Welcome to ISAserver.org

Failed publish web site through TMG

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Threat Management Gateway (TMG) 2010] >> General >> Failed publish web site through TMG

Page: [1]

Message

<< Older Topic Newer Topic >>

Failed publish web site through TMG - 11.May2010 6:59:28 AM

grupponazca

Posts: 8
Joined: 11.May2010
Status: offline

Hello, I've a problem whit Web Access rule in my TMG Server: can not see an internal web site when use TMG proxy in IE.

We are two ISA server:

1) ISA 2004: old proxy
2) TMG 2010: new proxy

My site is pubblished on TMG:

- if use TMG proxy server in IE the connection fail (timeout error)
- if use ISA proxy server in IE the connection is ok

IE --> (Proxy TMG) --> Web Site on TMG --> Fail
IE --> (Proxy ISA) --> Web Site on TMG --> OK

Tracking log report this:

Log Type: Web Proxy(Reverse)
Status:10060 A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
Rule: my rule
Source: External
Destination: Local Host (server name ip:80)
Request: GET http://sitename
Protocol: http
User: anonymous

Anyone have idea?

Thanks

Post #: 1

Featured Links*

RE: Failed publish web site through TMG - 11.May2010 10:20:26 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Are these internal clients trying to reach a published web site?

Are these clients "bouncing off" TMG to reach an internal Web server?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to grupponazca)

Post #: 2

RE: Failed publish web site through TMG - 11.May2010 12:19:50 PM

grupponazca

Posts: 8
Joined: 11.May2010
Status: offline

Yes, the internal clients trying to reach a published web site.

TMG is configured same old ISA (current ISA 2004) where the clients trying to reach a published web site (on ISA 2004) successfully.

IE Proxy [ISA 2004] --> Web server pubblished on ISA 2004 --> successfully

If set IE proxy to TMG and trying to reach a published web site on ISA 2004, all is ok, but if the web site is published on TMG, failed!

If set IE proxy to ISA 2004 and trying to reach published web site on TMG, all is ok.

The problem is a published web site on TMG and IE proxy to TMG.

Thanks!
Matteo

(in reply to tshinder)

Post #: 3

RE: Failed publish web site through TMG - 12.May2010 6:10:40 AM

grupponazca

Posts: 8
Joined: 11.May2010
Status: offline

UPGRADE

I checked the "Reverse Web proxy" server logs (ISA 2004 and TMG).

ISA 2004
- Source Network: External
- Destination Network:
- URL: http://mysite.com
- Server Name: My published server web
- Status Code: 200 OK

TMG
- Source Network: External
- Destination Network: Local Host

- URL: http://mysite.com
- Server Name: My published server web
- Status Code: 10060 A connection attemp failed...

Why Local Host? The rule is the same ISA 2004...

< Message edited by grupponazca -- 12.May2010 6:14:24 AM >

(in reply to grupponazca)

Post #: 4

RE: Failed publish web site through TMG (Found Problem) - 12.May2010 7:17:15 AM

grupponazca

Posts: 8
Joined: 11.May2010
Status: offline

I FOUND THE PROBLEM

When in my rule select "Requests appear to come from the original client", website not run. If select "Requests appear to come from the Forefront TMG computer" web site run.

The listerner web is configurated to accept traffic from External; I changed this to accept traffic from All Network (And Local Host), but the problem remains.

Anyone have idea to resolve this problem?

Thanks
Matteo

(in reply to grupponazca)

Post #: 5

RE: Failed publish web site through TMG (Found Problem) - 13.May2010 10:05:16 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

If you want the listener to accept traffic from internal hosts, you can limit to external and internal - all networks shouldn't be required.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to grupponazca)

Post #: 6

RE: Failed publish web site through TMG (Found Problem) - 14.May2010 5:17:47 AM

grupponazca

Posts: 8
Joined: 11.May2010
Status: offline

Ok, I limited the listener to accept traffic from internal and external only, but the problem is still there be.

The web server gateway is the TMG internal ip address, 192.168.100.254, the web rule is correct, but if is selected "Requests appear to come from the original client" web site go to timeout, error 10060.

Thanks
Matteo

(in reply to tshinder)

Post #: 7

RE: Failed publish web site through TMG - 21.Jun.2010 5:14:42 AM

sowmika

Posts: 26
Joined: 13.Apr.2010
Status: offline

Hi,Friend. I am also publishing a new web site for my official ,for that i used this http://www.xnynz.com/ site's Hosting and domains at just $1.99 per year , I m not faced these kind of problem, also my website is working very well.you may try this one for your successful publishing .All the best.

(in reply to grupponazca)

Post #: 8

RE: Failed publish web site through TMG (Found Problem) - 20.Dec.2011 2:20:16 PM

rgibson

Posts: 1
Joined: 8.Jan.2007
Status: offline

I was having a tough time publishing some web sites on a 2008 server behind TMG until I ran across this post. The published sites on the 2003 server were fine but the 2008 would not work. Changed the rule so that the request appeared to come from the TMG server and everything worked fine.

Thanks

(in reply to grupponazca)

Post #: 9