ISA newby here. Thanks in advance for your patience and expertise.
ISA 2004 on 2000 server. We are testing it for just use as a web proxy, so we can get better reports of web usage, etc; so we aren't using it as a perimeter fw or anything.
The first issue, is one you've probably heard a million times, as a search on google would bear out: error 12217, which appears to be the HTTP Filter blocking certain url's either because they are too long or have suspect characters... So we have several legit sites users go to that are blocked. From what I can see, these sites are either redirects or have a very long url. I have tried several things, such as: unchecking "verify normalization" and "block high bit characters". increasing maximum query length and url length. Nothing has worked. I know it sounds obvious, but is there a way around this, or a way to "whitelist" these sites?
The second issue, I installed the MS_FWC.msi client, and it couldn't find the ISA server, either via name or ip. The computer that I installed it on showed up in the monitoring/logging and reports, before I installed the client. Since I installed the client and it can't find the server, it no longer shows up in either. It's XP, but the fw isn't on. Do I have to "enable" connections to the ISA on ISA via the client? I didn't have to by just pointing browsers to it, or by group policy for IE. Also, I uninstalled the client, and the pc still doesn't show up in logging or reports, even though I have pointed IE and FF to the proxy.
I'm just refreshing this post. I got this message after installing SP2. I did install the "fix". Nothing worked except for disabling the HTTP filter. I did, however, get an error message before SP2. so it wasn't SP2 that couased the problem per se.
I checked on the server, and there is an error in the logs saying that utf-8 compression is not allowed. I have no signatures or headers that I'm blocking.