Avatar of piaakit
piaakit
 asked on

TMG Network Access Message: The page cannot be displayed

Hi All


              I found below error when i access to a gov website in HK, i have check our TMG server, the link that i tried to access is not in the blocking list, anyone have idea what happen ?



Network Access Message: The page cannot be displayed  

 

 Explanation: The request timed out before the page could be retrieved.

Try the following: •Refresh page: Search for the page again by clicking the Refresh button. The timeout may have occurred due to Internet congestion.
•Check spelling: Check that you typed the Web page address correctly. The address may have been mistyped.
•Contact website: You may want to contact the website administrator to make sure the Web page still exists. You can do this by using the e-mail address or phone number listed on the website home page.
If you are still not able to view the requested page, try contacting your administrator or Helpdesk.

 

 Technical Information (for support personnel) •Error Code 10060: Connection timeout
•Background: The gateway could not receive a timely response from the website you are trying to access. This might indicate that the network is congested, or that the website is experiencing technical difficulties.
•Date: 5/12/2014 9:55:47 AM [GMT]
•Server: HK-TMG
•Source: Firewall
Microsoft Forefront ISA ServerWindows Server 2008

Avatar of undefined
Last Comment
btan

8/22/2022 - Mon
btan

Some areas you can check further

See the rule out of DNS issue and analyse of ISA web log
https://www.experts-exchange.com/questions/25082587/The-page-cannot-be-displayed-10060-Connection-timeout.html

Troubleshoot the Web Proxy Connection - http://support.microsoft.com/kb/811087
This behavior may occur when the Web Proxy service connection settings do not allow enough time to receive a response from the destination Web site before the service closes the connection...

Common Web Publishing Problems - http://www.isaserver.org/articles-tutorials/publishing/WebPubProblems.html
The most common problem with Destination Sets is that they're misconfigured. Entries in a Destination Set must match what was is included in the inbound request. For example if you publish a Web site that is accessible from the Internet using the URL http://www.mydomain.com, the entry in the Destination Sets must be www.mydomain.com. Note that only the FQDN and optionally a path is included in the Destination Set. You do not include the "http://" in the Destination Set entries.
piaakit

ASKER
i only can find "performance" under W3Proxy, anything i can do in this case ?

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3Proxy\Parameters
btan

you likely need to add it in those suggested parameter e.g. RequestTimeoutSecs, SocketIoTimeoutSecs and TcpMaxDataRetransmissions in accordance to your environment but can start off as mentioned in MSDN kb
http://support.microsoft.com/kb/811087

 and do monitor the web log to see if there are specific error or blocking attempts, see below for more info
https://www.sans.org/reading-room/whitepapers/firewalls/isa-server-logs-interpret-network-traffic-814

You may want to also explore Microsoft Forefront TMG Best Practice Analyzer to analyze their TMG Server computers for potential problems.
http://www.isaserver.org/articles-tutorials/configuration-general/Microsoft-Forefront-TMG-Best-Practice-Analyzer.html
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
piaakit

ASKER
i see mine in below, i put RequestTimeoutSecs, SocketIoTimeoutSecs and TcpMaxDataRetransmissions under parameter ?


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3Proxy\Performance\Parameter


proxy
btan

AS stated in the kb link please - pls backup prior to testing and do restart the World Wide Web Publishing service after each change.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3Proxy\Parameters

Step 2: Increase the Web Proxy Timeout Settings

To increase the amount of time that the Web Proxy service waits before it closes idle sessions, follow these steps: Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows
piaakit

ASKER
so that under parameter, i do need to -> right click -> new -> string vlaue ->     for adding the 3 parameter below ?   as under W3Proxy, i do have performance , is it normal ?  


RequestTimeoutSecs, SocketIoTimeoutSecs and TcpMaxDataRetransmissions
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
btan

Note the suggestion only applies if you use a proxy server. IN your case, ISA is the proxy to internet.

For RequestTimeoutSecs and SocketIoTimeoutSecs, if you see the  link it is of type "REG_DWORD" not string. For its content (upon double click on it), you can choose  the "Decimal'. Note that these fields are in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W3Proxy\Parameters @ http://support.microsoft.com/kb/811087

For TcpMaxDataRetransmissions if you see the link it is of type "REG_DWORD" not string. For its content (upon double click on it), you can choose  the "Decimal'. Note that this field is in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters @ http://support.microsoft.com/kb/191143/EN-US

I reckon the "performance" as more of performance counter though and may not be applicable
piaakit

ASKER
so that is parameter is right under performance, the above reg_dword registry add is not applicable ?
ASKER CERTIFIED SOLUTION
btan

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question