• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Surf Control 5.0 for ISA + ISA 2004 = Not Working. Help Please

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Misc.] >> 3rd Party Add-ons >> Surf Control 5.0 for ISA + ISA 2004 = Not Working. Help Please Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
Surf Control 5.0 for ISA + ISA 2004 = Not Working. Help... - 27.May2005 2:41:00 PM   
tbird2340

 

Posts: 14
Joined: 27.May2005
Status: offline
Ok. I'm trying to get Web Filter for ISA 5.0 to work with ISA 2004 and I am having some problems. I am not getting any data in the real-time monitor or anything for that matter.

I did a fresh install of Windows Server 2003 and ISA 2004. I then installed MSDE and Web Filter 5.0. I went into the rules wizard and just created one rule to "Allow - Anyone - Anywhere - Anytime" just to see if I could pick up any data.

Our ISA server has two network cards. One of the network cards has an internal IP address and is plugged into a hub on our internal network. The other network card has an IP address that is on our DMZ of our firewall. So all traffic should flow through the ISA server.

I have setup a test computer and put the IP address of the internal network card of the ISA server as the gateway. When I do a tracert from this test computer to an internet address the first hop it goes to is the ISA server so I know that the traffic is flowing through the ISA server.

In ISA I've setup one access rule. It's setup as follows:

Action: ALLOW
Protocols: HTTP/HTTPS
From / Listener: ALL NETWORKS
To: EXTERNAL
Condition: ALL USERS

What do I have setup wrong? Thanks so much in advance!
Post #: 1
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 28.May2005 2:06:00 AM   
leslie

 

Posts: 61
Joined: 31.Jul.2003
Status: offline
Hi, Is your isa setup working without surfcontrol??? I am no expert but have tested surfcontrol a lot and might be able to help....my setup does anyway. Dont panic..should be simple

(in reply to tbird2340)
Post #: 2
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 28.May2005 11:04:00 AM   
tbird2340

 

Posts: 14
Joined: 27.May2005
Status: offline
Yes, ISA seems to be working fine.

I setup that rule in ISA to be the web proxy. When I go into ISA I can see the traffic passing through so I have no clue why surf control is not picking anything up.

Thanks for the help.

(in reply to tbird2340)
Post #: 3
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 28.May2005 10:34:00 PM   
Sunny.C

 

Posts: 801
Joined: 5.Apr.2005
From: sydney
Status: offline
This can happen if you have multiple hubs in place, a few questions for you.
1.Have you ever had surfcontrol working?

2.Did you change the location on the isa server?(on hub)

(in reply to tbird2340)
Post #: 4
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 29.May2005 11:50:00 AM   
leslie

 

Posts: 61
Joined: 31.Jul.2003
Status: offline
Is your surfcotrol installed as a plugin..(ie on the isa box) or are you using it as a standalone. if you are, you may need to configure your switch.

(in reply to tbird2340)
Post #: 5
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 30.May2005 12:40:00 AM   
leslie

 

Posts: 61
Joined: 31.Jul.2003
Status: offline
Hi ,
Is the web fileter plugin enabled......just a thought as I have sometimes found mine disabled.

(in reply to tbird2340)
Post #: 6
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 30.May2005 10:16:00 AM   
leslie

 

Posts: 61
Joined: 31.Jul.2003
Status: offline
Just rechecked your original post...the gurus will probably correct me but I dont think your gateway on the client computer should be set at all. Just set up your explorer to use the isaserver on port 8080(default) and surfcontrol will monitor everything

(in reply to tbird2340)
Post #: 7
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 30.May2005 6:03:00 PM   
tbird2340

 

Posts: 14
Joined: 27.May2005
Status: offline
quote:
Originally posted by Sunny.C:
This can happen if you have multiple hubs in place, a few questions for you.
1.Have you ever had surfcontrol working?

2.Did you change the location on the isa server?(on hub)

We have never had surf control working on this ISA server. We have had the stand alone product installed on a Windows 2000 server for a couple years and it works but we want to use the ISA version coupled with ISA server.

Both nic cards on the ISA server are plugged into two different hubs.

(in reply to tbird2340)
Post #: 8
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 30.May2005 6:04:00 PM   
tbird2340

 

Posts: 14
Joined: 27.May2005
Status: offline
quote:
Originally posted by Leslie Tindale:
Is your surfcotrol installed as a plugin..(ie on the isa box) or are you using it as a standalone. if you are, you may need to configure your switch.

?? I installed Surf Control for ISA. I don't remember it asking me if I wanted to install it as stand alone or plugin.

(in reply to tbird2340)
Post #: 9
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 30.May2005 6:04:00 PM   
tbird2340

 

Posts: 14
Joined: 27.May2005
Status: offline
quote:
Originally posted by Leslie Tindale:
Hi ,
Is the web fileter plugin enabled......just a thought as I have sometimes found mine disabled.

Yes, the Surf Control plugin is indeed enabled on the ISA server.

