• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA blocking pics / adverts?... Slow webpages

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> General >> ISA blocking pics / adverts?... Slow webpages Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA blocking pics / adverts?... Slow webpages - 29.Aug.2008 9:37:48 PM   
uknewbie

 

Posts: 7
Joined: 25.Aug.2008
Status: offline
Hi All,

Have a very strange problem with my isa2006 (dual nic) setup.

It seems that pages with adverts are taking a long time to load as ISA is blocking them?

Pages that have adclick pictures as well as other graphics are being denied and i cant understand why.

Eg, I found a particular picture on windowsitpro that was not loading:
http://www.windowsitpro.com/cluster/docs/products/1/1/x64SQLServer.jpg

if i click on that link from a user pc, the browser just hangs and if i check the firewall log i see:

Denied Connection isa002 30/08/2008 02:19:05
Log type: Web Proxy (Forward)
Status: 12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied. 
Rule: [Enterprise] Domain Member Outbound
Source: Internal (192.168.1.1)
Destination: External (192.168.2.1:80)
Request: GET http://www.windowsitpro.com/cluster/docs/products/1/1/x64SQLServer.jpg
Filter information: Req ID: 0dc88b9e; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http
User: 
 Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Object source: (No source information is available.)
Cache info: 0x0
Processing time: 1 ms
MIME type:  
 
and
Failed Connection Attempt isa002 30/08/2008 02:19:05
Log type: Web Proxy (Forward)
Status: 5 Access is denied. 
Rule: [Enterprise] Domain Member Outbound
Source: Internal (192.168.1.1)
Destination: External (192.168.2.1:80)
Request: GET http://www.windowsitpro.com/cluster/docs/products/1/1/x64SQLServer.jpg
Filter information: Req ID: 0dc88b9f; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http
User: 
 Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Object source: (No source information is available.)
Cache info: 0x0
Processing time: 1 ms
MIME type: 
 ====================


why is it being denied? Even on pages like google (although the page does load), i see this in the log:


Denied Connection isa002 30/08/2008 02:19:12
Log type: Web Proxy (Forward)
Status: 12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied. 
Rule: [Enterprise] Domain Member Outbound
Source: Internal (192.168.1.1)
Destination: External (192.168.2.1:80)
Request: GET http://www.google.com/
Filter information: Req ID: 0dc88ba3; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http
User: 
 Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Object source: (No source information is available.)
Cache info: 0x0
Processing time: 1 ms
MIME type: 
 
============
 and

Failed Connection Attempt isa002 30/08/2008 02:19:12
Log type: Web Proxy (Forward)
Status: 5 Access is denied. 
Rule: [Enterprise] Domain Member Outbound
Source: Internal (192.168.1.1)
Destination: External (192.168.2.1:80)
Request: GET http://www.google.com/
Filter information: Req ID: 0dc88ba4; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http
User: 
 Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Object source: (No source information is available.)
Cache info: 0x0
Processing time: 1 ms
MIME type: 
--------------------------------


this is really confusing me and I am totally lost as why ISA is doing this. All isa servers and users are on same domain and the main browsing rule is set for authenticated users. As i said, this only happens on certain sites and its normally the pictures it cant load.



I would really appreciate some advise from the experts.


thanks in advance
Post #: 1
RE: ISA blocking pics / adverts?... Slow webpages - 30.Aug.2008 12:13:00 AM   
its4u_waqar

 

Posts: 93
Joined: 25.Apr.2007
Status: offline
maybe there images file are blocked from your ISA SERVER2006

create a rule

     allow internet with all content  >> all protocols >> internal >> external >> all users

then duble click on the name of rule. then u will see content groups click on it. make sure the rule applies to (all content type)

(in reply to uknewbie)
Post #: 2
RE: ISA blocking pics / adverts?... Slow webpages - 30.Aug.2008 8:46:25 AM   
uknewbie

 

Posts: 7
Joined: 25.Aug.2008
Status: offline
thanks very much for the reply.

I already have a rule which:

Allow --->All outbound  protocols ---> Internal +local host ----> enterprise Internal + External ---> All authenticated users

I have double checked this and can see that "ALL content types is already selected."


any more ideas?

Why would ISA try to use anonymous and not passing credentials?

thanks in advance

(in reply to its4u_waqar)
Post #: 3
RE: ISA blocking pics / adverts?... Slow webpages - 4.Sep.2008 2:44:05 PM   
uknewbie

 

Posts: 7
Joined: 25.Aug.2008
Status: offline
Any ideas guys?

tearing my hair out here

(in reply to uknewbie)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> General >> ISA blocking pics / adverts?... Slow webpages Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts