• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

HTTP - HTTPS fails

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Web Proxy] >> Web Proxy Client >> HTTP - HTTPS fails Page: [1]
Login
Message << Older Topic   Newer Topic >>
HTTP - HTTPS fails - 19.Oct.2007 9:37:39 AM   
jjones

 

Posts: 11
Joined: 21.Apr.2006
Status: offline
Hello,
         I am having problems with a particular website when it goes through our ISA 2006 (Edge Firewall) server.

My clients are using web proxy on Port 8080. I have my Firewall rule setup for HTTP\HTTPS "All users" permissions for the site they need access to. My URL and Domain Sets contain the website. In addition, I have also used IP for the URL Set site.

I can access HTTPS websites in general, however I cannot access a particular website that transitions from HTTP to HTTPS once the user logins for the above URL\Domain sets mentioned above. Everyone gets "Page cannot be displayed", including myself which has full access (All protocols) through the ISA server.
If I bypass the ISA server while using a static IP, the HTTPS site works OK.

I have enabled Web Proxy Clients Port 8080 on my "Internal Network" Configuration. Also, "Enable Firewall Client support for this network" is checked with the appropriate server. "Automatic web browser" config is not enabled. "Use a web proxy server" is checked as well. The Firewall client applet is not installed on any of our machines.
After countless hours of parsing through Firewall and Web logs, I can't really get any good info to help troubleshoot the issue. Only the following:

Web log: 10.1.25.1 anonymous Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.1; InfoPath.2; .NET CLR 3.0.04506.30) Y 2007-10-19 13:32:39 w3proxy ISASERVER01 - www.careercruising.com 209.171.44.178 443 - - 113 SSL-tunnel TCP - www.careercruising.com:443 - Inet 995 - 246_00_CC Req ID: 06b4e744; Compression: client=No, server=No, compress rate=0% decompress rate=0% Internal External 0x8 Failed 2007-10-19 13:32:39
 
Thanks for any help !
Post #: 1
RE: HTTP - HTTPS fails - 29.Nov.2007 2:04:28 PM   
abqtech

 

Posts: 216
Joined: 9.Mar.2004
Status: offline
Check your browser settings.
Goto:
Tools | Internet Options| Advanced | and uncheck
Show Friendly HTTP Error Messages

And try to hit the site again, because a page cannot be displayed message simply means that you did not get a response from the site you requested.  With that show friendly http error message disabled, you'll get a different result, and if the page is truely not available should get an Network Access Message page (with more details), if your request was sent to ISA.

Additionally you should get a trace from the client machine, while you duplicate the problem, to determine if all http requests are being sent to ISA.
Install winpcap(http://www.winpcap.org/)
Also get windump
once you have the above, run the following windump command:
windump -D (to figure out the number assigned to your interface card, let's assume its "2")

windump -i 2 -nn -s 0 -w c:\web_capture.cap "tcp port 8080 or tcp port 443"

Look the trace (you'll probably want to get wireshark or ethereal), see if you have any requests destined to tcp port 443.

Once you complete those steps, let me know what you find.

(in reply to jjones)
Post #: 2
RE: HTTP - HTTPS fails - 2.Dec.2007 8:48:03 PM   
nwigmore

 

Posts: 19
Joined: 28.Nov.2007
Status: offline
Have you tried a different browser? Does this site use port 8443 or just 443?

(in reply to abqtech)
Post #: 3

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Web Proxy] >> Web Proxy Client >> HTTP - HTTPS fails Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts