Yahoo messenger with "Use Proxy" settings not working..

i need to clarify here. We are using ISA server in cache only mode so no need of firewall client.

this link is for ISA server in integrated mode or Firewall mode.

http://www.windowsecurity.com/articles/How_to_Block_Dangerous_Instant_Messengers_Using_ISA_Server.html


"In Internet Explorer, click Internet Options on the Tools menu.
Click the Advanced tab, click to select the Use HTTP 1.1 through proxy connections check box, and then click OK."

tried it but still no luck.

If i use yahoo with proxy, which ports it uses ? i allowed all the trafic from ISA server to pass through checkpoint firewall.
how ISA server in Cache only mode can be used as proxy for yahoo messenger.
 i think the yahoo messenger requests is not passing through the ISA server. I am stuck here. i need an answer urgently..

thanks for the suggestions

ikm7176 - did you find a solution for this ?  If so, post up so this can be PAQ/Refunded instead.

sorry, i am still having problem finding a solution. No clues! I need to go into technical details of yahoo messenger. I am trying. No response from other techincal forums too..

Workaround: configured the clients with Firewall as gateway and configured rules directly on the Checkpoint, untill we find a solution with ISA.

I think "ISA in cache only mode" is the key, it will not support my requirements.

i'll love to see somebody come up with a technical explanation for this... i am very desperate to know this issue.

4 days for this question to be closed. Keeping my fingers crossed.

Thanks!

If ISA is cache-only, then if a client requests Yahoo messenger on port 80 or 8080, then the ISA server will see this as a web page request, and will try and fill its cache with whatever it finds on the destination service.  As Yahoo Messenger protocols are complex, the simple caching service will not understand them and will just drop the traffic.

To get round this, I would normally leave ISA as a cache-only server for port 80 / 443, and set this up in individual IE browsers, but let Yahoo messenger traffic out via the firewall by allowing clients to see port 5050 on the outside world.

I would read this.  It's MS's definition of how to get MSN Messenger working through ISA:

http://www.microsoft.com/technet/prodtechnol/isa/maintain/isaimsec.mspx

Something similar would be required for Yahoo methinks.  I don't think you will be able to get Yahoo Messenger to work going through a cache-only ISA server.  In fact, I wouldn't even try !

Actually we are having DHCP environment and the clients are getting IP addresses dynamically. So if we define the rule in firewall for a particular host or IP the client will blocked at the through firewall if its IP address gets changed. This is the reason why i was avoiding this method. Also, we now need to give static IP addresses and Gateway address on each cleint.

Yahoo through ISA server cache mode would have made life much easier. Microsoft did not mentioned anywhere that "Messengers will not work with ISA server cache mode" . So, lack of evidence is making me feel that there is a way to handle this.

I'll keep this question open for further recomendations..if any

Here's another reasonable link.  It explains how to block, rather than permit, but may give you some ideas ?

http://www.windowsecurity.com/articles/How_to_Block_Dangerous_Instant_Messengers_Using_ISA_Server.html

I take it you want to allow Yahoo messenger for some users, and disable it for others ?

yes, i need to allow yahoo messenger for some users only.

Another way round would be to integrate Check Point AI with your AD users, so you have user level control on the firewall ?

Another thought on cache only mode - is there a way you could make sure the Yahoo logon sites DON'T try and get cached - *.pager.yahoo.com ?

There must be some sort of pass-thru' setting for problem pages that don't cache properly ?

same thinking.. eh, i also thought of integrating AD with CheckPoint. but, due to lack of documentation we didn't tried it.
i didn't had much time to study on Checkpoint. can you send me the link on how to achieve this ?

Our checkpoint vendors also suggested to keep ISA server for Web filtering and caching. As checkpoint will not support these features.  

well well...well, don't cache *.pager.yahoo.com, never had to deal with such an issue, i don't know if this is possible. very intelligent thought though, i really appreciate your help.

i am thinking of putting off this issue now and work with this solution
"To get round this, I would normally leave ISA as a cache-only server for port 80 / 443, and set this up in individual IE browsers, but let Yahoo messenger traffic out via the firewall by allowing clients to see port 5050 on the outside world".

in the meantime i will try to work on AD integration with Checkpoint

thanks again!

thanks a lot tim ! i really appreciate your help. i am giving you the points. but please inform me if come across anything related to my issue