Welcome to ISAserver.org

Troubleshooting resources for IAG 2007

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [IAG 2007] >> General >> Troubleshooting resources for IAG 2007

Page: [1]

Message

<< Older Topic Newer Topic >>

Troubleshooting resources for IAG 2007 - 7.Oct.2008 11:09:21 PM

TheSecurityEagle

Posts: 3
Joined: 7.Oct.2008
Status: offline

Hi All,

I thought it would be good to start with a thread that covers the information resources and tools to troubleshoot IAG. I have found information in these references that explained and expanded my understanding of IAG.

IAG User guide:
http://download.microsoft.com/download/2/F/9/2F9D9113-B84B-4838-98A0-A3AEFA6608E2/IAG_UserGuide.pdf

IAG Advanced User Guide: http://download.microsoft.com/download/2/F/9/2F9D9113-B84B-4838-98A0-A3AEFA6608E2/IAG_AdvancedUserGuide.pdf

You might also consider downloading the following tools:

HTTPwatch (Http://www.httpwatch.com):

This free tool displays the most basic of information like verb used, URL, and basic timing. A pay for version offers advanced features.

LSPview (http://download.zonelabs.com/bin/free/beta/downloads/index.html)

This free tool assists in understanding the client component use of the Layered Service Providers (LSP) and can aid in issues of competing LSP/NSP modules. http://download.zonelabs.com/bin/free/beta/downloads/index.html

I am sure other people will add thier favorites to this thread. Lets see your favorite tools and resources!

Dan Watson

Post #: 1

Featured Links*

RE: Troubleshooting resources for IAG 2007 - 8.Oct.2008 7:27:33 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Dan,

Thanks!!!

These are excellent resources.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to TheSecurityEagle)

Post #: 2

RE: Troubleshooting resources for IAG 2007 - 9.Nov.2008 7:27:58 PM

schmoilito

Posts: 2
Joined: 9.Nov.2008
Status: offline

When I was troubleshooting Whale devices for a living, one tool that made me a hero for fixing broken File Access drive mapping applications was FileMon (http://technet.microsoft.com/en-us/sysinternals/bb896642.aspx). Filemon lets you see, among other things, the File Access process attempt to execute the users logon script on the IAG server.

For troubleshooting HTTP applications, HTTP Watch is a good, albeit expensive, tool for monitoring HTTP traffic in the browser. However, there are a number of free local HTTP proxies that not only allow you to view the HTTP request/response, but also alter them before they are rendered in the browser or sent to the IAG/web server.

A tool like this is great when you need to reverse engineer complex JavaScript that is breaking because of HAT (host address translation). These proxies allow you to determine exactly how to fix the application code without messing around with AppWrap files and/or SRAtemplates. Once you determine the fix, you can then make the changes directly in the IAG config files. These tools will save you time and config activations.
http://www.parosproxy.org/index.shtml
http://www.owasp.org/index.php/Category:OWASP_WebScarab_Project

WireShark is another standard tool. This application is a network sniffer that lets you see what is going out on the wire - great to have on the IAG box. You'd be surprised how often the IAG likes to make DNS requests for hosts in its config :-)

Cheers
Mike
http://schmoil.blogspot.com

_____________________________

Whale Communications Tech Support Alumni
Senior Consultant
Intrepidus Group, Inc.
http://www.intrepidusgroup.com
http://blog.phishme.com

(in reply to TheSecurityEagle)

Post #: 3

RE: Troubleshooting resources for IAG 2007 - 11.Nov.2008 8:11:40 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Mike,

Thanks for the tips!

BTW -- if you haven't seen Network Monitor 3.2, you might want to give it a look. MS has done a lot with the tool and it's getting to be something that provides a lot of value to the network analyzer.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to schmoilito)

Post #: 4