Solved Connection timed out:connect

Posted on 2009-12-21
Last Modified: 2012-06-27
Starting last Monday I have had several users who access a website to process payroll get errors. They login to the website and work fine but when they try to run some processes they get Connection timed out: Connect
I have posted the entire error as an attachment. The users are going through an ISA 2006/Windows 2003 firewall but I see no denies in the logs. I also created a rule to give them full access through. The clients are running Windows XP Pro with Java  6.0.110. (Which is required by the web application)

Question by:clynch302
    LVL 29

    Expert Comment

    The JRE settings,...unfortuneately,...are at the user-level,...not the machine level so this has to be repeated in each user profile,...but run the Java Control Panel Icon,...set the proxy settings in the Networking section to "direct", you run it as if the proxy never existed.  Then install the Firewall Client on the machines.   It the communication through the ISA is "anonymous" you can skip the Firewall Client,...but if it requires authentication then the FWC is a requirement.   The JRE, throughout its "life" from version to version, has sometimes had problems dealing with a CERN Compliant Web Proxy Service that requires authentication and the ISA Web Proxy is CERN Compliant.   Configuring the JRE as I described removes the Web Proxy Service from the equation and allows it to operate over a "winsock proxy service" (which the ISA Firewall Service is) when authentication is required,...or let it operate over SecureNAT if  communication is anonymous.

    Author Comment

    Thanks for the reply....

    I do have the 'Direct ' selected in the Network Settings. I am new to ISA. Your comment on "It the communication through the ISA is "anonymous" you can skip the Firewall Client" , How do you configure this?
    LVL 29

    Accepted Solution

    If the involved Access Rule has "All Users" in the Users Tab in the Rule Properties, then it is anonymous.  If it has anything else, then it is requiring authentication.  Never mix "All Users" with anything else in the Rule Properties.

    ISA has three client types:

    Web Proxy Clients = proxy settings in the browser
    Firewall Clients = Firewall Client software installed on the Client
    SecureNAT Clients = no software, not settings,...ISA is simply in the routing path to the Internet

    Clients should operate as all three types together at the same time for full functionality.

    Only Web Proxy and Firewall Clients can handle authentication but are limited to only TCP and UDP communication with the Web Proxy being futher limited to only HTTP, HTTPS, readonly-FTP.  

    SecureNAT can handle other protocols beyond just TCP or UDP but can only operate over anonymous rules.

    Internal Client Concepts in ISA Server 2006

    Understanding the ISA 2004 Access Rule Processing

    Troubleshooting Client Authentication on Access Rules in ISA Server 2004


    Author Comment

    I do believe I have SecureNAT configured. I have opened a case with MS to help resolve this.

    Still doesn't make any sense to me. Why would this just all of a sudden start happen. No changes were made to the firewall. No java updates were performed on the client.  
    LVL 26

    Expert Comment

    Do you and your users have automatic updates from Microsoft turned on?  That can screw up your environments suddenly, with, say, a new security release.


    Author Closing Comment


    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    ISA Server detected routes through the network adapter LAN that do not correlate with the network to which this network adapter belongs What does this mean and how can one go about correcting it? In simple terms, this error message indicates t…
    Forefront is the brand name for Microsoft's major security product. Forefront covers a number of specific security areas and has 'swallowed' a number of applications under this umbrella including Antigen, ISA Server, the Integrated Access Gateway (t…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
    Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now