Link to home
Start Free TrialLog in
Avatar of keith li
keith liFlag for Hong Kong

asked on

TMG Network Access Message: The page cannot be displayed

Hi All

              I found below error when i access to a gov website in HK, i have check our TMG server, the link that i tried to access is not in the blocking list, anyone have idea what happen ?

Network Access Message: The page cannot be displayed  


 Explanation: The request timed out before the page could be retrieved.

Try the following: •Refresh page: Search for the page again by clicking the Refresh button. The timeout may have occurred due to Internet congestion.
•Check spelling: Check that you typed the Web page address correctly. The address may have been mistyped.
•Contact website: You may want to contact the website administrator to make sure the Web page still exists. You can do this by using the e-mail address or phone number listed on the website home page.
If you are still not able to view the requested page, try contacting your administrator or Helpdesk.


 Technical Information (for support personnel) •Error Code 10060: Connection timeout
•Background: The gateway could not receive a timely response from the website you are trying to access. This might indicate that the network is congested, or that the website is experiencing technical difficulties.
•Date: 5/12/2014 9:55:47 AM [GMT]
•Server: HK-TMG
•Source: Firewall
Avatar of btan

Some areas you can check further

See the rule out of DNS issue and analyse of ISA web log

Troubleshoot the Web Proxy Connection -
This behavior may occur when the Web Proxy service connection settings do not allow enough time to receive a response from the destination Web site before the service closes the connection...

Common Web Publishing Problems -
The most common problem with Destination Sets is that they're misconfigured. Entries in a Destination Set must match what was is included in the inbound request. For example if you publish a Web site that is accessible from the Internet using the URL, the entry in the Destination Sets must be Note that only the FQDN and optionally a path is included in the Destination Set. You do not include the "http://" in the Destination Set entries.
Avatar of keith li


i only can find "performance" under W3Proxy, anything i can do in this case ?

you likely need to add it in those suggested parameter e.g. RequestTimeoutSecs, SocketIoTimeoutSecs and TcpMaxDataRetransmissions in accordance to your environment but can start off as mentioned in MSDN kb

 and do monitor the web log to see if there are specific error or blocking attempts, see below for more info

You may want to also explore Microsoft Forefront TMG Best Practice Analyzer to analyze their TMG Server computers for potential problems.
i see mine in below, i put RequestTimeoutSecs, SocketIoTimeoutSecs and TcpMaxDataRetransmissions under parameter ?


User generated image
AS stated in the kb link please - pls backup prior to testing and do restart the World Wide Web Publishing service after each change.

Step 2: Increase the Web Proxy Timeout Settings

To increase the amount of time that the Web Proxy service waits before it closes idle sessions, follow these steps: Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows
so that under parameter, i do need to -> right click -> new -> string vlaue ->     for adding the 3 parameter below ?   as under W3Proxy, i do have performance , is it normal ?  

RequestTimeoutSecs, SocketIoTimeoutSecs and TcpMaxDataRetransmissions
Note the suggestion only applies if you use a proxy server. IN your case, ISA is the proxy to internet.

For RequestTimeoutSecs and SocketIoTimeoutSecs, if you see the  link it is of type "REG_DWORD" not string. For its content (upon double click on it), you can choose  the "Decimal'. Note that these fields are in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3Proxy\Parameters @

For TcpMaxDataRetransmissions if you see the link it is of type "REG_DWORD" not string. For its content (upon double click on it), you can choose  the "Decimal'. Note that this field is in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters @

I reckon the "performance" as more of performance counter though and may not be applicable
so that is parameter is right under performance, the above reg_dword registry add is not applicable ?
Avatar of btan

Link to home
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial