Welcome to ISAserver.org

Understanding the Web Proxy and Firewall Client Automatic Configuration

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Cache] >> Web Proxy client >> Understanding the Web Proxy and Firewall Client Automatic Configuration

Page: [1] 2 3 next > >>

Message

<< Older Topic Newer Topic >>

Understanding the Web Proxy and Firewall Client Automat... - 11.Jun.2005 5:45:00 AM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

This thread is for discussing the article Understanding the Web Proxy and Firewall Client Automatic Configuration.

Thanks,
Stefaan

[ June 11, 2005, 07:30 AM: Message edited by: spouseele ]

Post #: 1

Featured Links*

RE: Understanding the Web Proxy and Firewall Client Aut... - 11.Jun.2005 10:23:00 AM

mpkn3rd

Posts: 6
Joined: 13.May2005
Status: offline

Thank you for the article. It was a technical reassurance as to what I was intuitively seeing in my setups. It also helped resolve a slight difference of opinion with a friend. I found the most interesting point to be the priority assigned to the method of discovery.

A very well written article, thank you again.

(in reply to spouseele)

Post #: 2

RE: Understanding the Web Proxy and Firewall Client Aut... - 11.Jun.2005 11:48:00 AM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi mpkn3rd,

thanks for the compliments! [Smile]

BTW --- I knew for a very long time something strange was happening for an admin user. When we observed the same behaviour for a normal user when rolling out WinXP SP2, I had plans to investigate it further in great detail and this is the result.

Thanks,
Stefaan

(in reply to spouseele)

Post #: 3

RE: Understanding the Web Proxy and Firewall Client Aut... - 13.Jun.2005 11:44:00 AM

Guest

Good article on auto discovery and the ISA Firewall & Proxy client!

Could you please write a follow up article covering how to configure http and ftp internet access via the ISA Firewall & Proxy client? I've been unable to get it right, especially for mobile computers that are behind ISA and then are not. For example, my Firewall Clients can't download McAfee dat updates, but if I remove the Firewall Client, no problem.

(in reply to spouseele)

Post #: 4

RE: Understanding the Web Proxy and Firewall Client Aut... - 13.Jun.2005 12:10:00 PM

agentsmith

Posts: 5
Joined: 18.Jan.2005
From: Austria
Status: offline

Good article !

Just wanted to let you know that the DHCP-Delay is true for our installation (ISA2k-ArrayFP1SP2) and Win-XP-SP1 (SP2 soon), so the issue has been there in autoconfiguration of ISA2k already. Will you publish an update on the ticket raised with M$ Premium Support ?

wbr
Robert

(in reply to spouseele)

Post #: 5

RE: Understanding the Web Proxy and Firewall Client Aut... - 13.Jun.2005 3:14:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi mikep,

there are already many articles on this site who explains very well how to give outbound access to internal clients. If you have an access issue, please create a new topic in the relevant message board section.

Thanks,
Stefaan

(in reply to spouseele)

Post #: 6

RE: Understanding the Web Proxy and Firewall Client Aut... - 13.Jun.2005 3:27:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Robert,

yep, the DHCP delay occures on every OS I've checked out as long as the logged in user has local administrator rights. Because it is client issue, the ISA version 2000/2004 comes not into play.

Yes, I'll post a message in this topic when I got an answer from Microsoft PSS. The ticket was created on may 26, 2005 and is now escalated to level 2 and 3 support.

BTW --- thanks for the compliments. [Smile]

HTH,
Stefaan

(in reply to spouseele)

Post #: 7

RE: Understanding the Web Proxy and Firewall Client Aut... - 12.Jul.2005 4:31:00 AM

Jeroen_317

Posts: 73
Joined: 18.Dec.2002
From: Belgium
Status: offline

Stefaan,

that was an excellent article!

Did you get any response from Microsoft yet?

I have another question: do you know how you can script that setting into Internet explorer? It's possible with a group policy but then that setting is fixed. I would like to get it in a loginscript but apparently it's not that easy.
The other settings such as use this proxy is just a registry edit. Putting the checkmark next to "Automatically detect proxy" appears quite difficult.

Does anyone know how to set it using a vbs-script?

Kind regards,
Jeroen.

