MSN Messenger Problem Using Proxy Server

I have made a simple rule and allow all outbond traffic without any filter even though it doesnt work. All above mentioned URL is automatically allowed in my rule. My previous live messenger works fine and this problem only reported in 2009 version.

All I know is what is in those links.  Somewhere in those links you should have seen that full 100% functionality of the messenger's features is just not possible due to the fact that the technology and methods used just simply will not work over proxys or NAT Firewalls.

I agree that 100% functionality is not possible but i believe that Live messenger should run using ISA proxy and it works.

I have found the work around of mentioned problem, If i remove the messenger properly and run utility to clean the Live messengers registries and temp files and after rebooting machine i reinstalled live messenger, It works fine.
But its strange that before this exercise when i run live messenger directly from firewall (bypass ISA Proxy) it works and with same setup when i try from ISA firewall, it doesnt work!

Have you any idea? Because i cannot run this utilty for 500 users.

But its strange that before this exercise when i run live messenger directly from firewall (bypass ISA Proxy) it works and with same setup when i try from ISA firewall, it doesnt work!

I can't know what that means in your environment.  Half the time when people think they are "bypassing" the ISA all they are really doing is "ingoring" the Web Proxy Service which causes the Client to drop back to using the Firewall (winsock) Service or the SecureNAT Service,...so they are still using the ISA.

If this is a single-Nic ISA with some other brand of Firewall between the LAN and the Internet then you shouldn't be using the ISA to begin with for the messenger. Just tell the messenger that there is no proxy and let it work via the third-party firewall.  Using the Single-Nic ISA's Web PRoxy Service for the Messenger is a waste of time.

Lets say i am not using Proxy server and my Windows Live Messenger is working fine.

When i use proxy server to connect Windows Live Messenger then It LogIn and Logout after a few seconds and this process continues.

Secondly I am using ISA server with two interfaces.

I am not an expert in the Windows Live Messenger,...I don't even know what the configuration UI even looks like, besides the fact that they keep changing it with every version.  But if you can run the Messenger as if there is no proxy,...then install the Firewall Client on the workstation,...that would be your best scenario.  But I don't know if the Messenger even gives you the option of telling it to not use a proxy at all,...it may force you to do whatever the browser is doing without a choice.

Can you forward my request to an expert that has proper understanding of windows Live messenger because this is a very critical problem for me. I can't give firewall client to all my users for this purpose.

I don't know of any expert for it here, of it there is even any forum here that pertains to it.  Why can't you install the FWC?  It is very rare that someone "can't",...usually they just don't "want to",...and that is usually because they don't understand what it is and how important it is.

I have found the work around for above question without installing any Firewall client.

I am going to close this question because the deputed person has not added any related comments of my question. I have a critical problem of MSN that my users can not connect to MSN using proxy server. And after putting some struggle, i have found workaround of above problem but that is not a permanent solution.

I'm not a "disputed person".  But I do disagree that I have "not added any related comments of my question". This is an ISA/TMG forum,...not a Windows Messenger forum.  I gave a considerable amount of information in the form of Links in my first post.  These articles give pretty much all the known information about Messaging applications  from ISA's perspective.   I am not, and am not expected to be, an expert on Windows Messenger itself.

I'm not a "disputed person".  But I do disagree that I have "not added any related comments of my question". This is an ISA/TMG forum,...not a Windows Messenger forum.  I gave a considerable amount of information in the form of Links in my first post.  These articles give pretty much all the known information about Messaging applications  from ISA's perspective.   I am not, and am not expected to be, an expert on Windows Messenger itself.

I do not particularly care of if the thread is closed, nor do I care about any points, but I do care about setting the record straight.

Thanks keith for your comments!
I agree you are happily running Windows Live messenger 2009 but i have a problem with this version using web proxy and secure nat. And i put my full struggle from web to over come this issue. And after that i have put it on experts to get its solution.

Currently the situation is when i connect to Windows Live through web proxy, It show me the attached error message.

Don't bother 'putting it on the experts' - the issue remains yours (you have the problem, we don't) but we will help if and where we can.

There are over 69,000 references to this issue with Windows Live found on Google alone....

Can you confirm first that you have downloaded and installed ISA2004 sp3 on your ISA Server just so we know that you are running a supported version of the product?

Yes, I have already SP3 installed on ISA 2004 Proxy Server.

I have another seperate domain on which ISA 2006 with SP1 is running and the same problem is also there when i use Web proxy.

Thats good - that you have the SP3 installed.
The first point in your initial alert is not an issue. set it up correctly and there IS no issue. Just up to you to decide which elements you want to block or allow through the content-type filters.

As for the second item on Windows live, do you get the error or a brand new installation of Windows?
What is seen in the ISA realtime log when Live is accessed?
Is Live exempted in the client computers personal firewall?

I have tried Windows live connection on fresh machine even though its not working and prompt me the attached erro screen.

Yes i hav allowed Windows Live messenger from firewall.

Secondly i have also attached real time proxy log when i connect to windows live messenger.

Lets cut to the chase here.

Please explain - fully - the rule that you have in place allowing access from the internal network to the internet. As you can see, it is the rule called 'management' where the issue is taking place so this is the rule i need the details of.

This is a very simple rule without any filter.

From  -> Internal
To  -> External
Protocol -> All outbound Traffic
Content Type   -> All
Action  ->  Allow
Schedule   -> Alway

Any idea..... Waiting for your reply

So why is the rule called Management - that is completely open apart from blocking traffic originating from the ISA itself?

Also, run up the the BPA on the ISA box. lets check the basics.