Welcome to ISAserver.org

specific users allowed to specific site and use Yahoo messenger

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> specific users allowed to specific site and use Yahoo messenger

Page: [1]

Message

<< Older Topic Newer Topic >>

specific users allowed to specific site and use Yahoo m... - 27.Jun.2008 9:55:13 AM

ka3na_m

Posts: 3
Joined: 21.Mar.2007
Status: offline

Hi to all,

I am to create a policy that will allow specific users to access specific website and use of Yahoo Messenger.

FROM: Internal
TO: YAHOO only (domain name set = *.yahoo.com; *.yimg.com)
PROTOCOLS: FTP, HTTP, HTTPS
CONDITION: YM users (specific domain users)

In the above policy I was able to allow the specific user to a certain site, but when it comes to allowing them use YM, my policy doesn't work and generates below denied connection log:

Denied Connection ISASERVER61 6/27/2008 8:40:45 PM
Log type: Web Proxy (Forward)
Status: 12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy service is denied.
Rule: Allow to YM only
Source: Internal ( 10.105.12.86:0)
Destination: External ( 10.105.2.50:8080)
Request: POST http://shttp.msg.yahoo.com/notify/
Filter information: Req ID: 0e59b5b7
Protocol: http
User: anonymous
Additional information
Client agent: Mozilla/4.01 [en] (Win95; I)
Object source: Processing time: 1000
Cache info: 0x4 MIME type:

From my test, using the same policy and just changing the CONDITION = ALL USERS and ALL AUTHENTICATED USERS. All users would have YM and access to the YAHOO only Domain set. So, it is just my users condition causing the DENIAL to YM. How do I fix this? help pls....

By the way, I am using ISA 2004 SP3 on WIN2k3 R2 and my workstations as a WEB Proxy client

Post #: 1

Featured Links*

RE: specific users allowed to specific site and use Yah... - 29.Jun.2008 5:17:37 AM

elmajdal

Posts: 4941
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Have you tried installing the Firewall client on one machine and test.

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to ka3na_m)

Post #: 2

RE: specific users allowed to specific site and use Yah... - 8.Jul.2008 9:03:25 AM

ka3na_m

Posts: 3
Joined: 21.Mar.2007
Status: offline

Hi Sir,

I tried installing FW client but still YM didn't work..

I think I also need to specify needed APPLICATION SETTINGS for the FIREWALL client.... may be after doing that it will work...

What specific setting should I set on my firewall client... help pls....

(in reply to elmajdal)

Post #: 3

RE: specific users allowed to specific site and use Yah... - 21.Jul.2008 10:02:48 PM

ka3na_m

Posts: 3
Joined: 21.Mar.2007
Status: offline

Hi to all,

Just an update....

I was able to solve my problem. by simply setting the enabling the HTTP 1.1 through provy connections options in the EI's advanced settting.

Without the firewall client my policies and YM worked!

YIPIII!!!!! :)

(in reply to ka3na_m)

Post #: 4