java.net.ConnecException: Connection timed out:connect

Posted on 2009-12-21
Medium Priority
Last Modified: 2012-06-27
Starting last Monday I have had several users who access a website to process payroll get java.net errors. They login to the website and work fine but when they try to run some processes they get
Java.net.connectexception: Connection timed out: Connect
I have posted the entire error as an attachment. The users are going through an ISA 2006/Windows 2003 firewall but I see no denies in the logs. I also created a rule to give them full access through. The clients are running Windows XP Pro with Java  6.0.110. (Which is required by the web application)

Question by:clynch302
  • 3
  • 2
LVL 29

Expert Comment

ID: 26099763
The JRE settings,...unfortuneately,...are at the user-level,...not the machine level so this has to be repeated in each user profile,...but run the Java Control Panel Icon,...set the proxy settings in the Networking section to "direct",...so you run it as if the proxy never existed.  Then install the Firewall Client on the machines.   It the communication through the ISA is "anonymous" you can skip the Firewall Client,...but if it requires authentication then the FWC is a requirement.   The JRE, throughout its "life" from version to version, has sometimes had problems dealing with a CERN Compliant Web Proxy Service that requires authentication and the ISA Web Proxy is CERN Compliant.   Configuring the JRE as I described removes the Web Proxy Service from the equation and allows it to operate over a "winsock proxy service" (which the ISA Firewall Service is) when authentication is required,...or let it operate over SecureNAT if  communication is anonymous.

Author Comment

ID: 26099855
Thanks for the reply....

I do have the 'Direct ' selected in the Network Settings. I am new to ISA. Your comment on "It the communication through the ISA is "anonymous" you can skip the Firewall Client" , How do you configure this?
LVL 29

Accepted Solution

pwindell earned 2000 total points
ID: 26100115
If the involved Access Rule has "All Users" in the Users Tab in the Rule Properties, then it is anonymous.  If it has anything else, then it is requiring authentication.  Never mix "All Users" with anything else in the Rule Properties.

ISA has three client types:

Web Proxy Clients = proxy settings in the browser
Firewall Clients = Firewall Client software installed on the Client
SecureNAT Clients = no software, not settings,...ISA is simply in the routing path to the Internet

Clients should operate as all three types together at the same time for full functionality.

Only Web Proxy and Firewall Clients can handle authentication but are limited to only TCP and UDP communication with the Web Proxy being futher limited to only HTTP, HTTPS, readonly-FTP.  

SecureNAT can handle other protocols beyond just TCP or UDP but can only operate over anonymous rules.

Internal Client Concepts in ISA Server 2006

Understanding the ISA 2004 Access Rule Processing

Troubleshooting Client Authentication on Access Rules in ISA Server 2004


Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.


Author Comment

ID: 26100474
I do believe I have SecureNAT configured. I have opened a case with MS to help resolve this.

Still doesn't make any sense to me. Why would this just all of a sudden start happen. No changes were made to the firewall. No java updates were performed on the client.  
LVL 27

Expert Comment

ID: 26101001
Do you and your users have automatic updates from Microsoft turned on?  That can screw up your environments suddenly, with, say, a new security release.


Author Closing Comment

ID: 31668686

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Microsoft's ISA Server has been its pre-eminent security product for about a decade and is still regarded amongst the well-informed as one of the best software firewalls and application gateways ever released, by any manufacturer. ISA Server has bee…
Common practice undertaken by most system administrators is to document the configurations and final solutions of anything performed by them for their future use and reference. So here I am going to explain how to export ISA Server 2004 Firewall pol…
Is your OST file inaccessible, Need to transfer OST file from one computer to another? Want to convert OST file to PST? If the answer to any of the above question is yes, then look no further. With the help of Stellar OST to PST Converter, you can e…
With just a little bit of  SQL and VBA, many doors open to cool things like synchronize a list box to display data relevant to other information on a form.  If you have never written code or looked at an SQL statement before, no problem! ...  give i…
Suggested Courses
Course of the Month15 days, 21 hours left to enroll

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question