Welcome to ISAserver.org

Web chaining breaking - but not when proxying via 8080

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> General >> Web chaining breaking - but not when proxying via 8080

Page: [1]

Message

<< Older Topic Newer Topic >>

Web chaining breaking - but not when proxying via 8080 - 20.Sep.2006 3:03:59 AM

ImTexasPeter

Posts: 5
Joined: 20.Sep.2006
Status: offline

Hi there,

Bit of an odd one here, but if I upstream to my ISP and leave ISA to do all the stripping-n-forwarding, content goes missing (mainly images) and the layout goes nuts - taking a long time to pull down even the basics of the page.

If I leave the setting, but tell each client to go use the server on 8080 as it's proxy, the same setting takes effect but the layout is perfect.

Any clues as to what could be amiss here? I've turned ISA inside and out and as far as I can tell it seems like some kind of unfixable bug.

Many thanks

Pete

Post #: 1

Featured Links*

RE: Web chaining breaking - but not when proxying via 8080 - 20.Sep.2006 4:28:35 AM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Peter,

I'm not sure what you're trying to accomplish here. Are these Web proxy clients?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ImTexasPeter)

Post #: 2

RE: Web chaining breaking - but not when proxying via 8080 - 20.Sep.2006 9:53:01 AM

ImTexasPeter

Posts: 5
Joined: 20.Sep.2006
Status: offline

Hi Tom,

I'm setting up web chaining so anything "routed" via the box that is HTTP based will flow via the web proxy, rather than install the firewall client on each of the machines.

It works, but breaks pages, and there are no obvious errors on the log with regard to random disconnects or unavailable proxy servers. We want to avoid installing the proxy client on the PC's as we may also have people joining the network who aren't part of the domain and therefore it seemed logical to use web chaining.

As I said, when web chaining is on and I'm just plain routing through ISA, the above happens. If I configure the client PC to use 8080, browsing is perfect.

Thanks!

< Message edited by ImTexasPeter -- 20.Sep.2006 1:40:49 PM >

(in reply to tshinder)

Post #: 3

RE: Web chaining breaking - but not when proxying via 8080 - 20.Sep.2006 1:07:07 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Peter,

OK, I still don't get it.

Web chaining is when you configure a downstream ISA Firewall to act as a Web proxy client to an upstream ISA Firewall. I don't see this configuration taking place in your description, so I don't see how "Web chaining" is entering the equation.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ImTexasPeter)

Post #: 4

RE: Web chaining breaking - but not when proxying via 8080 - 20.Sep.2006 1:39:56 PM

ImTexasPeter

Posts: 5
Joined: 20.Sep.2006
Status: offline

Hi Tom,

Thanks for the quick reply!

Basically we've got

PC's > ISA Server

We want the ISA server to upstream to our ISP's proxy (for various reasons) but without configuring desktops and just do it on the fly (ie. No use of PAC's or anything else - transparent pushing to the ISP proxy).

Am I getting the wrong end of the stick here?

Cheers

TP

(in reply to tshinder)

Post #: 5

RE: Web chaining breaking - but not when proxying via 8080 - 20.Sep.2006 1:49:24 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi TP,

OK, in that case create a Web chaining Rule that chains the ISA Firewall with the ISP proxy.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ImTexasPeter)

Post #: 6

RE: Web chaining breaking - but not when proxying via 8080 - 20.Sep.2006 1:53:01 PM

ImTexasPeter

Posts: 5
Joined: 20.Sep.2006
Status: offline

Hey Tom,

That's what we've done but when we do it "transparently" it simply drops pictures, formatting goes crazy etc. If I tell the clients to use 8080 however, it works fine.

Sounds odd I know!

Tks for your guidance so far.

(in reply to tshinder)

Post #: 7

RE: Web chaining breaking - but not when proxying via 8080 - 21.Sep.2006 2:44:25 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Tex,

OK, I think I got it.

It's not working for SecureNAT clients but its working fine for Web proxy clients.

Could be a problem with the upstream Web proxy. Is it an ISA Firewall or a Blue Coat? There are plenty of bugs in Blue Coats that could be causing the problem.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ImTexasPeter)

Post #: 8