Welcome to ISAserver.org

TS died - ISA 2004

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Server Publishing >> TS died - ISA 2004

Page: [1]

Message

<< Older Topic Newer Topic >>

TS died - ISA 2004 - 10.Jun.2008 7:24:36 PM

kvirani

Posts: 1
Joined: 10.Jun.2008
Status: offline

OK, this one is strange. TS was published fine externally and through a site-to-site VPN. Clients can connect fine through the S2SVPN, but as of yesterday, if they try to connect to the external, it fails (ungracefully). Usually they get a black screen and then eventually a "The connection to the remote computer was lost..." pops up. Sometimes they get a little further before it dies.

The only message we get on the ISA 2004 server is:

Denied Connection
ISASERVER 6/10/2008 5:49:52 PM

Log type: Firewall service

Status: A packet was dropped by the TCP/IP stack.

Rule: -

Source: External ( x.x.x.x:3222)

Destination: Internal ( x.x.x.x:3389)

Protocol: RDP (Terminal Services)

User: -

Which equates to this:
FWX_E_TCPIPDROP_PACKET_DROPPED

0xC0040015
A packet was dropped by the TCP/IP stack.
A really bad work-around:
The strange thing is that if we delete the client's user profile and try again, it works. This isn't a good idea for our travelling users. Eventually it will go bad again, but we're not certain how that happens.

Any ideas would be most welcome.

This started happening after trying to add another S2SVPN to a partner organization, but that effort didn't go so well. We reverted to the ISA configuration before we started that process.

Thanks,

K

Post #: 1

Featured Links*

RE: TS died - ISA 2004 - 12.Jun.2008 10:30:21 AM

tshinder

Posts: 47127
Joined: 10.Jan.2001
From: Texas
Status: offline

What do you mean by deleting the users "profile"? You mean their account profile in the AD?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to kvirani)

Post #: 2