Welcome to ISAserver.org

Users are rejected when they try to logon to a site

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> Users are rejected when they try to logon to a site

Page: [1]

Message

<< Older Topic Newer Topic >>

Users are rejected when they try to logon to a site - 7.Jan.2005 4:23:00 AM

lost30047

Posts: 6
Joined: 5.Jan.2005
Status: offline

Hi,
I have a problem. I have 15 sites that a certain group of users are allowed to go to. They are only allowed to go to these sites. When they go to these sites, they must logon to these sites. When they try to logon, they get my standard message: You are not allowed on this site.
I have setup in the "allowed site list"
https://*allowedsite.*
http://*allowedsite.*
http://*.allowedsite.*
and all combinations thereof.
Please help.
KB

Post #: 1

Featured Links*

RE: Users are rejected when they try to logon to a site - 8.Jan.2005 12:51:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi KB,

When SSL is required, the SSL connection requires entire access to the site. If you've limited access in any way to the site, such as using a wildcard or using inappropriate wildcard entries (as I see here), then the connection is denied because the ISA firewall cannot eval the path after the CONNECT action.

HTH,
Tom

(in reply to lost30047)

Post #: 2

RE: Users are rejected when they try to logon to a site - 8.Jan.2005 8:27:00 PM

lost30047

Posts: 6
Joined: 5.Jan.2005
Status: offline

Tom,
Thanks for answering. I used your book to set up these entries. I also had an entry for allowed site https://www.allowedsite.com
However, even this did not allow the user to log-on to the site that they needed access to.
What should my allowed entry site be?
Keep in mind that within www.allowedsite.com, there are other hyperlinks that the user needs acces to. IE support.allowedsite.com and insurance.allowedsite.com/products.
Thanks in advance.
KB

(in reply to lost30047)

Post #: 3