ISA 2004 https timeouts (Full Version)

All Forums >> [ISA Server 2004 Misc.] >> ISA Firewall Appliances



Message

nvtuser -> ISA 2004 https timeouts (25.Jul.2008 5:14:25 AM)

Hi,

for the past few weeks my users have been getting timeouts when using https sites.(ISA 2004 ). Same sites are fine when bypassing the proxy .No changes to rules have been made.After the ISA server they go through a Cisco 2800 router with a pix config on it (not managed by me unfortunately).ISA box has been rebooted , defragged , etc.Can't see much in ,logs to help .

Any help much appreciated.

thanks in advance.



noddles -> RE: ISA 2004 https timeouts (25.Jul.2008 12:04:12 PM)

Hello,
I also experienced that same problem with sites that use https, what i did was use my domain controller and apply a group policy that tell all browsers to use a proxy server (that's point all explorer browsers to the proxy server and use port 8080, you can find it when you navigate, internet explorer>tools>internet options>connectiions>Lan settings.)
Take care, hope it works for you, it did for me.



nvtuser -> RE: ISA 2004 https timeouts (25.Jul.2008 12:16:19 PM)

Thanks for reply , already doing that and have connections tab hidden via GPO so they can't remove ;-)

I've just found out someone had rolled back config in my absence so I'm going back to basics and tweaking the rules , was previously assuming nothing had changed , always dangerous!




tshinder -> RE: ISA 2004 https timeouts (28.Jul.2008 10:30:46 AM)

Hi NV,

Check the firewall's log file entries for those connections.

HTH,
Tom



nvtuser -> RE: ISA 2004 https timeouts (28.Jul.2008 11:22:14 AM)

Have done , seem to be getting lots of entries like below , am tweaking rukles without much success.Have web access rule now allowing all protected network traffic to external network and still getting errors like that below.Anyone had problems like this after installing W23K SP2? It's possible someone ran in SP2 ,will look int checking date of installation , possibly registry entry?



995: The I/O operation has been aborted because of either a thread exit or
an application request.
1236: The network connection was aborted by the local system.



tshinder -> RE: ISA 2004 https timeouts (29.Jul.2008 9:38:27 AM)

Did you check the for the RSS bug that comes with Windows 2003 SP2?

Run the ISA firewall BPA on the firewall and it will detect it and tell you what to do.

HTH,
Tom



nvtuser -> RE: ISA 2004 https timeouts (29.Jul.2008 10:02:15 AM)

the 3 registry changes (think one of them was RSS feed related )are my next option.Will check out the BPA , have never used it before .

Thanks for your help.



tshinder -> RE: ISA 2004 https timeouts (30.Jul.2008 10:55:46 AM)

Hi NVT,

Let us know how it works out for you.

Thanks!
Tom



nvtuser -> RE: ISA 2004 https timeouts (4.Aug.2008 9:35:13 AM)

Still much the same after RSS registry change, am thinking of removing SP2 completely (have had major citrix problem last few days which stopped me even looking at it!)

Are the uninstall files in an obvious location?Don't want to make things worse as although it's a pain , most folk are working most of the time.

EDIT:Looks like whoever ran in the SP2 deleted the files afterwards , is there anywhere with a definitive list of registry changes to make running ISa 2004 after SP2 has been installed?

Thanks.



tshinder -> RE: ISA 2004 https timeouts (5.Aug.2008 10:44:59 AM)

You mean the scalable networking pack registry changes?

Thanks!
Tom



nvtuser -> RE: ISA 2004 https timeouts (5.Aug.2008 10:53:14 AM)

OK , guess that's what I meant ;-)

That's TCPA set to 0 , and TCPchimney set to 0.

Will reboot tonight and see if it does any good.Will upgrade NIC drivers after that.
Thanks for your help , much appreciated.




tshinder -> RE: ISA 2004 https timeouts (6.Aug.2008 6:09:58 PM)

You bet!

Let us know how it works out for you.

Thanks!
Tom



nvtuser -> RE: ISA 2004 https timeouts (12.Aug.2008 5:35:53 PM)

New NIC drivers seem to have solved it , no doubt along with the regedits.


Thanks again .



tshinder -> RE: ISA 2004 https timeouts (13.Aug.2008 9:42:02 AM)

Hi NV,

Great!

Good to hear you got it working and thanks for the follow up!

Tom



Page: [1]