Solved

ISA server is blocking part of MapQuest, so the whole page errors out.  Can't figure out what to add to ISA ALLOWED SITES list.

Posted on 2008-10-09
11
1,943 Views
Last Modified: 2013-12-08
I believe I just need to add a web URL or IP address to my list of websites which our ISA server allows.  Mapquest worked fine through ISA until about two weeks ago.  I think they added some Flash video or something that my ISA server is now blocking.  If I log on as an ISA-unrestricted user, the mapquest loads completely, with no error.
Mapquest-error.JPG
0
Comment
Question by:Bruce Pollard
  • 5
  • 5
11 Comments
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 22718271
Bruce, I'll pick this one up, as Modus has requested us to, but for future reference please supply some information with your question.

Version of ISA Server? Service pack of ISA applied? ISA2000? 2004? 2006?
Are you ising ISA as a proxy/firewall or proxy only?
Do you have the ISA firewall client installed on the clients?
Type of client used? Vista? XP? IE6? IE7? IE8?
Does the fault occur for all users/client variations consistently?
Can you repeat the issue from the ISA Server itself?
Have you spoken to/contacted the webmaster at webquest to ask if they have made any changes?
If you view the connection attempt through the ISA realtime log monitor what messages do you see when the issue occurs?
What troubleshooting actions have you already undertaken? and what were the results?

Keith
0
 

Author Comment

by:Bruce Pollard
ID: 22722778
ISA Server 2000 Standard Edition - Service Pack 2.
Proxy only.
No ISA firewall client installed on clients.
WinXP clients.
The fault occurs only for all clients in my RESTRICTED WEB ACCESS list on the ISA server.
I don't believe I can try to repeat the issue from the ISA server, because I only log on as an unrestricted admin.
I don't understand your reference to "webquest".  If you mean "mapquest", then no, I don't know how to contact their webmaster.  If you do, then I'll deal with them directly instead.
I've never used the ISA realtime log monitor.  I'll look into that and advise you of my results.
My previous missives have described the troubleshooting actions I've already undertaken and their results.  If you'd like more detail on this, I'll provide it.
Thanks so much for your patience, Keith.  And Modus, sorry to be so much trouble.
0
 

Author Comment

by:Bruce Pollard
ID: 22722913
I went to the ISA / MONITOR / ALERTS folder and saw only "ISA" and "Service Started" on the ISA server.  I then logged on as a restricted user, tried to load Mapquest and got the same error.  But nothing appeared in the ALERTS window on the server.  I then went to a website (CNN.com) that is not on our ALLOWED WEBSITES LIST for the restricted users and again saw no new entries in the ALERTS folder.  Could it be a Flash/ActiveX setting in our IE6 which is blocking this advertisement on mapquest?  Maybe I'm barking up the wrong tree by suspecting ISA.  The fact that this just started happening, and only with the Flash/ActiveX element would redirect us to an UNALLOWED advertiser website, made me suspect ISA.  But then again, when I go to cnn.com, shouldn't an alert appear in ISA's ALERTS window?
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 22723750
Alerts is totally different. The ISA log is in monitoring - logging - click start query.
The monitoring - alerts section is simply an ISA version of the MS event log.

As above. Please advise on the environment so we do not waste time on areas already covered or on areas that are not relevant due to the particular environment you have.

Keith
0
 

Author Comment

by:Bruce Pollard
ID: 22723901
I sent two updates this morning.  The first answered your questions re the environment.  Shall I repost?
0
Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

 

Accepted Solution

by:
Bruce Pollard earned 0 total points
ID: 22724069
Problem fixed.  I'd previously added a variety of NONALLOWED websites that showed up in the ISA ProxyWeb log to our ALLOWED list.  Previous internet research had revealed msqdn(?).com as a possible culprit, but since it didn't appear in the ISA log, I didn't add it.  This morning, that website DID appear in the log, so I added it to our ALLOWED website list and now the flash/activex ad in the middle of the mapquest.com page doesn't try to load, resulting in a fatal error on the mapquest.com page.  Instead, there is a blank rectangle in the middle of the page, but the rest of the page loads and functions properly.  Thanks for re-pointing me to the logfile, wherein lay my solution.
Case closed.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 22724075
My apologies, when an update (email from you letting me know you have replied) arrives, it takes me to the specific posting you have added, as my emails arrive latest at the top I was directed to your last post and didn;'t think to scroll up the screen.

OK - as you likely know, ISA200 ceased to be supported in August 2006. on that basis I don't really support it either. Besides my role on Experts-Exchange, I am also the owner of Microsoft's own Technet MS Forefront forums - if I won't support it there, it is hard to do so here as you can imagine.

That said, as you have had to wait a while we will see what we can do. You are not beingg 'trouble' at all - we provide a service and you have used the appropriate escalation tools to get the problem on everyone's radar. Fair play in my view.

ISA2000 does not have a realtime log monitor - it was introduced with ISA2004 - so no surprise you cannot find it :)
No isa firewall clients - plus you are in proxy mode only (as opposed to firewall or integrated for 2000) so you are web proxy clients and the default gateways of your clients will point to whatever your router/firewall device is to the internet.

Will be back in 5 minutes :)



0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 22724102
lol - overtyped each other - only got in from work about 10 minutes ago

As you have resolved this yourself anyway you can use the tools on the page to request the question be closed - accepting your explanation and requesting a points refund. Yes I pointed you at the logs but you sorted it and came to the right conclusion. well done.

Keith
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 22733840
nice one - and thanks for the updates.

Keith
0
 

Author Comment

by:Bruce Pollard
ID: 22745136
I tried to close this question yesterday.  Here's my second attempt.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Storage devices are generally used to save the data or sometime transfer the data from one computer system to another system. However, sometimes user accidentally erased their important data from the Storage devices. Users have to know how data reco…
Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now