Welcome to ISAserver.org

Some Websites wok others do not

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> Some Websites wok others do not

Page: [1]

Message

<< Older Topic Newer Topic >>

Some Websites wok others do not - 24.Feb.2006 12:55:57 PM

Varsada

Posts: 5
Joined: 20.Feb.2006
Status: offline

Hi all,

To anyone that did read my last problem post it still has not been resolved to my dismay, I am sure I will however, hopefully this problem will produce more response.

Currently I have ISA 2004 Standard installed on a Windows 2003 Standard server configured to be a Member Server on a Windows 2003 SBS Domain environment.
All clients are running Windows XP Pro with SP2 installed along with all the latest updates etc, all clients can connect to the domain and obtain an IP from the DHCP server.
I have also setup Remote VPN Access which also works, although the clients seems to only receive IP addressing from the 168 subnet which is odd ?

The problem I am concerned with at present is the fact that while clients can get out to the internet, some sites people cannot seem to access, most people have not noticed this so far which means that this is only a couple of sites so far.

The sites in question are:

yell.com
travelex.com

Every other site I can gain access to, I have even plugged a laptop directly into one of my router ports to bypass ISA to make sure that this is an ISA issue and the laptop can get out to the site.

ISA 2004 has had SP1 installed and earlier today I installed SP2, I have also disabled chaching in the event that this was causing any issues but these have not solved this odd problem.
There does not seem to be a hotfix out for this problem at Microsoft.

Anybody else experienced this wonderful feature?
If so what was done to resolve the issue.

V

Post #: 1

Featured Links*

RE: Some Websites wok others do not - 6.Mar.2006 2:57:51 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi V,

I check out those sites and have no problems reaching them, so ISA isn't blocking the sites unless you configured the ISA firewall to block the sites.

As for the VPN issue, make sure the DHCP server is configured on the corpnet and also make sure that you've configured the correct interface in the ISA firewall console to contact the DHCP server.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Varsada)

Post #: 2

RE: Some Websites wok others do not - 27.Apr.2006 7:52:02 AM

bennyc@hafaguam.com

Posts: 13
Joined: 19.Dec.2005
Status: offline

on the server go to dns forwarders tab make sure it's correct, when you click all other domain or server make sure there is no ip addresses there, if you have a forwarder click new and then add the ip address then click add.
when you create a vpn connection make sure you uncheck use default gateway on the properties page.

(in reply to tshinder)

Post #: 3

RE: Some Websites wok others do not - 27.Apr.2006 11:03:15 AM

elmajdal

Posts: 5103
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: online

quote:

ORIGINAL: bennyc@hafaguam.com
when you create a vpn connection make sure you uncheck use default gateway on the properties page.

Spilt tunneling !!!

Spilt tunneling is not a policy that most corporates allow for remote users on the internet who vpn in,
Having an unprotected device on the internet with full access to corporate facilites is not a good thing, neither it is good to allow uncontrolled devices to talk to the pc whilst vpn'd into the office becuase the other machines may well have virus's, trojans .

so why would u need split tunneling while u can : Enabling Internet Access for VPN Clients Connected to an ISA Firewall

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to bennyc@hafaguam.com)

Post #: 4