ISA Server cannot to external site

Hi

I think this is not the problem.

In my internet rule i have the access from internal to external with all protocols, but if this works for other sites, it must work for this particular site.

But i have added the local host, and have no suckles.

I think the problem is this :  Denied Traffic  - destination URL host name could not be resolved  

The ISA cannot resolve the url. Why?

In the ISA Server Server DOS console, i have use the nslookup for this domain, and resolved.

Edge

you might wanna look here: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/MS_Internet_Security_and_Accel/Q_23381804.html

one also suggested to: "remove and rebuild cache  files created  by  isa  server"

and the last one here: http://www.experts-exchange.com/Security/Software_Firewalls/Q_21647392.html

i hope one of the 3 suggestions they made will work for you. As i cant test it for you, you will have to do that for yourself :)

Hi

Ok i will check this, and will be back with the feed back

Thank You

Edge

Hi

I have tested the examples in the other question, none worked.

The last EE question that you indicate is about OWA, and publishing a site, this is not the issue here.

Any other help?

Thank You

Edge

Sorry im not quite sure. affraid i have to give up. Anyone else out there with any idea ?

Hi

I have clear the cache, i have add a rule to allow all, still no good.

I have try to log all the activity from connecting to the site i get this

#########################################3

Allowed Connection ISASRV 05-11-2009 12:31:02
Log type: Web Proxy (Forward)
Status: 304 Not Modified
Rule: Internet Access
Source: Internal (192.168.0.79)
Destination: External (external domain IP:80)
Request: GET http://domain.com
Filter information: Req ID: 0f00c30d; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http
User: anonymous
 Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Object source: Internet (Source is the Internet. Object was added to the cache.)
Cache info: 0x40001002 (Request includes the IF-MODIFIED-SINCE header. Request includes the IF-NONE-MATCH header. Response should not be cached.)
Processing time: 47 ms
MIME type:  

Allowed Connection ISASRV 05-11-2009 12:31:02
Log type: Web Proxy (Forward)
Status: 302 Moved Temporarily
Rule: Internet Access
Source: Internal (192.168.0.79)
Destination: External (external domain IP:80)
Request: GET http://domain.com
Filter information: Req ID: 0f00c306; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http
User: anonymous
 Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Object source: Internet (Source is the Internet. Object was added to the cache.)
Cache info: 0x40000000 (Response should not be cached.)
Processing time: 32 ms
MIME type:  

Failed Connection Attempt ISASRV 05-11-2009 12:31:23
Log type: Web Proxy (Forward)
Status: 10060 A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.  
Rule: Internet Access
Source: Internal (192.168.0.79)
Destination: External (external domain IP:443)
Request: domain.com:443
Filter information: Req ID: 0f00c311; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: SSL-tunnel
User: anonymous
 Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Object source: Internet (Source is the Internet. Object was added to the cache.)
Cache info: 0x0
Processing time: 0 ms
MIME type:  

############################

What i see here, is that when the connection is http is good, but then when the remote domain, redirect to the https, i loose the connections and give time out.

I have other sites that i go first http, then the domain redirects to https, is ok i receive the Cert to download.

So i am certain that this is not a rule problem, but why i cannot connect to this site? I have test the site several times, outside of my network, from different networks, and all can connect with no problem.

Can this be a DNS problem?? When the site redirects to https, my DNS cannot resolve the new domain(that is the same, but like, https://xpto.domain.com/anotherview), rather than xpto.domain.com.

Can anyone give a help on this please?

Thank you

Edge

Can you add relevant entries in the HOST file of you ISA server and check.

Hi PingRiyaz

Sorry did not understand the question.

Add what entries in my HOST file?

Edge

Can you add the IP address and the domain name in the HOST file of the ISA server and check

Example
192.168.1.1    xpto.domain.com

OK i will try and add here the feed back

Thank you

Edge

Hi PingRiyaz:

Nope did not work :(

Is there a way that i can tracert a url? Any tool etc.?

I know that i can tracert a IP or domain, but i need to tracert https://xpto.domain.com/xpto

This type url i cannot tracert with this command. Is there other way??

With this i can confirm where can i get, if i get outside of my network, or this is blocking in the way.

Edge

Just run the tracert for xpto.domain.com which is more than enough

Hi

Sorry but is not.

Because xpto.domain.com i can reach without any problems. I cannot reach is https://xpto.domain.com/xpto

And tracert do not work with url, but only with domains

Hi Bestway

I follow your resolution and we found out that a firewall in your network(outside of internal network) is blocking that url

the packets stop in that firewall IP, then we contact the company that maintain that firewall and they are working on int.

I will post the feedback