Welcome to ISAserver.org

block download problem ?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> General >> block download problem ?

Page: [1]

Message

<< Older Topic Newer Topic >>

block download problem ? - 4.Aug.2008 1:06:00 PM

M_Fairouz

Posts: 10
Joined: 18.Mar.2008
Status: offline

i configure http to block spesific extentions ( exe, mp3, zip ... ) any way i found that there are some users can download some file extentions that i blocked !!!

here an example of the sites the user can download from :
http://www.aimini.net/view/?fid=Dt4plVHhjXhIxiwbWEdi
users can download mp3 songs from this website ! , but i configure http to block mp3 , how can i solve this problem any advice please , any idea :(

thanks all

Post #: 1

Featured Links*

RE: block download problem ? - 4.Aug.2008 3:15:19 PM

Rotorblade

Posts: 963
Joined: 27.Feb.2007
Status: offline

Hi,

Is the Web proxy filter enabled?

Do you have HTTP access rules that are higher in priority that do not have the content HTTP filters applied and which are allowing some users un-filtered access?

Are your Firewall clients bypassing the Web proxy?

Using ISA monitoring should help you shed some light to why this is happening.

HTH

RB

_____________________________

David Melvin
Ohio
MCSE: Security 2003, MCSA:Security 2003

(in reply to M_Fairouz)

Post #: 2

RE: block download problem ? - 4.Aug.2008 3:24:25 PM

Rotorblade

Posts: 963
Joined: 27.Feb.2007
Status: offline

Ultimately the best way I have found to handle it is through acceptable use policy. If the user fails to comprehend the meaning of no, don�t do it; then, HR will hand them a box for their personnel belongings and politely show them to the first available door.

RB

_____________________________

David Melvin
Ohio
MCSE: Security 2003, MCSA:Security 2003

(in reply to M_Fairouz)

Post #: 3

RE: block download problem ? - 4.Aug.2008 3:54:23 PM

M_Fairouz

Posts: 10
Joined: 18.Mar.2008
Status: offline

http filter enabled ,

in internal network properties i uncheck the box ( bypass proxy for web server in this network)

HTTP access rules are higher in priority .

any way mr .. they cant download from most sites but from few sites like i write above they can !

so its work but not with all sites dont know why ?

< Message edited by M_Fairouz -- 4.Aug.2008 3:59:12 PM >

(in reply to Rotorblade)

Post #: 4

RE: block download problem ? - 4.Aug.2008 6:03:55 PM

Rotorblade

Posts: 963
Joined: 27.Feb.2007
Status: offline

quote:

HTTP access rules are higher in priority.

Yes, but do you also possibly have other HTTP access rules higher in priority than the one that has the HTTP filters applied that is allowing some users access to the blocked content? Your HTTP filter is based on a per rule basis, so if there is another rule allowing HTTP access, the filter will never be applied. Using ISA logging monitor should confirm this.

quote]
in internal network properties i uncheck the box ( bypass proxy for web server in this network)

Has nothing to do with your issue and you should leave this one checked. This setting controls if ISA clients are to bypass ISA for internal web server requests.

If the Firewall client is being used, it�s possible that the user is by-passing the Web proxy through a Winsock application. Use ISA logging monitor, it�s your best friend!

HTH

RB

_____________________________

David Melvin
Ohio
MCSE: Security 2003, MCSA:Security 2003

(in reply to M_Fairouz)

Post #: 5

RE: block download problem ? - 5.Aug.2008 12:20:08 PM

M_Fairouz

Posts: 10
Joined: 18.Mar.2008
Status: offline

i think u do got it , the sites user download from dont end with extenstion because of that its not blocked !! did u get it, i dont have another rule allow http , i found that i can block this site if i use " content type" but if i do that program like messengers dont run !

so any advise here ?

(in reply to Rotorblade)

Post #: 6