• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

On CSS: "Unable to retrieve data from <array-member>

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> Access Policies >> On CSS: "Unable to retrieve data from <array-member> Page: [1]
Login
Message << Older Topic   Newer Topic >>
On CSS: "Unable to retrieve data from <array-me... - 12.Dec.2007 4:21:18 PM   
by_lexus

 

Posts: 3
Joined: 12.Dec.2007
Status: offline
Dear all,

I hope to place that in the correct forum. I am confronted with a really strange problem, which seems to be well-known, but never solved. Perhaps you have an idea:

I'm running a Configuration Storage Server, which is a domain member, and an array with 2 ISA 2006 array member servers, which are in a workgroup only.

The installation and configuration, also of the needed server certificates, went fine, and ISA itself is running without problems. But: On the CSS server, I always get the message "Unable to retrieve data from: <array-member-name>". Also, the servers both are marked as unavailable in the "Servers" window.

If I connect the console directly from one of the ISA array member servers, everything is fine, they show "in-sync" with the CSS server.

Also the configuration (from both sides, on the CSS and the members) is working. The only thing that seems not to be OK is the connection from the CSS to the array members.
This happens also after just setting up the servers exactly as described in Microsoft's setup guide.

Is anyone facing the same problem, and has eventually found a solution for that?
thanks in advance,
alex

Post #: 1
RE: On CSS: "Unable to retrieve data from <arra... - 13.Dec.2007 12:22:50 AM   
stu1st

 

Posts: 59
Joined: 4.Nov.2007
Status: offline
i dont know if u use the isa2006 as firewall too, if u do so please create a new firewall rule that supercedes all others and let it <allow> <all traffic> <from> <array member servers> (the 2 isa2006 server + the css server) to <external> <for> <all users> then i think u will have proper communication between them. try and let me know.

(in reply to by_lexus)
Post #: 2
RE: On CSS: "Unable to retrieve data from <arra... - 13.Dec.2007 6:34:00 AM   
by_lexus

 

Posts: 3
Joined: 12.Dec.2007
Status: offline
Hi,

That was one of my first thoughts, that it might be a firewall rule preventing it... I have added all kinds of allowances between all members, without any result...

What I can see if I look at the firewall monitoring, there ARE sometimes dropped packages that could be an indicator, but I'm not sure.

Some examples:

RPC (all interfaces) Initiated Connection [System] Allow remote management from selected computers using MMC 0x0 ERROR_SUCCESS
RPC (all interfaces) Closed Connection [System] Allow remote management from selected computers using MMC 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN
MS Firewall Control Closed Connection [System] Allow remote management from selected computers using MMC 0x80074e21 FWX_E_ABORTIVE_SHUTDOWN
MS Firewall Control Denied Connection  0xc0040017 FWX_E_TCP_NOT_SYN_PACKET_DROPPED   Internal


So there are a lot of ERROR_SUCCESS, some few ABORTIVE_SHUTDOWN and some occasional TCP_NOT_SYN_PACKED_DROPPED....

it *seems* to be a firewall rule problem, but as I said, since now it is a really straight-forward documentation-attached default installation with all recommendations from MS..... and besides I have set all kinds of allowances between all involved servers..... I have no further clue.

does anyone have?

alex

(in reply to stu1st)
Post #: 3
RE: On CSS: "Unable to retrieve data from <arra... - 13.Dec.2007 8:22:57 PM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Try adding the CSS computer to the 'Enterprise Remote Management Computers' group.

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to by_lexus)
Post #: 4
RE: On CSS: "Unable to retrieve data from <arra... - 14.Dec.2007 8:19:44 AM   
by_lexus

 

Posts: 3
Joined: 12.Dec.2007
Status: offline
Unfortunately also this does not help in anyway.... still the same problem: I can do everything from either the isa servers directly or on the CSS server, but the CSS server gives still the same error: Unable to retrieve data from....

(in reply to Jason Jones)
Post #: 5
RE: On CSS: "Unable to retrieve data from <arra... - 14.Dec.2007 6:40:36 PM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Hmmm...not sure then. To be honest, I never use workgroup mode as I think it is a rubbish option and you get these types of issues

I assume you have followed all the recommended option in terms of duplicating accounts on CSS and array members etc? Are you meeting all of the best practises for the combination of CSS in the domain and array members not in the domain?

May be worth checking you configuration against this doc:
http://www.microsoft.com/technet/isa/2004/plan/ts_css.mspx

Cheers

JJ


_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to by_lexus)
Post #: 6
RE: On CSS: "Unable to retrieve data from <arra... - 5.Jan.2008 11:09:33 PM   
richardh00

 

Posts: 3
Joined: 11.Dec.2006
Status: offline
This is a name resolution issue.  In ISA management, under Configuration/Servers, right-click on the server and choose 'properties', then click on the 'Communication' tab.  In the 'remote communication' box, 'use the full computer name:' is selected by default.  This is typically the FQDN of your ISA firewall.  Make certain that you can resolve this name from your CSS or workstation.  You could also avoid the whole issue and select the option to use the IP address as well.

Hope that helps...

Richard Hicks

(in reply to by_lexus)
Post #: 7
RE: On CSS: "Unable to retrieve data from <arra... - 8.May2008 6:21:37 AM   
ldoodle

 

Posts: 158
Joined: 21.Mar.2005
From: England
Status: offline
quote:

ORIGINAL: Jason Jones

Try adding the CSS computer to the 'Enterprise Remote Management Computers' group.

No sure if OP has solved the problem, but I can confirm that this solution worked for me as I was having the same problem.

(in reply to Jason Jones)
Post #: 8

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> Access Policies >> On CSS: "Unable to retrieve data from <array-member> Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts