Question : ISA server in SBS 2003. is blocking a site, how do i allow?

one of our staff uses a site to edit parcel deliverys to Aisa.
its a process that involes (on the site) the upload of documents and pictures via  a control panel.

once the user goes onto the upload section, they upload two or three files everything is fine....
the second / third file gets a "windows login" prompt (i assume its for isa) they put in thier credentials, and then it jst hangs / crashes

i have found in the logs these 2 errors

Failed Connection Attempt GPSERVER 5/21/2008 10:28:14 AM
Log type: Web Proxy (Forward)
Status: 5 Access is denied.  
Rule: SBS Internet Access Rule
Source: Internal ( 192.168.1.7:0)
Destination: External ( 192.168.1.24:8080)
Request: POST http://www.asiainspection.com/qi/autosave.nsf/store?openagent
Filter information: Req ID: 1744467b  
Protocol: http
User: anonymous
 Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648)
Object source: Processing time: 1
Cache info: 0x4 MIME type:
 



Denied Connection GPSERVER 5/21/2008 10:28:14 AM
Log type: Web Proxy (Forward)
Status: 12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy service is denied.  
Rule: SBS Internet Access Rule
Source: Internal ( 192.168.1.7:0)
Destination: External ( 192.168.1.24:8080)
Request: POST http://www.asiainspection.com/qi/autosave.nsf/store?openagent
Filter information: Req ID: 1744467a  
Protocol: http
User: anonymous
 Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30; .NET CLR 3.0.04506.648)
Object source: Processing time: 1
Cache info: 0x4 MIME type:
 


Really not that good on isa at all! is there anyway i can just add this stie to exceptions? or disable auth for this site?

whats going on?

any help will be much appreciated. many thanks

Answer : ISA server in SBS 2003. is blocking a site, how do i allow?

Troubleshooting ISA authentication:
http://technet.microsoft.com/en-us/library/cc302664.aspx

1.  Go to the ISA management console > right click on firewall policy > New > Access Rule > Make sure you add HTTP/HTTPs > Internal > For Destination click new and url set under add network entities then add the urls you have problems with > then after created move it to the top of all your rules.  

This should solve the issue with that site to keep your clients happy while you do other troubleshooting.

2.  To stop requireing authentication you would remove "authenticate users" and add "all users" to your primary web access rule.  I typically have to access rules...  One all allow for approved or troubled web sites and one for all the rest.  This works in my environment but may not in yours.  

3.  In ISA console > Go to Networks > Internal and right click > Properties > Web browser > add you trouble website to the "Directly access these servers or domains.  Don't go nuts here...  Use this carefully for mission critical sites.

Also...  You should check out the url I gave you for additional troubleshooting advice.
Random Solutions  
 
programming4us programming4us