Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
RE: Recieving Blank Pages
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
RE: Recieving Blank Pages - 18.Mar.2005 4:34:00 PM
|
|
|
teich
Posts: 6
Joined: 14.Mar.2005
Status: offline
|
www.officepros.com/opind/
go here and try a product search
if you have any type of content filtering in a firewall rule it will return a blank page and say done at the bottom
Disable said rule and it will run fine
And I mean any content filtering I even tried just filtering vrml and still same result
|
|
|
|
|
RE: Recieving Blank Pages - 18.Mar.2005 6:54:00 PM
|
|
|
wrascher
Posts: 3
Joined: 24.Dec.2003
From: Texas
Status: offline
|
One of the technology coordinators from another district posted this earlier in the year under another subject. The problem hasn't changed:
ôWhat does web mail inboxes, Dell workstation/laptop/server configuration pages, and shopping carts have in common?
On my new 2004 ISA Server/Windows 2003 I am unable to get to these types of sites. I have an older ISA 2000/Windows 2000 running with the same setup and it has no problems accessing these pages.
Clients all run XP/2000 with latest patches. IE for the browser. They are all firewall clients.ö
The school districts are setup like this:
Internet
|
PIX - Service Center
|
Websense - Service Center
|
Router - Cisco,Service Center
|
|----T1
|
Router - Cisco
| |
ISA - School external DNS
|
Network w/: internal DNS, DHCP, etc.
Part of the problem we have little control over the Educational service center management. They are our ISP and more. The burden falls back on us to figure out the problem (long story...). I've been dragging my feet on helping the others until I had time to see this problem thru. I have read through TomÆs ISA 2004 book in hopes I missed something. The next thing I pinned my hopes on was the SP. The web log shows "failed", and I'm not sure what to look for with netmon. If I can't solve problem here then I'll have to fork the $$$ out of my pocket to call Microsoft. So, please any suggestions...
|
|
|
|
|
RE: Recieving Blank Pages - 18.Mar.2005 8:59:00 PM
|
|
|
teich
Posts: 6
Joined: 14.Mar.2005
Status: offline
|
wrascher your problem seems different than the one i described mine you get no indication of failure even in the logs. Can you turn on your log to indicate which rule is denying it then maybe post that rule here
*sorry forgot you said failed not denied*
[ March 18, 2005, 09:05 PM: Message edited by: teich ]
|
|
|
|
|
RE: Recieving Blank Pages - 18.Mar.2005 10:11:00 PM
|
|
|
wrascher
Posts: 3
Joined: 24.Dec.2003
From: Texas
Status: offline
|
Following jparker's lead I posted here because some sites have just blank pages and other sites parts of the page loads. Majority of the time we get the "Network Access Message: The page cannot be displayed" and the following:
ò Error Code 64: Host not available
ò Background: The gateway or proxy server lost connection to the Web server.
Sometime I can ctrl+refresh constantly until the page loads.
William
|
|
|
|
|
RE: Recieving Blank Pages - 22.Mar.2005 4:56:00 PM
|
|
|
teich
Posts: 6
Joined: 14.Mar.2005
Status: offline
|
anyone else tried my example?
|
|
|
|
|
RE: Recieving Blank Pages - 25.Mar.2005 10:08:00 PM
|
|
|
Clueless Morgan
Posts: 14
Joined: 11.Aug.2004
Status: offline
|
Hey All,
I am going to take some tips from what I read on this thread since my last post and do some testing. I will let you know what I come up with.
But set the stage here is my setup:
ISP T1 (Internet) goes into our T1 router. The T1 router plugs into the Cisco PIX 506. The Cisco PIX plugs into a Cisco 3512XL Switch.
The ISA box has 2 nics, both nics plug into the Cisco Switch.
I will follow-up with a post after this of a picture so you can visualize it.
All computers in the office use the PIX as the gateway, but for employee workstations I have the Automatic Configuration Script pointing at ISA so their web traffic will be controlled by ISA.
The reason I don't have the PIX directly into ISA is because I only want to use ISA for control of web traffic for the employees and I didn't want our exchange and other servers just to use ISA's CPU cycles to flow mail back and forth.
Details:
ISA Server is running Windows 2003 Enterprise, ISA 2004 with SP1 installed.
Workstations are running XP Pro SP2.
See my next post for a link to my network setup.
Maybe we can get something out of this.
Clueless
|
|
|
|
|
RE: Recieving Blank Pages - 25.Mar.2005 11:42:00 PM
|
|
|
Clueless Morgan
Posts: 14
Joined: 11.Aug.2004
Status: offline
|
(First Off, sorry for the long post, just trying to provide everything.)
Ok, I created a network diagram you can view at:
My network Example
The IP Addresses on that pic are for example only, however the network config is the exact same.
Here is the rule I have in ISA:
Name: Block EXE Downloads
Action: Deny
Protocols: All Outbound Traffic
From: Internal
To: External
Users: All Users (I do not require the users to Auth with the domain at any time)
Schedule: Always
Content Types: Selected Content Types
I have "Application" checked under the Content Types window. And the detailed Content Types of Application are:
application/fractals
application/futuresplash
application/hta
application/internet-property-stream
application/mac-binhex40
application/octet-stream
application/oda
application/oleobject
application/olescript
application/pics-rules
application/pkcs10
application/pkcs7-mime
application/pkcs7-signature
application/pkix-crl
application/set-payment-initiation
application/set-registration-initiation
application/vndms-pkicertstore
application/vndms-pkipko
application/vndms-pkiseccat
application/vndms-pkistl
application/x-bcpio
application/x-cdf
application/x-cpio
application/x-csh
application/x-director
application/x-dvi
application/x-hdf
application/x-internet-signup
application/x-iphone
application/x-latex
application/x-msdownload
application/x-msmediaview
application/x-mspublisher
application/x-msschedule
application/x-netcdf
application/x-pkcs12
application/x-pkcs7-certificates
application/x-pkcs7-certreqresp
application/x-sh
application/x-shar
application/x-stuffit
application/x-sv4cpio
application/x-sv4crc
application/x-tcl
application/x-tex
application/x-texinfo
application/x-troff
application/x-troff-man
application/x-troff-me
application/x-troff-ms
application/x-ustar
application/x-wais-source
application/x-x509-ca-cert
.acx
.axs
.bcpio
.bin
.cat
.cdf
.cer
.cpio
.crl
.crt
.csh
.dcr
.der
.dir
.dvi
.dxr
.evy
.exe
.fif
.hdf
.hqx
.hta
.iii
.ins
.isp
.latex
.m13
.m14
.man
.me
.ms
.mvb
.nc
.oda
.ods
.p10
.p12
.p7b
.p7c
.p7m
.p7r
.p7s
.pfx
.pko
.prf
.pub
.roff
.scd
.sct
.setpay
.setreg
.sh
.shar
.sit
.spc
.spl
.src
.sst
.stl
.sv4cpio
.sv4crc
.t
.tcl
.tex
.texi
.texinfo
.tr
.ustar
If I go to http://irmweb.irm-systems.com/irmweb/wc.dll/ilblococ?id=ilblococ&doc=rol/rol1 ( Click Here) and type Farm in the Search For blank and hit Search. It comes up with a solid blank page. If I view the source of the page, I see:
code:
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1252"></HEAD>
<BODY></BODY></HTML>
If I disable the "Block EXE Downloads" rule it works just fine. As soon as I enable it, I get a blank page.
The same goes for http://www.performfirst.net/login.asp ( Click Here)
(go ahead and try to log in with a fake username and password, it will just say it isn't valid.)
When I try to log in this page with a valid username and password, I get a blank page. If I enter a fake username and password is does show the "Failed Logon Screen".
What is the difference between those 2 sites and sites like Amazon.com or yahoo.com? On those sites submitting forms works just fine.
More to come.. ![[Smile]](/image/smiles/smile.gif)
[ March 25, 2005, 11:46 PM: Message edited by: Clueless Morgan ]
|
|
|
|
|
RE: Recieving Blank Pages - 26.Mar.2005 12:08:00 AM
|
|
|
Clueless Morgan
Posts: 14
Joined: 11.Aug.2004
Status: offline
|
More Info:
You can see a CSV file from my SQL log file for the web proxy HERE!
The Block EXE Downloads (mentioned in my last post) is rule #8 and then Allow Internal HTTP Requests (shown in the log) is rule #10.
Everywhere you see "POST" as the action in the log, there is where the white screen is shown.
My only intent with blocking EXE downloads it to block users from downloading anything they could install on their computer (as not everything requires Admin access to install). So that is why all the common things aren't in the list, HTML, JPEG, GIF, WAV, MP3, etc.
The thing that is frustrating is that last time I tested, I removed part of the Application list above and tried a page, still blank, removed more from the list, still blank, ended up removing everything except .roff and it still gave me a blank page.
I have to completely disable the rule to fix the problem.
Wow. My fingers are tired.
Any ideas from what I have presented so far?
|
|
|
|
|
RE: Recieving Blank Pages - 27.Mar.2005 12:34:00 AM
|
|
|
teich
Posts: 6
Joined: 14.Mar.2005
Status: offline
|
if you use any content scaning at all you will get the same even if you try to block vrml.....
you have 2 options that i have found
1.put all web pages that are affected in a url set and set it as exemptions to that rule
2.disable that rule and use your rule that you allow http with right click on it and "Configure HTTP" monkey around with that it works but is harder in my opinion to use, i would also suggest checking the box that says "block responses containing executable content" under the general tab
If anyone else has any options, news, or info please post.
[ March 27, 2005, 12:36 AM: Message edited by: teich ]
|
|
|
|
|
RE: Recieving Blank Pages - 28.Mar.2005 3:00:00 PM
|
|
|
Clueless Morgan
Posts: 14
Joined: 11.Aug.2004
Status: offline
|
teich,
Thanks for your suggestions! I am going to try some ideas with #2 and see what I come up with.
I will reply and let you know!
Anyone else have any ideas?
|
|
|
|
|
RE: Recieving Blank Pages - 30.Mar.2005 3:37:00 PM
|
|
|
Clueless Morgan
Posts: 14
Joined: 11.Aug.2004
Status: offline
|
Well I have been running for a few days using the #2 suggestion above and everything seems to be just fine.
I know it might not work in all situations, but it worked for me.
Thanks for the tips.
|
|
|
|
|
RE: Recieving Blank Pages - 7.Apr.2005 10:38:00 AM
|
|
|
molni
Posts: 3
Joined: 3.Dec.2003
From: Hungary
Status: offline
|
Hi!
I had a same problem. 2 ISA2004 EE, in NLB, in T1 line! NO PIX!
Disabling cache not helped.
Disabling Content rules not helped.
But the problem was since i installed a Firewall client. I tried some thing.
The RESOLUTION (in my company):
I switched off the proxys "Use automated configuration script"
Client only: IE > Internet Options > Connections > Lan Setting
Server side: <Array>/Configuration > Internal > Firewall Client
I hope this helps!
Molni
|
|
|
|
|
RE: Recieving Blank Pages - 12.Apr.2005 6:10:00 PM
|
|
|
ljp1967
Posts: 192
Joined: 23.Sep.2003
From: Australia
Status: offline
|
Hello All,
Had similar problem with a number of sites.
Work-around that seems to do the trick:
Create an Allow Access rule above other rules that restrict content type.
In this rule in the To section, create a URL set and a Computer Set which includes the relevant website URL's and the relevant IP's of the problem websites, all content types allowed, default HTTP Filtering options,
You can still block access by User Group membership
Feel free to restict further in HTTP Filtering to see if exe's can be blocked and still have sites working...
Have a sneaking suspicion that this is similar to problem in ISA 2000 when page did not have any content type header... see MS Article
http://support.microsoft.com/default.aspx?scid=kb;en-us;831140
HTH,
ljp
[ April 12, 2005, 06:13 PM: Message edited by: ljp1967 ]
|
|
|
|
RE: Recieving Blank Pages - 2.Aug.2005 8:03:00 PM
|
|
|
gsuskind
Posts: 4
Joined: 28.Jul.2005
Status: offline
|
I am also behind a PIX and found "My" solution on this link.
http://www.websense.com/global/en/SupportAndKB/SearchKB/Display.php?faq=766&count=no
I was troubleshooting the ISA Config only, but it was my PIX all along. I hope this helps someone too.
My issue was related to opening Hotmail & Yahoo webmail inboxes. They only returned a blank page. I am now resolved. Good Luck! -GS
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
