Welcome to ISAserver.org

Web pages inaccessible via ISA 2004

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> General >> Web pages inaccessible via ISA 2004

Page: [1]

Message

<< Older Topic Newer Topic >>

Web pages inaccessible via ISA 2004 - 8.Apr.2005 10:02:00 AM

landoa

Posts: 26
Joined: 14.Mar.2005
Status: offline

Hello,

Could you explain why these pages are inaccessible via ISA 2004? We are running W2K SP4 in English.

http://dict.leo.org/?lp=ende&lang=de&searchLoc=0&cmpType=relaxed&relink=on§Hdr=on&spellToler=std&search=%E4nderung

http://geneva.ch/Map/default.cfm?X=499559&Y=118440&Scale=10000&Com=GenFve-CitT&Street=tschumi&Show

I can access those pages without the proxy. Or, if I activate encoding Unicode (UTF-8), it will work with the proxy, but with Chinese characters.

Can ISA 2004 process accents?

Thanks.

Post #: 1

Featured Links*

RE: Web pages inaccessible via ISA 2004 - 8.Apr.2005 10:03:00 AM

landoa

Posts: 26
Joined: 14.Mar.2005
Status: offline

The error we get is:

Error Code: 502 Proxy Error. The parameter is incorrect. (87)

(in reply to landoa)

Post #: 2

RE: Web pages inaccessible via ISA 2004 - 8.Apr.2005 4:43:00 PM

RuiFiske

Posts: 92
Joined: 8.Dec.2004
From: London
Status: offline

Hi there,

What you need to do is disable the blocking of High Bit Characters (unicode to you and me). You do this by editing the HTTP Filtering properties for the access rule that is allowing access. Right click on the rule, choose "Configure HTTP", which is sometimes known as the HTTP Security Filter, and then untick the checkbox.

A more detailed description from TechNet is here: http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/httpfiltering.mspx

Don't forget to rate me if this was helpful!

Good Luck

(in reply to landoa)

Post #: 3

RE: Web pages inaccessible via ISA 2004 - 11.Apr.2005 10:01:00 AM

landoa

Posts: 26
Joined: 14.Mar.2005
Status: offline

Hello,

"High Bit Characters" for the web access rule is already unchecked. Also, I don't think that would be the problem given the error code mentioned in my message before. What else could I check?

Thanks.

(in reply to landoa)

Post #: 4

RE: Web pages inaccessible via ISA 2004 - 11.Apr.2005 12:27:00 PM

RuiFiske

Posts: 92
Joined: 8.Dec.2004
From: London
Status: offline

Hi there,

That is the error message that you get when you have an illegal character in the URL. Both your URLs have "high bit" characters in them, which made it likely that this was the reason.

However, if the high bit checkbox is unchecked on the access rule that is providing the proxy access, then there must be another reason. Check the logs to make sure that it is this rule that is raising the exception.

Good luck.

(in reply to landoa)

Post #: 5

RE: Web pages inaccessible via ISA 2004 - 11.Apr.2005 2:50:00 PM

landoa

Posts: 26
Joined: 14.Mar.2005
Status: offline

Hello,

I added another rule with which I could test. The links work with no problem.

The only difference between the new rule and the rule that does not work are the HTTP Policy signatures. Once I removed all the HTTP Policy signatures, the original rule worked.

I don't see the relationship between HTTP signature settings and High-bit characters. And I need to keep those signature settings in my web access rule.

Any way to get around this?

Thanks.

(in reply to landoa)

Post #: 6

RE: Web pages inaccessible via ISA 2004 - 12.Apr.2005 10:14:00 AM

RuiFiske

Posts: 92
Joined: 8.Dec.2004
From: London
Status: offline

Hi,

The only thing you can do, of course, is edit the signatures until you get the desired results. There is something in the signatures that is blocking these URLs, but without seeing them, it is clearly impossible to know what that might be.

Do you have test server that you can test on, or just a production server?

(in reply to landoa)

Post #: 7

RE: Web pages inaccessible via ISA 2004 - 12.Apr.2005 4:35:00 PM

landoa

Posts: 26
Joined: 14.Mar.2005
Status: offline

I don't think there is a problem with one of the signatures. And I say that because those links were ONLY accessible once I removed ALL of the signatures.

I even created a new rule and added a signature. The link did not pass. I removed the signature and the link passed.

Sounds like a bug to me.

(in reply to landoa)

Post #: 8