Pergunta Cannot Access One Https site

  • Montag, 21. Mai 2012 00:18
     
     

    Good day to all of you.

    Just would like to ask some help with one of the problems were experiencing currently for a client. The client is using our proxy here in Australia as an internet gateway. The client can access other Https site except the https://indianvisaonline.gov.in/visa/ site. I've tried opening this webpage on the actual proxy server and it can't open it as well. To further check I have another client connected to that proxy server and accessed the website and it opened it without any problems. The server is using ISA 2006.

    What items am I missing? Can anyone help me please which things to check?

    Thank you in advance.

Alle Antworten

  • Montag, 21. Mai 2012 05:40
     
     

    Hi,

    do you se Forefront TMG and HTTPS inspection is enabled? If yes, please try to exclude the website from HTTPS inspection:
    http://technet.microsoft.com/de-de/library/ee796230.aspx
    Please also have a look into the live logging of your TMG Server to see which Firewall policy rule blocks the request


    regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.nt-faq.de

  • Montag, 21. Mai 2012 05:41
     
     

    Hi,

    Check the antivirus it maybe filtering the website and this lead to not opening it, try uninstall antivirus.

  • Montag, 21. Mai 2012 05:52
     
     

    Hi Mark,

    Thank you for the reply. I'm currently using ISA2006. Is that option also in ISA? Also other HTTPS sites work.

    regards Butchokoy

  • Montag, 21. Mai 2012 05:53
     
     

    Hi Sand,

    I've already done the test without the antivirus before posting here but the problem is still there.

    Thanks, Butchokoy

  • Dienstag, 22. Mai 2012 06:16
    Moderator
     
     

    Hi,

    Thank you for the post.

    “I've tried opening this webpage on the actual proxy server and it can't open it as well.” – do you have create rule to allow ISA localhost  to access the internet? And what is client type of the problematic machine? What is error message in IE and ISA logging?

    Regards,


    Nick Gu - MSFT

  • Mittwoch, 23. Mai 2012 01:57
     
     

    Hi Nick,

    Thank you for the response.

    The ISA server is allowed through the internet. It can access other HTTPS site aside from this. The client is a windows xp machine. In the logs of ISA it says SSL-Tunnel Failed Connection attempt HTTP Status code 995. If I use another client which uses the same proxy server it has no problem opening this website. One thing I can notice though is for the other client, it shows the websites IP as the destination while the other one that works shows the proxy server's IP as destination.

    Thanks, Butchokoy