Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

RE: Discussion about SSL Tunnel Port Range Article

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Cache] >> General >> RE: Discussion about SSL Tunnel Port Range Article Page: <<   < prev  1 [2]
Login
Message << Older Topic   Newer Topic >>
RE: Discussion about SSL Tunnel Port Range Article - 13.Jul.2005 6:53:00 AM   
jnw

 

Posts: 2
Joined: 13.Jul.2005
Status: offline 		Hello!
Some small quetion about article. Author wrote:
"1. A Web client on an ISA Firewall Protected Network makes a request for an SSL object from a Web server on the Internet by entering the following in the Address bar of the Web browser:
https://URL_name

2.When the user sends the request, the following is sent to port 8080 (the port on which the Web listener listens for outbound connections) on the ISA firewall:
CONNECT URL_name:443 HTTP/1.1"

But if client configures IE to use proxy for https like ISA_name with port 443 and enter in the Address bar:
https://URL_name:443
is this request sent to port 8080 on the ISA firewall too? Or to port 443?
Many thanks.

[ July 13, 2005, 08:19 AM: Message edited by: jnw ]

(in reply to tshinder)
Post #: 21
RE: Discussion about SSL Tunnel Port Range Article - 19.Jul.2005 2:44:00 PM   
234234dvdfvdfvasd

 

Posts: 5
Joined: 21.Jun.2005
Status: offline 		Hi,
I just upgrade ISA server 2004 from 2000 and I am having problems accesing some https websites like banks. I disable the proxy on my IE and everything works fine. I think the solution is to add ports to the SSL just as the article says but I don't know which port should I add. How can I know the port that I need?
Thanks a lot.
Homero

(in reply to tshinder)
Post #: 22
RE: Discussion about SSL Tunnel Port Range Article - 2.Aug.2005 6:11:00 AM   
Carlo.Olivieri

 

Posts: 6
Joined: 10.Sep.2004
Status: offline 		The isatools.org site isn't available. [Frown]
It seems that isatools.org is not registered in the DNS systems ...
The authoritative name servers (NS1.JALOJASH.ORG & NS2.JALOJASH.ORG) seems down ...
What happened? Is there somewhere else I could get the scripts from?

TIA
Carlo

(in reply to tshinder)
Post #: 23
RE: Discussion about SSL Tunnel Port Range Article - 2.Aug.2005 2:39:00 PM   
spouseele

 

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline 		Hi Carlo,

the site isatools.org is up and running at this moment! [Wink]

HTH,
Stefaan

(in reply to tshinder)
Post #: 24
RE: Discussion about SSL Tunnel Port Range Article - 23.Aug.2005 3:33:00 PM   
Guest
 > Is there somewhere else I could
> get the scripts from?

There's another script that does this at
http://www.isascripts.org

(in reply to tshinder)
  Post #: 25
RE: Discussion about SSL Tunnel Port Range Article - 8.Sep.2005 6:19:00 PM   
jklick

 

Posts: 36
Joined: 25.May2005
Status: offline 		Does this apply to ISA 2000 as well?

(in reply to tshinder)
Post #: 26
RE: Discussion about SSL Tunnel Port Range Article - 22.Sep.2005 12:35:00 PM   
amazone

 

Posts: 3
Joined: 22.Sep.2005
Status: offline 		Hi,

can I use this tool for ISA2000 with only in Web Proxy mode???

Amazone

(in reply to tshinder)
Post #: 27
RE: Discussion about SSL Tunnel Port Range Article - 12.Oct.2005 12:55:00 PM   
gpmissi

 

Posts: 7
Joined: 12.Jul.2002
From: Bellaria - Adriatic Coast - Italy
Status: offline 		Does this apply to ISA 2000 as well?

How to made the same on ISA 2000?

Regards

[ October 12, 2005, 12:56 PM: Message edited by: gpmissi ]

(in reply to tshinder)
Post #: 28
RE: Discussion about SSL Tunnel Port Range Article - 1.Nov.2005 4:57:00 AM   
rudacunha

 

Posts: 7
Joined: 1.Nov.2005
Status: offline 		When I enter in sites thus

https://www.site.com:2020

Ai of the error but when I enter in sites thus

https://www.site2.com

It functions perfectly as to decide this?

(in reply to tshinder)
Post #: 29
RE: Discussion about SSL Tunnel Port Range Article - 3.Nov.2005 9:55:00 AM   
rudacunha

 

Posts: 7
Joined: 1.Nov.2005
Status: offline 		Nobody can help!
It is urgent.

(in reply to tshinder)
Post #: 30
RE: Discussion about SSL Tunnel Port Range Article - 30.Nov.2005 2:04:15 PM   
jonathanc

 

Posts: 1
Joined: 30.Nov.2005
Status: offline 		See http://support.microsoft.com/?kbid=283284 for ISA 2000 script

J

(in reply to rudacunha)
Post #: 31
RE: Discussion about SSL Tunnel Port Range Article - 3.May2006 3:56:09 PM   
bank2640

 

Posts: 32
Joined: 20.Sep.2004
From: Pittsburgh
Status: offline 		I hope someone will see this since it's an older article.

