Link to home
Create AccountLog in
Avatar of shahzebasif
shahzebasif

asked on

isa 2006 can ping but cannot browse

hi there,

my internet was working life was good suddenly internet stops working. tried banging my head on it a lot but till now couldnt get the solutionl. i am able to send recive emails, ping outside, can access Remote desktop from outside. just the only problem is i cannot browse intenet through isa.

tried disabling the isa services and using the isp proxy on isa server. it works fine. dont know what went wrong with isa server.

it keeps on going and going and going. no error.

i have isa 2006 ent on windows 2003 ent r2

kindly help
Avatar of Hisham_Elkouha
Hisham_Elkouha
Flag of United Kingdom of Great Britain and Northern Ireland image

Do you mean that you lost Internet connectivity only on your ISA?
If so, make sure LocalHost is included in the "From" list in your Internet access rule.

Do you use another software along side with the ISA such as Websense or GFI?
Avatar of Keith Alabaster
All the traffic you mention as working OK is non-proxy traffic.
For proxy traffic such as http & https to work, and assuming you have not changed your defaults, make sure your web browser has the proxy settings in place using the ISA internal IP address and port 8080. The ISA ALSO needs these settings.

Keith
Avatar of shahzebasif
shahzebasif

ASKER

@hisham
no internet on isa or even clients. local host is added in the from. we use brust tech software to control.

@keith
there was no changes at all. it starts suddenly.
have you tried restarting the ISA server
is there any alerts/errors on monitoring tab ?
i have tried restarting the isa. even i have tried uninstall and reinstalling the isa and restore the backup.

@ sulimanw

Denied Connection SRV 1/3/2011 9:00:34 AM
Log type: Web Proxy (Forward)
Status: 12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.  
Rule:  
Source: Internal (10.92.60.105)
Destination: (10.92.60.16:80)
Request: GET http://www.google.com/ 
Filter information: Req ID: 113105bb; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http
User: anonymous

this alert appears in logging. but it didnt shows on the client that access is denied it keeps on loading and loading. i tried removing that require users to authenticate but still no luck
What is the client type used ? SecureNET, web proxy or firewall client ?

Please check the http filter is checked on http protocol properties :


a.PNG
The issue is not with the ISA Server but with the ISA Server configuration - and possibly the clients. I hear you comment that nothing has changed but something has to of changed, regardless of whether you are aware of it or not. Is ISA Server attached to your domain? Have you deployed

The 12209 error message is informing you that a set of authenticated credentials are required to pass traffic through the web proxy. The last line of your message shows that the access attempt was made by an anonymous user, not an authenticated user. The fact that your users may well be authenticated to the domain when they log on does not mean they are authenticated for ISA Server.
As I mentioned above, all traffic that you say is working is non-http traffic so does not need the same authentication that web proxy traffic requires.
Please create a rule at the top of your firewall policy - as a test - allowing http from internal to external - all users.

even i have tried by disable authentication. the issue is same. when i disable the isa services and use the proxy of isp in ie. internet is working on the server.
what are the firewall policies u created...

it seems ISA is blocking the DNS....

may be it's a couse of  DNS policy if it's confiured wrong... or DNS forwarders on dns server...

check the dns ..issues on isa... to find the solution

all the best
Understodd - however, did you try this?
"Please create a rule at the top of your firewall policy - as a test - allowing http from internal to external - all users."


i have created a rule to allow all outgoing connenction for all users but still same problem. i can ping the website and telnet from isa to external but only the browsing is not working
Open the browser on the ISA server - what are the proxy settings set to?
Which boxes are ticked?

the proxy on the isa is itself and bypass is selected.
SOLUTION
Avatar of Keith Alabaster
Keith Alabaster
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
we are using port 8080 that is configured in the isa and ie.

its only isa nothing else on the server.
On Configuration> Networks>Web Chaining>Action

Do you have entries in the Settings of the Upstream Proxy Server?
ASKER CERTIFIED SOLUTION
Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
thanks a lot for the help
thanks everybody for the help
Welcome :)