• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 317
  • Last Modified:

SBS 2003. Clients Can't connect to the internet

Hello,

My client machines can't connect to the internet.  They are all filtering through the  built in proxy server on ISA. I keep getting a Error Code 10060: Connection timeout.  This is all of a sudden out of the blue.

I am able to VPN in and I can browse the internet from the server machine.

What is happening?

Wes
0
hmcnasty
Asked:
hmcnasty
  • 3
  • 3
  • 2
  • +4
1 Solution
 
Irwin SantosComputer Integration SpecialistCommented:
review your event log.. anything showing a problem?

what about services?  anything stopped?
0
 
hmcnastyAuthor Commented:
No events

Nothing stopped.

When I log on to the machines remotely.  I will open the browser and it times out I get the ISA connection time out screen  Then I will Close the browser and reopen the browser and it will work fine.
0
 
Irwin SantosComputer Integration SpecialistCommented:
restart the server and try again
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
hmcnastyAuthor Commented:
I did that too. It seems to work a bit better now.  But still not the way it did.  What can cause this kind of thing?

Wes
0
 
Irwin SantosComputer Integration SpecialistCommented:
Focus on your event logs and see what comes up.. Look for patterns and common denominators...that would be the key.

also, via you VPN.. it could be connectivity via your provider or some other routing....

Have you done a before & after traceroute?
0
 
scrathcyboyCommented:
ISA server often goes haywire, there are a lot of problems with it come in to expert exchange.  Do you need to rely on this for internet access?  Can you not use a reliable connection proxy, like the onese built into routers and switches?  Is this ISA server the only thing you will consider, or do you want reliability??
0
 
shallicrsCommented:
Try reaching a site by its IP address. If you can check with your ISP to see if they changed DNS servers.
0
 
DCreatureCommented:
If you are taklinga bout VPN connectivity from your PC to a remote PC. Once you establish VPN connection to a remote site, you will usually lose the routes your PC has on your current network temporarily, therefore your PC will not be able to connect to the Internet.

Your PC will be using remote network, therefore, when you remote in to a remote PC, you can access Internet from the remote PC.
0
 
msghalebCommented:
I would recommend opening everything on the ISA server from the Internal Clients to the Internet, and try and take it from here.

is it ISA 2000 or 2004 ?

Thank you.
0
 
hmcnastyAuthor Commented:
dcreature - no it's internal clients.  I just vpn'd in to see what the problem was.  I could remote fine.

 msghaleb - it's 2004.  What sorts of vulnerabilities will that open my client up to.
0
 
msghalebCommented:
Ok I would recommend you to add a Policy Rule, to Open ALL OUTBOUND TRAFFIC from ALL NETWORKS and LOCAL HOST to ALL NETWORKS and LOCAL HOST, and put it on the top of all rules.

This will make your ISA 2004 act as a router not a firewall, so it will be not secure, but you will be able to know if the ISA is the problem.

After adding such rule try to access the Internet, if it works, then disable the rule, and check the logging, the live logging will let you know which rule is blocking the traffic.

obviously make sure your clients have the ISA 2004 as a gateway, and you can also try to remove the proxy settings from the IE on the client side.

Thanks
0
 
shallicrsCommented:
In ISA 2004 you can monitor the outbound traffic from oneof the workstations to the internet to determine what "rule" is blocking. You can also turn off the firewall service to determine if it is the firewall which is actually blocking the traffic. You might need to download the proxy client to the workstations.
0
 
Adam PedderCommented:
Rerun the Connect To Internet Wizard from the To Do List in the Server Management console. That fixes most ISA ills by reseting the filters, and will also fix some DNS problems. Then check that your clients have the ISA server set as their proxy server in Internet Explorer.

0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

  • 3
  • 3
  • 2
  • +4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now