asked on

TMG Network Access Message: The page cannot be displayed

Hi All

I found below error when i access to a gov website in HK, i have check our TMG server, the link that i tried to access is not in the blocking list, anyone have idea what happen ?

Network Access Message: The page cannot be displayed

Explanation: The request timed out before the page could be retrieved.

Try the following: •Refresh page: Search for the page again by clicking the Refresh button. The timeout may have occurred due to Internet congestion.
•Check spelling: Check that you typed the Web page address correctly. The address may have been mistyped.
•Contact website: You may want to contact the website administrator to make sure the Web page still exists. You can do this by using the e-mail address or phone number listed on the website home page.
If you are still not able to view the requested page, try contacting your administrator or Helpdesk.

Technical Information (for support personnel) •Error Code 10060: Connection timeout
•Background: The gateway could not receive a timely response from the website you are trying to access. This might indicate that the network is congested, or that the website is experiencing technical difficulties.
•Date: 5/12/2014 9:55:47 AM [GMT]
•Server: HK-TMG
•Source: Firewall

btan

Some areas you can check further

See the rule out of DNS issue and analyse of ISA web log
https://www.experts-exchange.com/questions/25082587/The-page-cannot-be-displayed-10060-Connection-timeout.html

Troubleshoot the Web Proxy Connection - http://support.microsoft.com/kb/811087

This behavior may occur when the Web Proxy service connection settings do not allow enough time to receive a response from the destination Web site before the service closes the connection...

Common Web Publishing Problems - http://www.isaserver.org/articles-tutorials/publishing/WebPubProblems.html

The most common problem with Destination Sets is that they're misconfigured. Entries in a Destination Set must match what was is included in the inbound request. For example if you publish a Web site that is accessible from the Internet using the URL http://www.mydomain.com, the entry in the Destination Sets must be www.mydomain.com. Note that only the FQDN and optionally a path is included in the Destination Set. You do not include the "http://" in the Destination Set entries.

keith li

ASKER

i only can find "performance" under W3Proxy, anything i can do in this case ?

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3Proxy\Parameters

btan

you likely need to add it in those suggested parameter e.g. RequestTimeoutSecs, SocketIoTimeoutSecs and TcpMaxDataRetransmissions in accordance to your environment but can start off as mentioned in MSDN kb
http://support.microsoft.com/kb/811087

and do monitor the web log to see if there are specific error or blocking attempts, see below for more info
https://www.sans.org/reading-room/whitepapers/firewalls/isa-server-logs-interpret-network-traffic-814

You may want to also explore Microsoft Forefront TMG Best Practice Analyzer to analyze their TMG Server computers for potential problems.
http://www.isaserver.org/articles-tutorials/configuration-general/Microsoft-Forefront-TMG-Best-Practice-Analyzer.html

keith li

ASKER

i see mine in below, i put RequestTimeoutSecs, SocketIoTimeoutSecs and TcpMaxDataRetransmissions under parameter ?

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3Proxy\Performance\Parameter

btan

AS stated in the kb link please - pls backup prior to testing and do restart the World Wide Web Publishing service after each change.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3Proxy\Parameters

Step 2: Increase the Web Proxy Timeout Settings

To increase the amount of time that the Web Proxy service waits before it closes idle sessions, follow these steps: Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows

keith li

ASKER

so that under parameter, i do need to -> right click -> new -> string vlaue -> for adding the 3 parameter below ? as under W3Proxy, i do have performance , is it normal ?

RequestTimeoutSecs, SocketIoTimeoutSecs and TcpMaxDataRetransmissions

btan

Note the suggestion only applies if you use a proxy server. IN your case, ISA is the proxy to internet.

For RequestTimeoutSecs and SocketIoTimeoutSecs, if you see the link it is of type "REG_DWORD" not string. For its content (upon double click on it), you can choose the "Decimal'. Note that these fields are in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3Proxy\Parameters @ http://support.microsoft.com/kb/811087

For TcpMaxDataRetransmissions if you see the link it is of type "REG_DWORD" not string. For its content (upon double click on it), you can choose the "Decimal'. Note that this field is in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters @ http://support.microsoft.com/kb/191143/EN-US

I reckon the "performance" as more of performance counter though and may not be applicable

keith li

ASKER

so that is parameter is right under performance, the above reg_dword registry add is not applicable ?

ASKER CERTIFIED SOLUTION

btan

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial