Announcement

Collapse
No announcement yet.

internet problem

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • internet problem

    Hi,

    We are using a sbs 2000 , isa 2000 . Now we are able to open all sites including http and https from server and clinet both.

    Now we are facing issue particularly when we tried to open the site e.g https://74.208.x.x:7050 from the client system , we are getting message internal error

    HTTP 502 Proxy Error - The specified Secure Sockets Layer (SSL) port is not allowed. ISA Server is not configured to allow SSL requests from this port. Most Web browsers use port 443 for SSL requests. (12204)

    i tried to open it using a firewall client , secure NAT and web proxy all but getting same message. i even create a ip packet rule for port 7050 for given ip , but getting a same message.

    what could be the issue , please help...

    Thanks...

  • #2
    Re: internet problem

    Fairly obviously, you have a rule in ISA server which is denying access (Probably a default rule since this is a non-standard port).

    Look at (or get your network admin to look at) the ISA configuration.
    Since we are talking about a long obsolete operating system, you will be lucky to find an ISA 2000 expert to help, but you might
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Re: internet problem

      Hi ,

      I manually open the 7050 port for out going and incoming for my url , i even allow all https sites. i am able to open banking https domains only the url : https://74.208.47.x:7050 is not opening. This url is opening on server it self but unable to open on client machine ....what could be the reason...please help..

      Thanks

      Comment


      • #4
        Re: internet problem

        Clue is in the error message, ISA 2000/4/6 doesn't allow SSL on any port other than 443 by default.

        Check here and here for explanation and solution.
        BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
        sigpic
        Cruachan's Blog

        Comment


        • #5
          Re: internet problem

          Hi ,

          Thanks for your great help !!

          I run this script to add my port 7050 in it and it will make like as below.

          set isa=CreateObject("FPC.Root")
          set tprange=isa.GetContainingArray.ArrayPolicy.WebProx y.TunnelPortRanges
          set tmp=tprange.AddRange("SSL 7050", 7050, 7050)
          tprange.Save

          save this in .vbs , firewall.vbs and then run it . getting the message after running this script.

          where do i made a mistake , what changes do i need to make.

          please help....
          Attached Files

          Comment


          • #6
            Re: internet problem

            Not the correct version of ISA server, but does this help?
            http://blogs.technet.com/b/isablog/a...-2006-css.aspx

            Also, is the script definitely for ISA 2000 as the object model is different?
            http://msdn.microsoft.com/en-us/library/ms828066.aspx
            Tom Jones
            MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
            PhD, MSc, FIAP, MIITT
            IT Trainer / Consultant
            Ossian Ltd
            Scotland

            ** Remember to give credit where credit is due and leave reputation points where appropriate **

            Comment


            • #7
              Re: internet problem

              Hi ,

              Thanks for your reply , i make a changes in vbs code , and i get the reply as attached.

              code

              Set root = CreateObject("FPC.Root")
              Dim isaArray
              Set isaArray = root.GetContainingArray()
              set tmp=tprange.AddRange("SSL 7050", 7050, 7050)
              tprange.save
              Attached Files

              Comment


              • #8
                Re: internet problem

                Effectively the same error -- "GetContainingArray()" is not valid
                Hence my earlier question about the source of the script
                Tom Jones
                MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
                PhD, MSc, FIAP, MIITT
                IT Trainer / Consultant
                Ossian Ltd
                Scotland

                ** Remember to give credit where credit is due and leave reputation points where appropriate **

                Comment


                • #9
                  Re: internet problem

                  Hi ,

                  Thanks for the reply , i am not getting your answer ...you mean to say source of the script will not support my isa 2000 ?

                  What changes do i need to make in my script ...please paste the script inside here...

                  please help...

                  Thanks

                  Comment


                  • #10
                    Re: internet problem

                    Can you please tell us where you got the script from, and if it is for ISA 2000?
                    Tom Jones
                    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
                    PhD, MSc, FIAP, MIITT
                    IT Trainer / Consultant
                    Ossian Ltd
                    Scotland

                    ** Remember to give credit where credit is due and leave reputation points where appropriate **

                    Comment


                    • #11
                      Re: internet problem

                      It seems the original script (ssl_tpr_add.vbs) has been deprecated, see here for updated details from Jim Harrison.
                      http://www.freelists.org/post/isalist/SSL-TPR-ADD,1 Script link in that URL is wrong, it's now http://www.isatools.org/tools/isa_tpr.js
                      BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
                      sigpic
                      Cruachan's Blog

                      Comment


                      • #12
                        Re: internet problem

                        Hi ,

                        As per this link http://www.isatools.org/tools/isa_tpr.js I copy the full script and run it but getting error as per the attachment.

                        Do i need to modify the script or something , if yes can you please help me , where do i need to make changes ...i want to open https://74.208.x.x:7050 ( 7050 inside 443 )

                        what changes do i need to make in that script.

                        Thanks...
                        Attached Files

                        Comment


                        • #13
                          Re: internet problem

                          Hi ,

                          can anyone help me to resolve this ...many thanks...

                          Thanks..

                          Comment


                          • #14
                            Re: internet problem

                            Please do NOT bounce your posts -- if anyone can help you with an obsolete technology, they will when they can

                            Have you followed the various links Cruachan has given you?
                            Tom Jones
                            MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
                            PhD, MSc, FIAP, MIITT
                            IT Trainer / Consultant
                            Ossian Ltd
                            Scotland

                            ** Remember to give credit where credit is due and leave reputation points where appropriate **

                            Comment


                            • #15
                              Re: internet problem

                              I've helped as much as I can, I have very little experience of ISA 2000. It may be worth posting at isaserver.org if you have follwed the articles and are still having issues.
                              BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
                              sigpic
                              Cruachan's Blog

                              Comment

                              Working...
                              X