I am facing a problem with my ISA 2006... It is configured to allow everything, though none of websites is opening except for some sites like google For example when i open yahoo.com and enable the loging in the ISA, i would get a denied action on the HTTP request and below is more info about that log:
Denied Connection Log type: Web Proxy (Forward) Status: 12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied. Rule: Source: Internal (128.69.1.125) Destination: (128.69.1.125:80) Request: GET http://www.yahoo.com/Filter information: Req ID: 0d088078; Compression: client=No, server=No, compress rate=0% decompress rate=0% Protocol: http User: anonymous Additional information Client agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2; .NET CLR 1.1.4322)Object source: (No source information is available.)Cache info: 0x0Processing time: 1 MIME type:and eventually the page will not be displayed and here what i get from that page:
Technical Information (for support personnel) Error Code 10060: Connection timeout Background: The gateway could not receive a timely response from the website you are trying to access. This might indicate that the network is congested, or that the website is experiencing technical difficulties. can anybody help me in this issue plz???
Posts: 338
Joined: 11.Jul.2007
From: UK
Status: offline
Your ISA server is configured to require authenticated Web requests, either because the outbound access rule specifies it or the Web proxy listener is set to "require all users to authenticate". However, your clients are unable to provide credentials, probably because they are not configured as web proxy clients.
Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hello,
thatīs rigth Ian! Once you check this option you are saying to ISA, allow only authenticated users traffic and deny all other (anonymous). You donīt need to check this option to require ISA to authenticate users, you can just create a rule and aplly to an specified user set (other than All Users).
I disabled that option... but still i am not able to go over the internet.. here is what i get when i open www.yahoo.com
Failed Connection Attempt ISA 6/12/2008 9:01:44 AMLog type: Web Proxy (Forward) Status: 10060 A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. Rule: [System] Allow HTTP/HTTPS requests from ISA Server to selected servers for connectivity verifiers Source: Local Host (128.69.1.125) Destination: External (f1.us.www.vip.ird.yahoo.com 87.248.113.14:80) Request: GET http://www.yahoo.com/Filter information: Req ID: 0d088141; Compression: client=No, server=No, compress rate=0% decompress rate=0% Protocol: http User: anonymous
Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,
first, why are you using ISA to access webpages? I strongly do not recommend you to do it, because in this way you are making ISA susceptible to attacks. Second, use the following rule: "Allow HTTP/HTTPS requests from ISA Server to specified sites", make sure the site you are trying to access is in System Policy Allowed Sites domain name sets. Third, try to access other site than www.yahoo.com.
Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
In my experience, 10060 connection timeouts are normally caused by basic networking issues or problems with DNS.
If ISA has trouble conencting to the upstream web server for some reason, the 10060 response is normally generated. Sometimes this is caused by issues with DNS or slow resolution from ISA.
I would look at the basics first and then work up...
well, my ISA2006 is not at the backend og my network, it is behind a firewall. and I have one network card is configured and connected to our LAN, while the other network card is not connected at all.
I have tried other websites but still they are not openning. the only website opens is google.com