Welcome to ISAserver.org

RE: All user vs Internet group...?!?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> General >> RE: All user vs Internet group...?!?

Page: << < prev 1 [2] 3 4 5 next > >>

Message

<< Older Topic Newer Topic >>

RE: All user vs Internet group...?!? - 27.Jul.2005 2:24:00 AM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

((( didn't I ask many times to check out the ISA log files? That something different then the event viewer. Isn't it! )))

Well, i always checked the log files from the even viewer so do you mean that ISA log files only available at:

ISA MMC, node Monitoring -> tab Logging.

Thanks Stefaan,
Al-Taee

(in reply to iraq it)

Post #: 21

Featured Links*

RE: All user vs Internet group...?!? - 27.Jul.2005 11:34:00 AM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Al-Taee,

yes, that's correct!

HTH,
Stefaan

(in reply to iraq it)

Post #: 22

RE: All user vs Internet group...?!? - 7.Aug.2005 1:52:00 AM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi Stefaan,

Which information i check in the log record type -logging tab?

They monitoring - session tab contains the type (WP or SNAT) and its SNAT for my clients and WP for anonymous. Do you have an explaination?

Thanks,
Al-Taee

(in reply to iraq it)

Post #: 23

RE: All user vs Internet group...?!? - 13.Aug.2005 4:46:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Al-Taee,

can you post some examples of log entries. Also, make sure you include the fields 'Result Code', 'Error Information' and 'Filter Information' in the log view.

HTH,
Stefaan

(in reply to iraq it)

Post #: 24

RE: All user vs Internet group...?!? - 14.Aug.2005 3:38:00 AM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi Stefaan,

Can you send me your email in order to send you part of the results?

I dont have an idea how to make the condation (equall, not equall, and others) do you have an article for this subject?

Thanks,
Al-Taee

(in reply to iraq it)

Post #: 25

RE: All user vs Internet group...?!? - 14.Aug.2005 3:52:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Al-Taee,

the bad news is that as far as I know there isn't an article about interpreting the ISA logs. The good news is that I'm planning an article on this subject but no timeframe is set yet.

I suggest you include all fields in the log viewer. Then restart the log viewer with the default query and make a test from the client. Then stop the log query and export the log to a text file. Post then here the URL where we can download the exported logfile together with the IP address of the client and the destination (FQDN, URL, ...) you wanted to access.

HTH,
Stefaan

(in reply to iraq it)

Post #: 26

RE: All user vs Internet group...?!? - 15.Aug.2005 5:08:00 AM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi Stefaan,

I will waiting your important article because the log files are important to solve problems, hope your timeframe not be long [Big Grin]

Well, i didnt find good site to upload the files but i have the text files and i can send it by email.

Thanks,

(in reply to iraq it)

Post #: 27

RE: All user vs Internet group...?!? - 15.Aug.2005 11:27:00 AM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Al-Taee,

well, can't you web publish your own website. It's a excellent excercise with ISA 2004! [Wink]

HTH,
Stefaan

(in reply to iraq it)

Post #: 28

RE: All user vs Internet group...?!? - 16.Aug.2005 5:03:00 AM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi Stefaan,

Iam interst to solve my ISA problem and then i will have time for excercise so as you like.

Thanks,

(in reply to iraq it)

Post #: 29

RE: All user vs Internet group...?!? - 16.Aug.2005 2:41:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Al-Taee,

well, can't you just post the relevant log entries here?

HTH,
Stefaan

(in reply to iraq it)

Post #: 30

RE: All user vs Internet group...?!? - 17.Aug.2005 4:28:00 AM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi Stefaan,

It works but i dont know exactly why it doesnt work during the past time. I have web proxy clients in the log but can you tell me how i know if thw clients use DHCP or DNS WPAD?

I hope it not work for a shot time and Thanks for your help.

Al-Taee

(in reply to iraq it)

Post #: 31

RE: All user vs Internet group...?!? - 17.Aug.2005 3:26:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Al-Taee,

if you really want to know which method is actually used, you should use a network tracing tool such as Ethereal or NetMon (W2K3). However, if you just want to test the autodetect mechanisms, use the Firewall Client Tool for ISA Server 2004 ( http://www.microsoft.com/downloads/details.aspx?familyid=f20f6267-273d-4870-b1e8-799b261b4786&displaylang=en ).

