"Failed Connection Attempt" (Full Version)

All Forums >> [ISA 2006 General] >> General



Message

sander99 -> "Failed Connection Attempt" (17.Jul.2008 11:02:18 PM)

I have some clients that do not specify a proxy server in the browser settings (all checkboxes are blank). These clients generate the "failed conenction attempt" error. As soon as I configure a proxy in the client's browser settings everything works. However, for the corporate laptop I would not like to change the browser setting.
It seems that the reason for my issue that none of the rules seems to apply.
Is there a solution? For some reason this setup used to work with the WinProxy product.



tshinder -> RE: "Failed Connection Attempt" (19.Jul.2008 11:44:25 AM)

Remember that the ISA firewall is a firewall, so you need to configure the firewall to allow the connections you want through the firewall.

What rules have you configured on the firewall to allow the outbound connections?

Tom



sander99 -> RE: "Failed Connection Attempt" (19.Jul.2008 12:08:08 PM)

At this point I have a simple rule that allows all internal network traffic to go to the external network, through all ports, for all users (I'm not using authentication).



tshinder -> RE: "Failed Connection Attempt" (20.Jul.2008 10:27:18 AM)

Are they using the firewall as their default gateway?

Tom



sander99 -> RE: "Failed Connection Attempt" (20.Jul.2008 10:47:06 AM)

Yes, the default gateway is the IP of the box with ISA. The DHCP server (on the smae box) has a gateway entry that gets distributed.



tshinder -> RE: "Failed Connection Attempt" (21.Jul.2008 9:36:02 AM)

How are the SecureNAT clients resolving names?

Tom



sander99 -> RE: "Failed Connection Attempt" (21.Jul.2008 7:12:34 PM)

I have a DNS (Windoes) server on the same box.
To make things more complicated, one client works in the meantime again...



tshinder -> RE: "Failed Connection Attempt" (22.Jul.2008 11:35:49 AM)

When you run nslookup on the clients, can they resolve Internet host names?

Thanks!
Tom



sander99 -> RE: "Failed Connection Attempt" (22.Jul.2008 11:57:24 AM)

Yes, that part is working. The browse seems even to find the the ISA sever proxy as it serves up an ISA generated web page. I suspect that an ISA rule doesn't trigger, doesn't recognize the client.



tshinder -> RE: "Failed Connection Attempt" (23.Jul.2008 8:50:43 AM)

Check the firewall logs on the firewall and see what is happening to the connection attempts through the firewall when the clients can't get past the firewall.

HTH,
Tom



Page: [1]