|
kvirani -> TS died - ISA 2004 (10.Jun.2008 7:24:36 PM)
|
OK, this one is strange. TS was published fine externally and through a site-to-site VPN. Clients can connect fine through the S2SVPN, but as of yesterday, if they try to connect to the external, it fails (ungracefully). Usually they get a black screen and then eventually a "The connection to the remote computer was lost..." pops up. Sometimes they get a little further before it dies.
The only message we get on the ISA 2004 server is:
Denied Connection
ISASERVER 6/10/2008 5:49:52 PM
Log type: Firewall service
Status: A packet was dropped by the TCP/IP stack.
Rule: -
Source: External ( x.x.x.x:3222)
Destination: Internal ( x.x.x.x:3389)
Protocol: RDP (Terminal Services)
User: -
Which equates to this:
FWX_E_TCPIPDROP_PACKET_DROPPED
0xC0040015
A packet was dropped by the TCP/IP stack.
A really bad work-around:
The strange thing is that if we delete the client's user profile and try again, it works. This isn't a good idea for our travelling users. Eventually it will go bad again, but we're not certain how that happens.
Any ideas would be most welcome.
This started happening after trying to add another S2SVPN to a partner organization, but that effort didn't go so well. We reverted to the ISA configuration before we started that process.
Thanks,
K
|
|
|
|