Welcome to ISAserver.org

Some Outbound connections get blocked

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> ISA 2004 SBS >> Some Outbound connections get blocked

Page: [1]

Message

<< Older Topic Newer Topic >>

Some Outbound connections get blocked - 31.Aug.2005 4:05:00 AM

dilettant

Posts: 1
Joined: 31.Aug.2005
Status: offline

My users have some troubles accessing websites that use https and recently in joining webex-meetings.
All outbound connections are allowed, but the log file shows that the connections are blocked, but no blocking rule is listed. The funny thing is that https sites are only blocked partially, e.g. a button/clickable image is missing. Some sites work upon reloading the content, some don't. The users simply get a timeout. This is really annoing when you are going through a booking process and fial at the very last step: you simply don't know if you have a reservation or not.
IMHO this is a bug.
The version is ISA 2004 SBS w/Sp1.

Post #: 1

Featured Links*

RE: Some Outbound connections get blocked - 31.Aug.2005 8:43:00 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Dil,

Are the browsers configured to use HTTP 1.1 through proxy connections?

What rule do you have in place to allow the HTTP/HTTPS connections?

Thanks!
Tom

(in reply to dilettant)

Post #: 2

RE: Some Outbound connections get blocked - 15.Sep.2005 12:17:00 PM

Guest

I'm having the same problem, but sometimes the sites are blocked completely. For instance, www.ingrammicro.com is being blocked. I've even set direct access rules for the site and still cannot get to it. I have internal and local host access to external involving http and https. Does that make sense?

(in reply to dilettant)

Post #: 3

RE: Some Outbound connections get blocked - 14.Nov.2005 5:20:18 PM

dezaer

Posts: 5
Joined: 4.Aug.2004
Status: offline

Hi

I've got the same problem when trying to access ingrammicro.com.
Did you find how to do with ISA ??
Thanks for your reply - We 've got a lots of unsatisfied users !!

(in reply to Guest)

Post #: 4

RE: Some Outbound connections get blocked - 15.Nov.2005 8:13:12 AM

sam_hunter

Posts: 46
Joined: 12.Nov.2005
Status: offline

Stupid tcp/ip connection per user setting.

SBS ISA 2004 settings are set at 40 per tcp/ip connection..... it should be 160 per tcp/ip connection.

(in reply to dezaer)

Post #: 5

RE: Some Outbound connections get blocked - 15.Nov.2005 12:17:46 PM

rongeurdos

Posts: 5
Joined: 25.Jun.2002
Status: offline

----- UPDATED INFORMATION-----
my request is now at http://forums.isaserver.org/m_2001997537/mpage_1/key_/tm.htm#2001997537 'cause i've just seen my colleague and i are posting in the wrong forum (we are not using SBS).
sorry

---------------------------------

hi all,

1st at all, sorry about my english grammar

i'm working with Dezaer, and we don't use an SBS ; it's a windows 2003 standard SP1 plus Isa Server 2004.
so, the connection limit is 1000 per rule ans 160 per client.

The incredible mistake is :
- originally, nor with the isa admin user, either with a TSE session, we successfully authenticate on the Ingram web site.
- since we've disabled the "proxy web filter" from http protocol parameter, the isa admin user can successfull log on the Ingram web site (cause this account doesn't need a proxy parameter to web browse).
plus
we've configured our TSE server from which every user account doesn't need a proxy parameter ; then, an user account from a TSE session can successfully Ingram authenticate

but
if an user log on his professional workstation (so, NOT with a TSE session), this user cannot successfully authenticate with the Ingram logon request BECAUSE the proxy web browser parameter is defined with the Isa server address

one solution could be to not configure the clients as web proxy clients... only, we filter the accesses.

with the hope you can help us.

< Message edited by rongeurdos -- 15.Nov.2005 5:59:11 PM >

(in reply to dilettant)

Post #: 6