[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

web pages don't load from client but loads 100% from ISA server's browser

Posted on 2008-11-16
32
Medium Priority
?
399 Views
Last Modified: 2012-06-27
When i access certain sites from my browser the page does not fully load  but the same site loads 100% when browsing from the ISA server itself. Using the config script on both browsers.  Is this a policy setting or s system policy blocking.
0
Comment
Question by:ablsysadmin
  • 19
  • 12
32 Comments
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 22973722
Neither. It is normally when ISA is not installed correctly. Check the DNS entries are set up as as per the ISA requirements so there are no external DNS references. Also make sure your lat entries are accurate including net ID's and broadcast addresses.
0
 

Author Comment

by:ablsysadmin
ID: 22973801
I check everything and all is set 100%. any other idea's?
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 22977984
Please provide the contents of your lat and the results of an ipconfig /all
What rule have you put into allow the outbound traffic - full details please

0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 

Author Comment

by:ablsysadmin
ID: 23084011
we are using ISA 2006. no lat table.
i have a rule to allow all out going protocol's and all content
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 23089108
If you do not have a lat table then ISA will not work - game over
0
 

Author Comment

by:ablsysadmin
ID: 23103047
the LAT contains only internal IP ranges. We are using ISA 2006 ent server. under the enterprise networks tab the same networks are listed
0
 
LVL 3

Expert Comment

by:tibble2
ID: 23103162
Hi,

You mention its only certain sites these don't happen to be SSL sites ?
0
 

Author Comment

by:ablsysadmin
ID: 23118908
No, SSL is loading 100%. The sites load from the ISA server without any problem, it's from the client where i have the problem and this is happening since I rebuild the ISA server. Site like: http://www.dadocreations.co.za loads from the ISA server but not from my pc.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 23119016
Does the LAT include ALL of the internal IP addresses? For example, if you are on 192.168.1.0 subnet, have you included the 192.168.1.0 & the 192.168.1.255 addresses? You must include the ID and the broadcast address.

Is SBS itself using the proxy? ie Does the sbs server have its internal IP address and port 8080 in the proxy settings?
0
 

Author Comment

by:ablsysadmin
ID: 23119058
Yip LAT includes all internal addresses. Server not running on SBS.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 23119094
lol - i meant on the ISA server :)
0
 

Author Comment

by:ablsysadmin
ID: 23119269
internal IP address and port 8080 in the proxy settings
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 23122484
please post the output from an ipconfig /all on the ISA server
0
 

Author Comment

by:ablsysadmin
ID: 23127115


Windows IP Configuration



   Host Name . . . . . . . . . . . . : midisa

   Primary Dns Suffix  . . . . . . . : africanbank.net

   Node Type . . . . . . . . . . . . : Unknown

   IP Routing Enabled. . . . . . . . : Yes

   WINS Proxy Enabled. . . . . . . . : No

   DNS Suffix Search List. . . . . . : africanbank.net



Ethernet adapter Local Area Connection:



   Connection-specific DNS Suffix  . : Africanbank.net

   Description . . . . . . . . . . . : VMware Accelerated AMD PCNet Adapter

   Physical Address. . . . . . . . . : 00-50-56-BA-32-EC

   DHCP Enabled. . . . . . . . . . . : No

   IP Address. . . . . . . . . . . . : 10.30.124.233

   Subnet Mask . . . . . . . . . . . : 255.255.254.0

   Default Gateway . . . . . . . . . : 10.30.124.1

   DNS Servers . . . . . . . . . . . : 10.30.124.10

                                       10.30.124.11

   NetBIOS over Tcpip. . . . . . . . : Disabled

0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 23127303
So you are running proxy only? Hmmm - you know that ISA was not supported on a virtual platform? Should work OK but it's not a supported config; although that is changing now.
If you bypass ISA, from the client, I assume it works OK?
What aspect iof the sites are not loading correctly?
Is there anything common about the site types that fail compared to those that don't?
Java versions? Flash player? Silverlight?
What do you see in the ISA log when a site fails to complete?
0
 

Author Comment

by:ablsysadmin
ID: 23127515
firewall/cache server. Know it is not supported but have 85% of our MS server running on VM. not problems.
yip bypass works.
yip flash and so.
On the logs everything is alllowed. nothing is being dropped.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 23131559
if you are running as a firewall then surely there should be two ip addresses listed in the ipconfig /all output? With only one nic, it cannot be a firewall; only a proxy.
0
 

Author Comment

by:ablsysadmin
ID: 23136396
the firewall services is running, our config is a bit weird. one nic. internal and same nic points to a checkpoint firewall(gateway)
0
 

Author Comment

by:ablsysadmin
ID: 23171857
pages hangs when laoding www.google-analytics.co.za
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 23177746
No such page yet - it is a redirect
0
 

Author Comment

by:ablsysadmin
ID: 23191766
I know, but the page does not get redirected
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 23195619
Basics then. You already know vmware is not supported, and rightly so. However the main lack of support is that it is not secure rarther than it doesn't actually work. lol God help you if you ever get audited and this is in your production environment :) It is worth noting though that this environment WILL be supportable very soon.

What results are you getting from the BPA?
Create a repro file for me from the start - programs - ISA menu and try and go to the site. post the created .cab file here and we can look through it.



0
 

Author Comment

by:ablsysadmin
ID: 23210669
Here is the export as per your request.
0
 

Author Comment

by:ablsysadmin
ID: 23210705
Sorry but i can't get the cab option if i export the report, only xml,csv or html.
0
 

Author Comment

by:ablsysadmin
ID: 23210707
and the upload does not want to take the file. please assist
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 23210722
use my email address - keith_alabaster@experts-exchange.com
0
 

Author Comment

by:ablsysadmin
ID: 23211543
sent the mail, please advise asap
0
 
LVL 51

Assisted Solution

by:Keith Alabaster
Keith Alabaster earned 2000 total points
ID: 23212042
I will get around to it. I also assist on a number of other sites and have to split my free-time between them and my family and my normal day job.
0
 

Author Comment

by:ablsysadmin
ID: 23225504
ok, thanx for the help!!!
0
 

Accepted Solution

by:
ablsysadmin earned 0 total points
ID: 23261258
problem sort of solved. the pages that did not want to load before , loads now after using the uploaded txt file. the sites take very long to load but opens not. the only error i get is something about js files that can not be access and then a time out error. on the logs. any idee's?
HTTPKeepAliveTimeOut.txt
0
 

Author Comment

by:ablsysadmin
ID: 23294546
..................................................
0
 

Author Comment

by:ablsysadmin
ID: 23302114
Problem resolved
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I have been asked to explain on many, many occasions the correct way to setup network cards and DNS settings on ISA Server 2004, 2006 and forefront Threat management gateway (FTMG) and have willing done so. I have also promised my self everytime tha…
Microsoft's ISA Server has been its pre-eminent security product for about a decade and is still regarded amongst the well-informed as one of the best software firewalls and application gateways ever released, by any manufacturer. ISA Server has bee…
This Micro Tutorial will teach you how to add a cinematic look to any film or video out there. There are very few simple steps that you will follow to do so. This will be demonstrated using Adobe Premiere Pro CS6.
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …
Suggested Courses
Course of the Month20 days, 8 hours left to enroll

868 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question