(in reply to spouseele)

Post #: 8

RE: Understanding the Web Proxy and Firewall Client Aut... - 12.Jul.2005 3:38:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Jeroen,

thanks for the compliments! [Smile]

Before I went on holiday, Microsoft was intensively researching the problem and the latest news I have was that they could reproduce the problem. So, the ticket is still open. Hopefully I'll get some update next week when I'm back at the office. [Wink]

I have no scripting experience whatsoever. So, it's very hard for me to answer those questions. [Big Grin]

HTH,
Stefaan

(in reply to spouseele)

Post #: 9

RE: Understanding the Web Proxy and Firewall Client Aut... - 14.Jul.2005 5:56:00 AM

Jeroen_317

Posts: 73
Joined: 18.Dec.2002
From: Belgium
Status: offline

Stefaan,

I've found the responsible regkey:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings

this is a REG_BINARY type which means hard to edit.
But monitoring this shows that one thing changes. It might be different from one company to the other. In that REG_BINARY you will also see your proxy exception list.

Adding this to a loginscript makes it work. I don't know how you can just adjust a certain piece in a REG_BINARY by script, so if anyone does know, plz post [Smile]

Jeroen.

(in reply to spouseele)

Post #: 10

RE: Understanding the Web Proxy and Firewall Client Aut... - 14.Jul.2005 4:15:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Jeroen,

thanks for the update!

Stefaan

(in reply to spouseele)

Post #: 11

RE: Understanding the Web Proxy and Firewall Client Aut... - 15.Jul.2005 8:56:00 AM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Amazing Article and its give me a solution for my post:
http://forums.isaserver.org/ultimatebb.cgi?ubb=reply;f=20;t=001997

I have questions:

Are the Auto. Detect settings or Auto. Config. script considered as WP not S-NAT?

How can i solve the problem of ALL USER that dont support DHCP option 252 in WIN. XP SP2?

Thanks,

(in reply to spouseele)

Post #: 12

RE: Understanding the Web Proxy and Firewall Client Aut... - 15.Jul.2005 4:18:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Al-Taee,

quote:
Are the Auto. Detect settings or Auto. Config. script considered as WP not S-NAT?

The article is all about Web Proxy and Firewall Client Automatic Configuration. So, once IE has gone through that mechanism then the host should be a Web Proxy client.

quote:
How can i solve the problem of ALL USER that dont support DHCP option 252 in WIN. XP SP2?

Sorry, I don't understand your question. [Confused]

HTH,
Stefaan

(in reply to spouseele)

Post #: 13

RE: Understanding the Web Proxy and Firewall Client Aut... - 16.Jul.2005 6:21:00 AM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Well, i think you answer my question in my other post because i thought that ALL USER is the same for Acess Rule & Automatic Config.

My Problem is i have AD Group contain users and they have rules for accessing Internet with Automatic detect settings (WP) for both DHCP 252 and WPAD Alias DNS. Suddnly the Internet stop because a problem in DNS and i solved the problem by adding ALL USER to the access rule. So is that problem in authentaction as you said or in the automatic configuration?

Thanks,

(in reply to spouseele)

Post #: 14

RE: Understanding the Web Proxy and Firewall Client Aut... - 16.Jul.2005 4:43:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Al-Taee,

check out http://forums.isaserver.org/ultimatebb.cgi?ubb=get_topic;f=20;t=001997 .

HTH,
Stefaan

(in reply to spouseele)

Post #: 15

RE: Understanding the Web Proxy and Firewall Client Aut... - 16.Jul.2005 4:59:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi all,

as mentioned in my article, the discovered excessive delays in the DHCP part of the automatic discovery process has been confirmed by Microsoft. It would appear that Internet Explorer is not interacting correctly with the API. Therefore the ticket is moved to the Internet Explorer support team.

We'll keep you informed of any progress with this nasty problem.

HTH,
Stefaan

(in reply to spouseele)

Post #: 16

RE: Understanding the Web Proxy and Firewall Client Aut... - 27.Jul.2005 1:40:00 AM

Nobbyness

Posts: 7
Joined: 21.Jul.2003
From: Tallahassee
Status: offline

Stefan, would like to discuss offline. Please contact me direct at patrick.salmon@hp.com

nothing that can't later be shared with the forum. Just want to bounce some ideas and thoughts around with you.

thanks, Pat.

(in reply to spouseele)

Post #: 17

RE: Understanding the Web Proxy and Firewall Client Aut... - 27.Jul.2005 11:54:00 AM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Patrick,

will contact you offline.

Thanks,
Stefaan

(in reply to spouseele)

Post #: 18

RE: Understanding the Web Proxy and Firewall Client Aut... - 12.Aug.2005 11:28:00 AM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi Stefaan,

I post a reply since 6 days regarding my problem. As a remind i have Win. XP clients with auto discovery in IE except my Win. 2k3 which work only with proxy server in IE)but they are only work when i add all user in the firewall access policy.

The ISA logs refer my clients as S-NAT.

Thanks,

(in reply to spouseele)

Post #: 19

RE: Understanding the Web Proxy and Firewall Client Aut... - 13.Aug.2005 4:43:00 PM