Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Windows Live messenger disconnects (ISA Server 2006)

Posted on 2009-04-22
20
Medium Priority
?
1,143 Views
Last Modified: 2012-06-27
We are having problems with live messenger not working(Keep disconnects) with ISA sever 2006, our configuration is to allow all users traffic out with no exceptions as all of our users internet traffic is through the proxy, if i bypass the proxy server and go directly through the PIX firewall it works fine.
0
Comment
Question by:ITACS
  • 9
  • 7
  • 2
  • +1
19 Comments
 
LVL 15

Expert Comment

by:Raj-GT
ID: 24204560
Are you allowing "All Users" user group access to HTTP and HTTPS out?
0
 

Author Comment

by:ITACS
ID: 24206737
Yes
0
 
LVL 15

Expert Comment

by:Raj-GT
ID: 24208963
Some things to try...

1. Make sure all updates and service packs are installed on your ISA Server - http://technet.microsoft.com/en-us/forefront/edgesecurity/bb734854.aspx

2. Even though it's working fine through the PIX, I would recommend upgrading Live Messenger to the latest available version (if that's not the case.)

3. Goto Tools > Connections > Advanced settings in Messenger to check for any proxy misconfigurations and/or to test connectivity through ISA.

4. Use the logging tab of ISA to monitor the traffic from the Messenger PC.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 

Author Comment

by:ITACS
ID: 24212608
all updates are installed also i have the latest version of Live Messenger.
i used the logging tab and i have many access denied even though all outbound traffic is selected.
0
 
LVL 15

Expert Comment

by:Raj-GT
ID: 24213142
Filter the log results by using the Client Agent string contains "Windows Live Messenger" first. Any denied entries should actually tell you which rule is blocking the MSN traffic. (I am assuming your clients PCs are configured as web proxy clients and not using the ISA Firewall Client)

Also check Web Proxy authentication; Configuration > Networks > Internal > Properties > Web Proxy tab > Authentication) you should have Integrated checked and require all users to authenticate unchecked)

0
 

Author Comment

by:ITACS
ID: 24213337
require all users to authenticate is checked and i need it to be checked is it ok?
0
 
LVL 15

Expert Comment

by:Raj-GT
ID: 24213400
Nope, you have to uncheck "Require all users to authenticate" and enforce user authentication at policy level.
0
 

Author Comment

by:ITACS
ID: 24213420
how to do this??do u have any link?
0
 
LVL 15

Expert Comment

by:Raj-GT
ID: 24213598
Since your existing policies are set to allow "All Users", you can leave the policies as it is after unchecking "require all users to authenticate" and everything should still work. (might require a restart of the Web Proxy Service btw)

It's just that with integrated authentication enabled, you have now gained the ability to control/restrict users access based on their AD account properties (name, group membership etc.)

Technet have guides for most things ISA; see link for a guide for Web Proxy troubleshooting - http://technet.microsoft.com/en-us/library/bb794787.aspx
0
 

Author Comment

by:ITACS
ID: 24213851
btw i jus unchecked "require all users to authenticate" and tried to signin and still have the same problem
0
 
LVL 15

Expert Comment

by:Raj-GT
ID: 24213902
Did you restart Web Proxy services in ISA?
Do you have the users configured to use ISA as proxy? (IE > Options > Connections > LAN Settings > Proxy server)
0
 

Author Comment

by:ITACS
ID: 24213989
Yes i did restart the web proxy services in ISA.
Users are configured to use ISA as proxy
0
 
LVL 15

Expert Comment

by:Raj-GT
ID: 24214057
What is the ISA Logs showing now? Can you copy the log output here please. Also, are you using the ISA server as the default gateway on the client PCs?
0
 

Accepted Solution

by:
ITACS earned 0 total points
ID: 24214247
no i wasn't:S the default gateway was the pix, when i changed it to the ISA it worked fine.
now i went into other problem which is i can't access the servers located in DMZ, do i need to publish them on ISA?
0
 
LVL 15

Assisted Solution

by:Raj-GT
Raj-GT earned 2000 total points
ID: 24214439
You need to tell ISA the DMZ is connected to the internal network.
This is how you do it.
1. Under Configuration > Networks > Internal > Proerty > Addresses tab, add the DMZ subnet using Add Range.
2. On the same properties panel, under Web Browser, make sure you have the top three check boxes are selected.
3. Open a command prompt on the ISA Server and add a route to the DMZ
eg. route add -p x.x.x.x mask y.y.y.y z.z.z.z
x.x.x.x is the network id of the DMZ
y.y.y.y is the subnet mask of the DMZ
z.z.z.z is the internal IP of the PIX
4. Change the default gateway on all clients to point to the ISA server.

That should do the trick.
0
 
LVL 1

Expert Comment

by:partymarty84
ID: 24303479
ITACS, try installing the 2008 (8.5) version of MSN. Do you get the same problem as with version 2009?..
0
 
LVL 15

Expert Comment

by:Raj-GT
ID: 24491787
I am afraid "not interested anymore" is not the correct attitude/answer after the Experts volunteered their time to fix your issues.

The reason Messenger didn't work is because the client PCs were using PIX as a default gateway and ISA for proxy. I think we did arrive at that point in the end. Even though the DMZ issue is not part of the original question, I feel I have provided the correct workaround for that as well.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 24524892
Thank you :)

Keith_Alabaster
Zone Advisor
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are three types of ISA client that can be configured - these can be individual clients or multiples of a client on each PC or server SecureNAT. A SecureNAT client for ISA server is a client machine, work station or server, that has its defa…
Article by: Ahmedn1
Introduction Some developers today tend to use Skypekit in their applications to make it more interactive with the user. Skype API is very awesome indeed but the problem is it is only available in C++, Java and Python. I can't understand why Micr…
The goal of the tutorial is to teach the user how to instant message and make a video call in Skype.
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Suggested Courses

577 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question