Welcome to ISAserver.org

Webproxy ssl-tunnel problem

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> Webproxy ssl-tunnel problem

Page: [1]

Message

<< Older Topic Newer Topic >>

Webproxy ssl-tunnel problem - 16.Oct.2008 10:20:28 AM

dthebike

Posts: 2
Joined: 16.Oct.2008
Status: offline

I am getting the following in the ISA logs (and similar message in browser):

Failed Connection Attempt
Log type: Web Proxy (Forward)
Status: 12204 The specified Secure Sockets Layer (SSL) port is not allowed. ISA Server is not configured to allow SSL requests from this port. Most Web browsers use port 443 for SSL requests.
Rule:
Source: ( 192.168.222.150:0)
Destination: ( 192.168.11.254:0) <--IP address of ISA server
Request: https://login.yahoo.com:443
Filter information: Req ID: 13ace589; Req ID: 13ace589
Protocol: SSL-tunnel
User:xxxxxxxxx (an authenticated user name here)

So I am trying to access a https site on port 443 and it is still being blocked. Domain admin users can access the site OK, but ordinary mortals get blocked.
Configuration/Networks/InternalWebproxy/Authenication is Integrated & Basic.

Any ideas what is going wrong here or what I can check?

< Message edited by dthebike -- 16.Oct.2008 10:23:27 AM >

Post #: 1

Featured Links*

RE: Webproxy ssl-tunnel problem - 17.Oct.2008 7:08:59 AM

dthebike

Posts: 2
Joined: 16.Oct.2008
Status: offline

I have found the solution

. ISA was webchaining to a Websense web filtering application and in Networks/Webchaining, the Bridging tab for the Websense entry had no SSL redirection. As soon as I configured it the SSL sites worked fine.

(in reply to dthebike)

Post #: 2