• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA 2004 https timeouts

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Misc.] >> ISA Firewall Appliances >> ISA 2004 https timeouts Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA 2004 https timeouts - 25.Jul.2008 5:14:25 AM   
nvtuser

 

Posts: 8
Joined: 23.Apr.2007
Status: offline
Hi,

for the past few weeks my users have been getting timeouts when using https sites.(ISA 2004 ). Same sites are fine when bypassing the proxy .No changes to rules have been made.After the ISA server they go through a Cisco 2800 router with a pix config on it (not managed by me unfortunately).ISA box has been rebooted , defragged , etc.Can't see much in ,logs to help .

Any help much appreciated.

thanks in advance.
Post #: 1
RE: ISA 2004 https timeouts - 25.Jul.2008 12:04:12 PM   
noddles

 

Posts: 47
Joined: 21.Apr.2008
Status: offline
Hello,
I also experienced that same problem with sites that use https, what i did was use my domain controller and apply a group policy that tell all browsers to use a proxy server (that's point all explorer browsers to the proxy server and use port 8080, you can find it when you navigate, internet explorer>tools>internet options>connectiions>Lan settings.)
Take care, hope it works for you, it did for me.

(in reply to nvtuser)
Post #: 2
RE: ISA 2004 https timeouts - 25.Jul.2008 12:16:19 PM   
nvtuser

 

Posts: 8
Joined: 23.Apr.2007
Status: offline
Thanks for reply , already doing that and have connections tab hidden via GPO so they can't remove ;-)

I've just found out someone had rolled back config in my absence so I'm going back to basics and tweaking the rules , was previously assuming nothing had changed , always dangerous!


(in reply to noddles)
Post #: 3
RE: ISA 2004 https timeouts - 28.Jul.2008 10:30:46 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi NV,

Check the firewall's log file entries for those connections.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to nvtuser)
Post #: 4
RE: ISA 2004 https timeouts - 28.Jul.2008 11:22:14 AM   
nvtuser

 

Posts: 8
Joined: 23.Apr.2007
Status: offline
Have done , seem to be getting lots of entries like below , am tweaking rukles without much success.Have web access rule now allowing all protected network traffic to external network and still getting errors like that below.Anyone had problems like this after installing W23K SP2? It's possible someone ran in SP2 ,will look int checking date of installation , possibly registry entry?



995: The I/O operation has been aborted because of either a thread exit or
an application request.
1236: The network connection was aborted by the local system.

(in reply to tshinder)
Post #: 5
RE: ISA 2004 https timeouts - 29.Jul.2008 9:38:27 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Did you check the for the RSS bug that comes with Windows 2003 SP2?

Run the ISA firewall BPA on the firewall and it will detect it and tell you what to do.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to nvtuser)
Post #: 6
RE: ISA 2004 https timeouts - 29.Jul.2008 10:02:15 AM   
nvtuser

 

Posts: 8
Joined: 23.Apr.2007
Status: offline
the 3 registry changes (think one of them was RSS feed related )are my next option.Will check out the BPA , have never used it before .

Thanks for your help.

(in reply to tshinder)
Post #: 7
RE: ISA 2004 https timeouts - 30.Jul.2008 10:55:46 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi NVT,

Let us know how it works out for you.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to nvtuser)
Post #: 8
RE: ISA 2004 https timeouts - 4.Aug.2008 9:35:13 AM   
nvtuser

 

Posts: 8
Joined: 23.Apr.2007
Status: offline
Still much the same after RSS registry change, am thinking of removing SP2 completely (have had major citrix problem last few days which stopped me even looking at it!)

Are the uninstall files in an obvious location?Don't want to make things worse as although it's a pain , most folk are working most of the time.

EDIT:Looks like whoever ran in the SP2 deleted the files afterwards , is there anywhere with a definitive list of registry changes to make running ISa 2004 after SP2 has been installed?

Thanks.

< Message edited by nvtuser -- 4.Aug.2008 12:27:54 PM >

(in reply to tshinder)
Post #: 9
RE: ISA 2004 https timeouts - 5.Aug.2008 10:44:59 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
You mean the scalable networking pack registry changes?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to nvtuser)
Post #: 10
RE: ISA 2004 https timeouts - 5.Aug.2008 10:53:14 AM   
nvtuser

 

Posts: 8
Joined: 23.Apr.2007
Status: offline
OK , guess that's what I meant ;-)

That's TCPA set to 0 , and TCPchimney set to 0.

Will reboot tonight and see if it does any good.Will upgrade NIC drivers after that.
Thanks for your help , much appreciated.


(in reply to tshinder)
Post #: 11
RE: ISA 2004 https timeouts - 6.Aug.2008 6:09:58 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
You bet!

Let us know how it works out for you.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to nvtuser)
Post #: 12
RE: ISA 2004 https timeouts - 12.Aug.2008 5:35:53 PM   
nvtuser

 

Posts: 8
Joined: 23.Apr.2007
Status: offline
New NIC drivers seem to have solved it , no doubt along with the regedits.


Thanks again .

(in reply to tshinder)
Post #: 13
RE: ISA 2004 https timeouts - 13.Aug.2008 9:42:02 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi NV,

Great!

Good to hear you got it working and thanks for the follow up!

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to nvtuser)
Post #: 14

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Misc.] >> ISA Firewall Appliances >> ISA 2004 https timeouts Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts