proxy Filter            22/02/2006 11:30:38            194.24.233.4   80            http            Allowed Connection            web access            xx.xx.xx.76            domain\user            Internal            External           POST            http://194.24.233.4/aquila/Dispatcher.jsp
0.0.0.0            Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)      Yes            Proxy            WEBSENSE              194.24.233.4   TCP                 Internet            -            -                       -                       -            -            -            0            1969            20799            790                  200             0x60000004    0x780            Web Proxy Filter            22/02/2006 11:30:43            194.24.233.4   80            http            Allowed Connection            web access            xx.xx.xx.76            domain\user            Internal            External           POST            http://194.24.233.4/aquila/Dispatcher.jsp
0.0.0.0            Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)      Yes            Proxy            WEBSENSE              194.24.233.4   TCP                 Internet            -            -                       -                       -            -            -            0            4047            1389            790                  200             0x60000004    0x780            Web Proxy Filter            22/02/2006 11:30:49            194.24.233.4   80            http            Allowed Connection            web access            xx.xx.xx.76            doamin\user            Internal            External           POST            http://194.24.233.4/aquila/Dispatcher.jsp
0.0.0.0            Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)      Yes            Proxy            WEBSENSE              194.24.233.4   TCP                 Internet            -            -                       -                       -            -            -            0            16            4361            690                  12156 The HTTP request includes a non-supported header. Contact your ISA Server administrator.             0x20000004    0x180            Web Proxy Filter            22/02/2006 11:30:52            194.24.233.4   80            http            Failed Connection Attempt            web access            xx.xx.xx.76           domain\user            Internal            External           GET            http://194.24.233.4/aquila/Image/Tmp-d0d30a-2d7965b0d7a3e58b.pdf
xx.xx.xx.28                                           WEBSENSE  -                       TCP            -                                                                       -                                               55418            0            4438            53538            0x80074e20                0x0            0x0            Firewall            22/02/2006 11:30:52            194.24.233.4   80            HTTP            Closed Connection                   xx.xx.xx.28                   Local Host            External           -            -
xx.xx.xx.28                                           WEBSENSE  -                       TCP            -                                                                       -                                               55427            0            0            0            0x0                  0x0            0x0            Firewall            22/02/2006 11:31:01            194.24.233.4   80            HTTP            Initiated Connection                   xx.xx.xx.28                   Local Host            External           -            -
0.0.0.0            Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)      Yes            Proxy            WEBSENSE              194.24.233.4   TCP                 Internet            -            -                       -                       -            -            -            0            3984            1391            554                  200             0x60000004    0x680            Web Proxy Filter            22/02/2006 11:31:05            194.24.233.4   80            http            Allowed Connection            web access            xx.xx.xx.76            domain\user            Internal            External           POST            http://194.24.233.4/aquila/Dispatcher.jsp
0.0.0.0            Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)      Yes            Proxy            WEBSENSE              194.24.233.4   TCP                 Internet            -            -                       -                       -            -            -            0            16            4361            691                  12156 The HTTP request includes a non-supported header. Contact your ISA Server administrator.             0x20000004    0x180            Web Proxy Filter            22/02/2006 11:31:09            194.24.233.4   80            http            Failed Connection Attempt            web access            xx.xx.xx.76            domain\user           Internal            External           GET            http://194.24.233.4/aquila/Image/Tmp-1b3400d-bdf82c3c7892acfe.pdf
xx.xx.xx.28                                           WEBSENSE  -                       TCP            -                                                                       -                                               55427            0            1560            1962            0x80074e20                0x0            0x0            Firewall            22/02/2006 11:31:09            194.24.233.4   80            HTTP            Closed Connection                   xx.xx.xx.28                   Local Host            External           -            -
xx.xx.xx.28                                           WEBSENSE  -                       TCP            -                                                                       -                                               55431            0            0            0            0x0                  0x0            0x0            Firewall            22/02/2006 11:31:12            194.24.233.4   80            HTTP            Initiated Connection                   xx.xx.xx.28                   Local Host            External           -            -
0.0.0.0            Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)      Yes            Proxy            WEBSENSE              194.24.233.4   TCP                 Internet            -            -                       -                       -            -            -            0            12047            1389            554                  200             0x60000004    0x680            Web Proxy Filter            22/02/2006 11:31:24            194.24.233.4   80            http            Allowed Connection            web access            xx.xx.xx.76            domain\user            Internal            External           POST            http://194.24.233.4/aquila/Dispatcher.jsp
0.0.0.0            Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)      Yes            Proxy            WEBSENSE              194.24.233.4   TCP                 Internet            -            -                       -                       -            -            -            0            47            4361            690                  12156 The HTTP request includes a non-supported header. Contact your ISA Server administrator.             0x20000004    0x180            Web Proxy Filter            22/02/2006 11:31:28            194.24.233.4   80            http            Failed Connection Attempt            web access            xx.xx.xx.76            domain\user            Internal            External           GET            http://194.24.233.4/aquila/Image/Tmp-c8b381-b0211a67fea3c27d.pdf
xx.xx.xx.28                                           WEBSENSE  -                       TCP            -                                                                       -                                               55431            0            1599            2000            0x80074e20                0x0            0x0            Firewall            22/02/2006 11:31:28            194.24.233.4   80            HTTP            Closed Connection                   xx.xx.xx.28                   Local Host            External           -            -

(in reply to tshinder)
Post #: 12
RE: SP2 URL problem - 23.Feb.2006 9:56:31 PM   
goranb

 

Posts: 5
Joined: 26.May2004
Status: offline
Any news on a fix for this?
I have the same issue with same errors in the logs. The website that I am accessing is http://www.vsp.com/member/htmls/member_home.jsp
This is the error message:
"Error Code: 502 Proxy Error. The HTTP request includes a non-supported header. Contact your ISA Server administrator. (12156)"
In the logs the https status code reports:
"12156 The HTTP request includes a non-supported header. Contact your ISA Server administrator."

I have Windows 2003 SP1 with ISA 2004 SP2 on it.

Your help on this would be much appreciated.
Thanks.

(in reply to amber1)
Post #: 13
RE: SP2 URL problem - 24.Feb.2006 10:47:02 AM   
tinto

 

Posts: 225
Joined: 9.Sep.2004
From: Italy
Status: offline
quote:

ORIGINAL: amber1
I'm Running ISA 2004 as a web proxy on w2k3 sp1. I've just updated ISA 2004 from sp1 to sp2.


try this url

http://www.sun.com/books

if you get the same error... it's a SP2 bug.
I have downgraded to SP1 and I'm waiting for a fix from microsoft.

_____________________________

Tinto

(in reply to amber1)
Post #: 14
RE: SP2 URL problem - 24.Feb.2006 1:25:14 PM   
amber1

 

Posts: 15
Joined: 9.Feb.2006
Status: offline
Hi Guys,

goranb tried your URL http://www.vsp.com/member/htmls/member_home.jsp  and got the same proxy error although tinto's http://www.sun.com/books did display for me although not in the correct format. Its a tad annoying. Tom was my info of any use to you at all ???

Thanks

Dave

(in reply to tinto)
Post #: 15
RE: SP2 URL problem - 24.Feb.2006 4:09:54 PM   
goranb

 

Posts: 5
Joined: 26.May2004
Status: offline
tinto: I tried your url http://www.sun.com/books. I got the same error message. So I guess we will have to wait for Microsoft to fix it for us.
Thanks.

(in reply to amber1)
Post #: 16
RE: SP2 URL problem - 27.Feb.2006 8:35:13 PM   
PonchoHobono

 

Posts: 41
Joined: 22.Jan.2002
Status: offline
i get that error as well for www.delta.com.

(in reply to amber1)
Post #: 17
RE: SP2 URL problem - 27.Feb.2006 11:58:03 PM   
ealdridge

 

Posts: 84
Joined: 15.Nov.2005
Status: offline
quote:

ORIGINAL: PonchoHobono

i get that error as well for www.delta.com.


same here.. (but works fine behind my sp1 isa 2004 server), but get the same error you do behind an isa sp2 box.

Error Code: 500 Internal Server Error. The HTTP request includes a non-supported header. Contact your ISA Server administrator. (12156)

(in reply to PonchoHobono)
Post #: 18
RE: SP2 URL problem - 28.Feb.2006 1:04:28 PM   
amber1

 

Posts: 15
Joined: 9.Feb.2006
Status: offline
Just found out that you can use http://www.delta.com/home/index.jsp to get around the delta website problem on SP2
seemed to work for me, but no good for my ICC website. Hope this helps for now  whilst M/soft obtain a fix, I believe they are looking into it.....


(in reply to ealdridge)
Post #: 19
RE: SP2 URL problem - 16.Mar.2006 11:21:52 AM   
amber1

 

Posts: 15
Joined: 9.Feb.2006
Status: offline
Just had a reply from microsoft, there is a fix now for this issue, Microsoft said......

"Call PSS and ask for the hotfix for KB 915045.
The KB isn't posted yet, but this is the information they need to get you the patch. "

I've got their patch now and will attempt the fix shortly, watch this space !!! I hope its works

Tom thanks for your assistance on this one.

Dave

(in reply to amber1)
Post #: 20

Page:   [1] 2   next >   >> << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> General >> SP2 URL problem Page: [1] 2   next >   >>
Jump to: