Can view specific site

[fortage]

When trying to access a specific hppt site any client
(firewall/web proxy) receives the page cannot be displayed
error. The site is accessible from outside our network(or by bypassing ISA).
The ip is resolveable from the client and ISA server and ping able by name.
There does not appear to be any site and content rules
denying the ip.
The sc-status code in the web log is 407

Any ideas? I'm stuck!!!

 

[fortage]

I can't remember the last time I did'nt receive a reply on TEK-TIPS.

 

[zcolton]

Sounds like a dns problem.

 

[fortage]

What kind of dns issue?

 

[Knutern]

You're right this does not seem to be an DNS problem, if you are able to resolve the name from within your internal network.

Have you tried to creat packet filter rules to allow the ISA Server to open the web site?

Also, check rule#1 and rule#2. rule#1 reflects the protocol rule and rule#2 reflects the site and content rule. If for instance HTTP is allowed and you have two site and content rules, one that denies certains sites and another that allows, you would read something like this:[tt]
cs-protocol cs-transport s-operation sc-status rule#1 rule#2
http TCP GET 200 HTTP(S) Allow rule
- TCP GET 12202 HTTP(S) Deny Something
[/tt]

If you check the "Ask unauthenticated users for authentication" on your outgoing web requests, the error would be 403 - Forbidden and SC-Status 12202. So this should not be your problem.

Have you tried to gather information using Netmon?

Cheers
Knutern

 

[Knutern]

HTTP Error 407 indicates that you must be authenticated by proxy server befor the request can be executed.

Cheers
Knutern