Welcome to ISAserver.org

ISA blocking pics / adverts?... Slow webpages

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> General >> ISA blocking pics / adverts?... Slow webpages

Page: [1]

Message

<< Older Topic Newer Topic >>

ISA blocking pics / adverts?... Slow webpages - 29.Aug.2008 9:37:48 PM

uknewbie

Posts: 7
Joined: 25.Aug.2008
Status: offline

Hi All,

Have a very strange problem with my isa2006 (dual nic) setup.

It seems that pages with adverts are taking a long time to load as ISA is blocking them?

Pages that have adclick pictures as well as other graphics are being denied and i cant understand why.

Eg, I found a particular picture on windowsitpro that was not loading:
http://www.windowsitpro.com/cluster/docs/products/1/1/x64SQLServer.jpg

if i click on that link from a user pc, the browser just hangs and if i check the firewall log i see:

Denied Connection isa002 30/08/2008 02:19:05
Log type: Web Proxy (Forward)
Status: 12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.
Rule: [Enterprise] Domain Member Outbound
Source: Internal (192.168.1.1)
Destination: External (192.168.2.1:80)
Request: GET http://www.windowsitpro.com/cluster/docs/products/1/1/x64SQLServer.jpg
Filter information: Req ID: 0dc88b9e; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http
User:
Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Object source: (No source information is available.)
Cache info: 0x0
Processing time: 1 ms
MIME type:

and
Failed Connection Attempt isa002 30/08/2008 02:19:05
Log type: Web Proxy (Forward)
Status: 5 Access is denied.
Rule: [Enterprise] Domain Member Outbound
Source: Internal (192.168.1.1)
Destination: External (192.168.2.1:80)
Request: GET http://www.windowsitpro.com/cluster/docs/products/1/1/x64SQLServer.jpg
Filter information: Req ID: 0dc88b9f; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http
User:
Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Object source: (No source information is available.)
Cache info: 0x0
Processing time: 1 ms
MIME type:
====================

why is it being denied? Even on pages like google (although the page does load), i see this in the log:

Denied Connection isa002 30/08/2008 02:19:12
Log type: Web Proxy (Forward)
Status: 12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.
Rule: [Enterprise] Domain Member Outbound
Source: Internal (192.168.1.1)
Destination: External (192.168.2.1:80)
Request: GET http://www.google.com/
Filter information: Req ID: 0dc88ba3; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http
User:
Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Object source: (No source information is available.)
Cache info: 0x0
Processing time: 1 ms
MIME type:

============
and

Failed Connection Attempt isa002 30/08/2008 02:19:12
Log type: Web Proxy (Forward)
Status: 5 Access is denied.
Rule: [Enterprise] Domain Member Outbound
Source: Internal (192.168.1.1)
Destination: External (192.168.2.1:80)
Request: GET http://www.google.com/
Filter information: Req ID: 0dc88ba4; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http
User:
Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; InfoPath.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727)
Object source: (No source information is available.)
Cache info: 0x0
Processing time: 1 ms
MIME type:
--------------------------------

this is really confusing me and I am totally lost as why ISA is doing this. All isa servers and users are on same domain and the main browsing rule is set for authenticated users. As i said, this only happens on certain sites and its normally the pictures it cant load.

I would really appreciate some advise from the experts.

thanks in advance

Post #: 1

Featured Links*

RE: ISA blocking pics / adverts?... Slow webpages - 30.Aug.2008 12:13:00 AM

its4u_waqar

Posts: 93
Joined: 25.Apr.2007
Status: offline

maybe there images file are blocked from your ISA SERVER2006

create a rule

allow internet with all content >> all protocols >> internal >> external >> all users

then duble click on the name of rule. then u will see content groups click on it. make sure the rule applies to (all content type)

(in reply to uknewbie)

Post #: 2

RE: ISA blocking pics / adverts?... Slow webpages - 30.Aug.2008 8:46:25 AM

uknewbie

Posts: 7
Joined: 25.Aug.2008
Status: offline

thanks very much for the reply.

I already have a rule which:

Allow --->All outbound protocols ---> Internal +local host ----> enterprise Internal + External ---> All authenticated users

I have double checked this and can see that "ALL content types is already selected."

any more ideas?

Why would ISA try to use anonymous and not passing credentials?

thanks in advance

(in reply to its4u_waqar)

Post #: 3

RE: ISA blocking pics / adverts?... Slow webpages - 4.Sep.2008 2:44:05 PM