HTH,
Stefaan

(in reply to iraq it)

Post #: 32

RE: All user vs Internet group...?!? - 18.Aug.2005 2:57:00 AM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi Stefaan,

Amazing tool to test the autodetect mechanisms but i didnt know in Ethereal which option i use, i am interest in that because sometimes one of the option stop so i can know where is my problem.

Many Thanks,
Al-Taee

(in reply to iraq it)

Post #: 33

RE: All user vs Internet group...?!? - 18.Aug.2005 2:41:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Al-Taee,

what do you mean with "but i didnt know in Ethereal which option i use"?

HTH,
Stefaan

(in reply to iraq it)

Post #: 34

RE: All user vs Internet group...?!? - 19.Aug.2005 4:25:00 AM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi Stefaan,

Iam sorry for ambiguous statment. I mean in Ethereal, shall i follow your article to know if iam using DNS or DHCP or you have another way. I want to know which option stop or fail next time a problem happen. Do you think the tool is enough or i have to use Ethereal?

Thanks,

(in reply to iraq it)

Post #: 35

RE: All user vs Internet group...?!? - 19.Aug.2005 3:14:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Al-Taee,

well I would use the Fwctool to test the auto detect and Ethereal to capture the test to determine the exact cause. [Wink]

You can test a full auto detect by executing the following commands:

1. for the DNS method:
- ipconfig /flushdns
- fwctool testautodetect /type:dns

2. for the DHCP method:
- ipconfig /release
- ipconfig /renew
- fwctool testautodetect /type:dhcp

With the Ethereal captures you should be able to determine where exactly it goes wrong.

HTH,
Stefaan

(in reply to iraq it)

Post #: 36

RE: All user vs Internet group...?!? - 24.Aug.2005 5:10:00 AM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi Stefaan,

I used the Fwctool to test the auto detect and it works successfully with DHCP and failed and not completed with DNS with the following error:
Domain name found:
mydomain
Resolving address:
wpad.mydomain
Domain name not found
WSPAD URL was not found in DNS server
Failed to detect ISA Server

while the nslookup work for wpad.mydomain!

With the Ethereal captures the DCHP pass the procudure as with your article but nothing happened with DNS so how can i be able to determine where exactly it goes wrong with DNS?

The webproxy client access work good with IE.

Thanks,
Mohammed

(in reply to iraq it)

Post #: 37

RE: All user vs Internet group...?!? - 24.Aug.2005 4:28:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Mohammed,

if you don't see the wpad DNS request in the Ethereal trace then either it is confugured in the local hosts file (C:\Windows\system32\drivers\etc) or it comes from the local DNS cache.

Did you see something in the local DNS cache (ipconfig /displaydns)?
Did you flush the local DNS cache (ipconfig /flushdns)?

HTH,
Stefaan

(in reply to iraq it)

Post #: 38

RE: All user vs Internet group...?!? - 25.Aug.2005 2:40:00 AM

iraq it

Posts: 297
Joined: 1.Jul.2005
From: Iraq
Status: offline

Hi Stefaan,

I didnt understand the first part of your answer but i follow your article to create the Wpad in the DNS forward zone. Whats the problem if its available in the pahts that you mentioned.

Yes, I saw the wpad.mydomain only at my WP client (win. srv 2003)not on the DC (DNS)server or other clients by using ipconfig /displaydns but i cant nslookup the Wpad.

Yes, i flush the local DNS cache using (ipconfig /flushdns) at the client only and it does not change something.

Thanks for help,
Al-Taee

(in reply to iraq it)

Post #: 39

RE: All user vs Internet group...?!? - 25.Aug.2005 3:56:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Mohammed,

if you can't nslookup the 'wpad' alias then something is wrong with your DNS. The entry 'wpad' should just be an alias or cname for the FQDN of the ISA internal interface.

How is the ISA internal interface defined in the DNS? I don't let the ISA server register his interfaces in the DNS server dynamically but define them always manually.

HTH,
Stefaan

(in reply to iraq it)

Post #: 40