This fix works great for SSL sites. How about a non SSL site using a different port? One of my users need to connect to a standard http site on port 8088. I added port 8088 using the script, but it didn't work. I figured it wouldn't since this fix is only for SSL. Does anyone have a fix for non-SSL sites?

Any help would be great!

Thanks,
Mike

(in reply to jnw)
Post #: 32
RE: Discussion about SSL Tunnel Port Range Article - 2.Jan.2007 8:14:07 AM   
elmajdal

 

Posts: 4959
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:

ORIGINAL: tshinder

This thread is for discussing the article on extending the ISA firewall's SSL tunnel port range over at http://isaserver.org/articles/2004tunnelportrange.html

Thanks!
Tom

[ November 29, 2004, 07:05 AM: Message edited by: tshinder ]


Hi Tom,

The website of Jim has been redesigned, and the old links to download the tools in you article is not valid anymore.

So please update the article with the new links to download the tools :

ISA TPRE : http://www.isatools.org/tools/ISAtrpe.zip

ISA Tunnel Port tool : http://www.isatools.org/tools/isa_tpr.js

Thanks,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to tshinder)
Post #: 33
RE: Discussion about SSL Tunnel Port Range Article - 22.Jul.2007 12:35:16 PM   
network2004

 

Posts: 11
Joined: 3.Feb.2005
Status: offline 		Hi
I Tray To Acsses To trendmicro console that is using (https//192.168.0.1:4343) I receve this errore

Error Code: 502 Proxy Error. The specified Secure Sockets Layer (SSL) port is not allowed. ISA Server is not configured to allow SSL requests from this port. Most Web browsers use port 443 for SSL requests. (12204)
IP Address: 192.168.0.2
Date: 7/22/2007 8:16:24 AM
Server: net-server.XXXXXXX.com
Source: proxy

nay one help me


(in reply to bkhorsa)
Post #: 34
RE: Discussion about SSL Tunnel Port Range Article - 7.Aug.2007 12:55:03 PM   
mike999

 

Posts: 1
Joined: 7.Aug.2007
Status: offline 		I am getting an error when trying to access a website / java app.
The website is https://www.53.fx.com

The text of the error is:
There was an error reported when connecting to the server for Client

Reported error: access denied (java.net.SocketPermission <<servername.domain.com:8080 connect, resolve)

Retry login at this server?

Initially I thought this just required me to add port 8080 using the method described in the article.  However, after doing so I still get the same error.  (Does the ISA server need to be restarted for the port 8080 to work? - I did not do this yet)

(in reply to tshinder)
Post #: 35
RE: Discussion about SSL Tunnel Port Range Article - 19.Feb.2008 7:55:20 AM   
shashig

 

Posts: 2
Joined: 19.Feb.2008
Status: offline 		Dear Tom,

I wonder if you could help me please.  I understand this article is for ISA 2004.  Is there any way to add SSL Tunnel Port on ISA 2000 Server?

Thanking you in anticipation,

Best Regards,

Shashi

(in reply to tshinder)
Post #: 36
RE: Discussion about SSL Tunnel Port Range Article - 21.Feb.2008 4:02:12 AM   
shashig

 

Posts: 2
Joined: 19.Feb.2008
Status: offline 		Dear Tom,

I wonder if you could help me please.  I understand this article is for ISA 2004.  Is there any way to add SSL Tunnel Port on ISA 2000 Server?

Thanking you in anticipation,

Best Regards,

Shashi

(in reply to tshinder)
Post #: 37
RE: Discussion about SSL Tunnel Port Range Article - 21.Feb.2008 6:11:16 AM   
elmajdal

 

Posts: 4959
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline 		http://www.isatools.org/tools/ISAtrpe.zip

http://www.isatools.org/tools/isa_tpr.js


Same tools.

Source : http://www.isatools.org/tools.asp?Context=ISA2000

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to shashig)
Post #: 38
RE: Discussion about SSL Tunnel Port Range Article - 11.Apr.2008 4:27:34 PM   
cjdjackson

 

Posts: 2
Joined: 17.Oct.2007
Status: offline 		Is this forum still available to assist with a port range problem?  I posted an assist in the ISA Firewall General forum in regards to Citrix ICA protocols.  Thanks.

CJ

(in reply to tshinder)
Post #: 39
RE: Discussion about SSL Tunnel Port Range Article - 11.Jun.2008 8:59:23 PM   
machamma

 

Posts: 1
Joined: 11.Jun.2008
Status: offline 		Hi guys!

I use Isa 2006 and I am having problem with the following site:

Website: https://wwwt.connectmed.com.br/connectivity

Looking at the log it shows SSL-Tunnel protocol, port 443 and fail... no other port.

Can you check that website please and give me any clues? I have already spent more than 2 hours in that :(

Many thanks in advance,

Marcos from Brazil (sorry about any English mistake)

(in reply to cjdjackson)
Post #: 40

Page:   <<   < prev  1 [2] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Cache] >> General >> RE: Discussion about SSL Tunnel Port Range Article Page: <<   < prev  1 [2]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts