Welcome to ISAserver.org

RE: User defined protocols

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> General >> RE: User defined protocols

Page: << < prev 1 [2]

Message

<< Older Topic Newer Topic >>

RE: User defined protocols - 20.Feb.2004 12:35:00 AM

Persing

Posts: 40
Joined: 31.Jan.2004
Status: offline

Hi Lex,
In your last message you said:
"The strange thing is that while analyzing the unidentified IP traffic , I couldn't find any unidentified IP traffic in our sniffer ( Sniffer Pro ) It was 100% http/https traffic , yet ISA sees half of these packets as unidentified and thus blocks them as a default rule.
btw : Our problem is easily reproduceable by setting your proxy on in ISA and sending a client to windowsupdate.microsoft.com
When clicking scan my computer ( https module ) the ISA will see unidentified traffic."

And all I can say to that is:
YES, YES, YES, EXACTLY!
Thank you very much Lex for grabbing this in your teeth, sniffin the traffic, carrying the flame to Redmond, and getting an answer from MSFT. I feel that all this is going in the right direction. When this product finally goes gold I want to be able to turn off logging for the rules where I expect to see a lot of legitimate traffic, and know that I can identify the remaining entries in the log and understand why they are there. If I create a new rule I want to be able to see the effect, and being able to understand and rely on the log is the only (reasonable) way to do that.
Thanks again (yea!).

(in reply to Persing)