web pages don't load from client but loads 100% from ISA server's browser

When i access certain sites from my browser the page does not fully load  but the same site loads 100% when browsing from the ISA server itself. Using the config script on both browsers.  Is this a policy setting or s system policy blocking.
AblSysadminSenior Systems EngineerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Keith AlabasterEnterprise ArchitectCommented:
Neither. It is normally when ISA is not installed correctly. Check the DNS entries are set up as as per the ISA requirements so there are no external DNS references. Also make sure your lat entries are accurate including net ID's and broadcast addresses.
0
AblSysadminSenior Systems EngineerAuthor Commented:
I check everything and all is set 100%. any other idea's?
0
Keith AlabasterEnterprise ArchitectCommented:
Please provide the contents of your lat and the results of an ipconfig /all
What rule have you put into allow the outbound traffic - full details please

0
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

AblSysadminSenior Systems EngineerAuthor Commented:
we are using ISA 2006. no lat table.
i have a rule to allow all out going protocol's and all content
0
Keith AlabasterEnterprise ArchitectCommented:
If you do not have a lat table then ISA will not work - game over
0
AblSysadminSenior Systems EngineerAuthor Commented:
the LAT contains only internal IP ranges. We are using ISA 2006 ent server. under the enterprise networks tab the same networks are listed
0
tibble2Commented:
Hi,

You mention its only certain sites these don't happen to be SSL sites ?
0
AblSysadminSenior Systems EngineerAuthor Commented:
No, SSL is loading 100%. The sites load from the ISA server without any problem, it's from the client where i have the problem and this is happening since I rebuild the ISA server. Site like: http://www.dadocreations.co.za loads from the ISA server but not from my pc.
0
Keith AlabasterEnterprise ArchitectCommented:
Does the LAT include ALL of the internal IP addresses? For example, if you are on 192.168.1.0 subnet, have you included the 192.168.1.0 & the 192.168.1.255 addresses? You must include the ID and the broadcast address.

Is SBS itself using the proxy? ie Does the sbs server have its internal IP address and port 8080 in the proxy settings?
0
AblSysadminSenior Systems EngineerAuthor Commented:
Yip LAT includes all internal addresses. Server not running on SBS.
0
Keith AlabasterEnterprise ArchitectCommented:
lol - i meant on the ISA server :)
0
AblSysadminSenior Systems EngineerAuthor Commented:
internal IP address and port 8080 in the proxy settings
0
Keith AlabasterEnterprise ArchitectCommented:
please post the output from an ipconfig /all on the ISA server
0
AblSysadminSenior Systems EngineerAuthor Commented:


Windows IP Configuration



   Host Name . . . . . . . . . . . . : midisa

   Primary Dns Suffix  . . . . . . . : africanbank.net

   Node Type . . . . . . . . . . . . : Unknown

   IP Routing Enabled. . . . . . . . : Yes

   WINS Proxy Enabled. . . . . . . . : No

   DNS Suffix Search List. . . . . . : africanbank.net



Ethernet adapter Local Area Connection:



   Connection-specific DNS Suffix  . : Africanbank.net

   Description . . . . . . . . . . . : VMware Accelerated AMD PCNet Adapter

   Physical Address. . . . . . . . . : 00-50-56-BA-32-EC

   DHCP Enabled. . . . . . . . . . . : No

   IP Address. . . . . . . . . . . . : 10.30.124.233

   Subnet Mask . . . . . . . . . . . : 255.255.254.0

   Default Gateway . . . . . . . . . : 10.30.124.1

   DNS Servers . . . . . . . . . . . : 10.30.124.10

                                       10.30.124.11

   NetBIOS over Tcpip. . . . . . . . : Disabled

0
Keith AlabasterEnterprise ArchitectCommented:
So you are running proxy only? Hmmm - you know that ISA was not supported on a virtual platform? Should work OK but it's not a supported config; although that is changing now.
If you bypass ISA, from the client, I assume it works OK?
What aspect iof the sites are not loading correctly?
Is there anything common about the site types that fail compared to those that don't?
Java versions? Flash player? Silverlight?
What do you see in the ISA log when a site fails to complete?
0
AblSysadminSenior Systems EngineerAuthor Commented:
firewall/cache server. Know it is not supported but have 85% of our MS server running on VM. not problems.
yip bypass works.
yip flash and so.
On the logs everything is alllowed. nothing is being dropped.
0
Keith AlabasterEnterprise ArchitectCommented:
if you are running as a firewall then surely there should be two ip addresses listed in the ipconfig /all output? With only one nic, it cannot be a firewall; only a proxy.
0
AblSysadminSenior Systems EngineerAuthor Commented:
the firewall services is running, our config is a bit weird. one nic. internal and same nic points to a checkpoint firewall(gateway)
0
AblSysadminSenior Systems EngineerAuthor Commented:
pages hangs when laoding www.google-analytics.co.za
0
Keith AlabasterEnterprise ArchitectCommented:
No such page yet - it is a redirect
0
AblSysadminSenior Systems EngineerAuthor Commented:
I know, but the page does not get redirected
0
Keith AlabasterEnterprise ArchitectCommented:
Basics then. You already know vmware is not supported, and rightly so. However the main lack of support is that it is not secure rarther than it doesn't actually work. lol God help you if you ever get audited and this is in your production environment :) It is worth noting though that this environment WILL be supportable very soon.

What results are you getting from the BPA?
Create a repro file for me from the start - programs - ISA menu and try and go to the site. post the created .cab file here and we can look through it.



0
AblSysadminSenior Systems EngineerAuthor Commented:
Here is the export as per your request.
0
AblSysadminSenior Systems EngineerAuthor Commented:
Sorry but i can't get the cab option if i export the report, only xml,csv or html.
0
AblSysadminSenior Systems EngineerAuthor Commented:
and the upload does not want to take the file. please assist
0
Keith AlabasterEnterprise ArchitectCommented:
use my email address - keith_alabaster@experts-exchange.com
0
AblSysadminSenior Systems EngineerAuthor Commented:
sent the mail, please advise asap
0
Keith AlabasterEnterprise ArchitectCommented:
I will get around to it. I also assist on a number of other sites and have to split my free-time between them and my family and my normal day job.
0
AblSysadminSenior Systems EngineerAuthor Commented:
ok, thanx for the help!!!
0
AblSysadminSenior Systems EngineerAuthor Commented:
problem sort of solved. the pages that did not want to load before , loads now after using the uploaded txt file. the sites take very long to load but opens not. the only error i get is something about js files that can not be access and then a time out error. on the logs. any idee's?
HTTPKeepAliveTimeOut.txt
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
AblSysadminSenior Systems EngineerAuthor Commented:
..................................................
0
AblSysadminSenior Systems EngineerAuthor Commented:
Problem resolved
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Forefront ISA Server

From novice to tech pro — start learning today.