We help IT Professionals succeed at work.

TMG Network Access Message: The page cannot be displayed

4,754 Views
Last Modified: 2014-05-31
Hi All


              I found below error when i access to a gov website in HK, i have check our TMG server, the link that i tried to access is not in the blocking list, anyone have idea what happen ?



Network Access Message: The page cannot be displayed  

 

 Explanation: The request timed out before the page could be retrieved.

Try the following: •Refresh page: Search for the page again by clicking the Refresh button. The timeout may have occurred due to Internet congestion.
•Check spelling: Check that you typed the Web page address correctly. The address may have been mistyped.
•Contact website: You may want to contact the website administrator to make sure the Web page still exists. You can do this by using the e-mail address or phone number listed on the website home page.
If you are still not able to view the requested page, try contacting your administrator or Helpdesk.

 

 Technical Information (for support personnel) •Error Code 10060: Connection timeout
•Background: The gateway could not receive a timely response from the website you are trying to access. This might indicate that the network is congested, or that the website is experiencing technical difficulties.
•Date: 5/12/2014 9:55:47 AM [GMT]
•Server: HK-TMG
•Source: Firewall
Comment
Watch Question

btanExec Consultant
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
Some areas you can check further

See the rule out of DNS issue and analyse of ISA web log
https://www.experts-exchange.com/Security/Operating_Systems_Security/Windows_Security/Q_25082587.html

Troubleshoot the Web Proxy Connection - http://support.microsoft.com/kb/811087
This behavior may occur when the Web Proxy service connection settings do not allow enough time to receive a response from the destination Web site before the service closes the connection...

Common Web Publishing Problems - http://www.isaserver.org/articles-tutorials/publishing/WebPubProblems.html
The most common problem with Destination Sets is that they're misconfigured. Entries in a Destination Set must match what was is included in the inbound request. For example if you publish a Web site that is accessible from the Internet using the URL http://www.mydomain.com, the entry in the Destination Sets must be www.mydomain.com. Note that only the FQDN and optionally a path is included in the Destination Set. You do not include the "http://" in the Destination Set entries.

Author

Commented:
i only can find "performance" under W3Proxy, anything i can do in this case ?

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3Proxy\Parameters
btanExec Consultant
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
you likely need to add it in those suggested parameter e.g. RequestTimeoutSecs, SocketIoTimeoutSecs and TcpMaxDataRetransmissions in accordance to your environment but can start off as mentioned in MSDN kb
http://support.microsoft.com/kb/811087

 and do monitor the web log to see if there are specific error or blocking attempts, see below for more info
https://www.sans.org/reading-room/whitepapers/firewalls/isa-server-logs-interpret-network-traffic-814

You may want to also explore Microsoft Forefront TMG Best Practice Analyzer to analyze their TMG Server computers for potential problems.
http://www.isaserver.org/articles-tutorials/configuration-general/Microsoft-Forefront-TMG-Best-Practice-Analyzer.html

Author

Commented:
i see mine in below, i put RequestTimeoutSecs, SocketIoTimeoutSecs and TcpMaxDataRetransmissions under parameter ?


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3Proxy\Performance\Parameter


proxy
btanExec Consultant
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
AS stated in the kb link please - pls backup prior to testing and do restart the World Wide Web Publishing service after each change.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3Proxy\Parameters

Step 2: Increase the Web Proxy Timeout Settings

To increase the amount of time that the Web Proxy service waits before it closes idle sessions, follow these steps: Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows

Author

Commented:
so that under parameter, i do need to -> right click -> new -> string vlaue ->     for adding the 3 parameter below ?   as under W3Proxy, i do have performance , is it normal ?  


RequestTimeoutSecs, SocketIoTimeoutSecs and TcpMaxDataRetransmissions
btanExec Consultant
CERTIFIED EXPERT
Distinguished Expert 2019

Commented:
Note the suggestion only applies if you use a proxy server. IN your case, ISA is the proxy to internet.

For RequestTimeoutSecs and SocketIoTimeoutSecs, if you see the  link it is of type "REG_DWORD" not string. For its content (upon double click on it), you can choose  the "Decimal'. Note that these fields are in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3Proxy\Parameters @ http://support.microsoft.com/kb/811087

For TcpMaxDataRetransmissions if you see the link it is of type "REG_DWORD" not string. For its content (upon double click on it), you can choose  the "Decimal'. Note that this field is in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters @ http://support.microsoft.com/kb/191143/EN-US

I reckon the "performance" as more of performance counter though and may not be applicable

Author

Commented:
so that is parameter is right under performance, the above reg_dword registry add is not applicable ?
Exec Consultant
CERTIFIED EXPERT
Distinguished Expert 2019
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.