(in reply to tbird2340)
Post #: 10
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 30.May2005 6:06:00 PM   
tbird2340

 

Posts: 14
Joined: 27.May2005
Status: offline
quote:
Originally posted by Leslie Tindale:
Just rechecked your original post...the gurus will probably correct me but I dont think your gateway on the client computer should be set at all. Just set up your explorer to use the isaserver on port 8080(default) and surfcontrol will monitor everything

The reason I have my gateway as the ISA server is because I want to make sure it goes through the ISA server. When I do a tracert it is the first hop (which I want). If I use the default gateway of all the other clients at this location it will go through the firewall first and not through the ISA server. I will try that on Tuesday though.
Thanks for all the help.

(in reply to tbird2340)
Post #: 11
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 31.May2005 7:51:00 AM   
tbird2340

 

Posts: 14
Joined: 27.May2005
Status: offline
UPDATE:

I changed my proxy settings in my client browser from:

"Use Automatic Configuration Script
Address: tbird2340)
Post #: 12
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 31.May2005 8:03:00 AM   
tbird2340

 

Posts: 14
Joined: 27.May2005
Status: offline
OK. It looks like it's picking up data OK now.

One other problem I'm having.

It's not picking up the domain username. It's just picking up the PC name.

(in reply to tbird2340)
Post #: 13
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 31.May2005 8:22:00 AM   
Sunny.C

 

Posts: 801
Joined: 5.Apr.2005
From: sydney
Status: offline
Right click on the surf service located on task bar. In there as i recall there should be a options which you will have to click, i think it's something like "DNS Name". Sorry i can't really remember but you should find it easy.
Regards.

(in reply to tbird2340)
Post #: 14
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 31.May2005 8:26:00 AM   
tbird2340

 

Posts: 14
Joined: 27.May2005
Status: offline
Actually, what I had to do was change my web proxy rule from allowing anyone to allowing "annonymous users". Then it picked up the username.

(in reply to tbird2340)
Post #: 15
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 31.May2005 3:10:00 PM   
tbird2340

 

Posts: 14
Joined: 27.May2005
Status: offline
Well I just noticed another problem. I was logged into the ISA server and the test client with my network username. In Surf Control I was being tracked and my username was tracked as well.

However, when I log into my test client with a different username and try to access the Internet I get a pop up window asking for username / password. I'm assuming this is because I changed the ISA rule from allowing anyone to only allowing annonymous users. I changed it back to allow anyone and now I can get on the Internet with that user but Surf Control is again not tracking the username.

Ideas?

(in reply to tbird2340)
Post #: 16
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 31.May2005 6:54:00 PM   
Sunny.C

 

Posts: 801
Joined: 5.Apr.2005
From: sydney
Status: offline
You said you had 2 hubs.. I am assuming that they and linked to 1 another. Try relocating your surfconrtrol server.

(in reply to tbird2340)
Post #: 17
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 1.Jun.2005 1:19:00 AM   
leslie

 

Posts: 61
Joined: 31.Jul.2003
Status: offline
Rather than allow anonymous acces or anyone, create a set of users or one user and allow acces to these users only. Also, for surfcontrol, right click on the icon in the task bar and look for the option to enable workstation and or user name resolution. Should be able to monitor everything and logi with different user names...provided you have granted them access. Its pretty simple, give it a shot and let me know if you need any more help.

(in reply to tbird2340)
Post #: 18
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 1.Jun.2005 8:13:00 AM   
tbird2340

 

Posts: 14
Joined: 27.May2005
Status: offline
I'm an idiot. I didn't mean I changed it to allow only annonymous users... I changed it to only allow AUTHENTICATED users. Sorry about that.

Anyways, I went to configuration > networks > internal networks > web proxy > authentication, and I checked "Require all users to authenticate" and I left the ISA rule to allow anyone.

When I try to bring up a webpage on the test client a login window pops up asking for a username and password to connect to the ISA server. This only happens for users that have NOT logged into the actual ISA server.

What I mean by that is... My user has logged into the ISA server with my domain login and I am able to bring up webpages and get tracked on my test client. However, if I log into my test client with my basic test user (that has not logged into the actual ISA server before) then I get that pop up.

Any ideas?

Thanks for all the help.

(in reply to tbird2340)
Post #: 19
RE: Surf Control 5.0 for ISA + ISA 2004 = Not Working. ... - 1.Jun.2005 10:42:00 AM   
tbird2340

 

Posts: 14
Joined: 27.May2005
Status: offline
Looks like I've figured out why it is happening but I do not know how to fix it. I am getting Event ID 1053 errors.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1053
Date: 6/1/2005
Time: 10:31:21 AM
User: NT AUTHORITY\SYSTEM
Computer: FPBISA-BD01
Description:
Windows cannot determine the user or computer name. (The remote procedure call failed and did not execute. ). Group Policy processing aborted.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Any ideas on how to fix this??

(in reply to tbird2340)
Post #: 20

Page:   [1] 2   next >   >> << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Misc.] >> 3rd Party Add-ons >> Surf Control 5.0 for ISA + ISA 2004 = Not Working. Help Please Page: [1] 2   next >   >>
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts