locked
Error Code: 502 Proxy Error. ISA Server is not configured to allow SSL requests from this port

    Question

  •  

    I currently have ISA Server 2006 Standard and I am only using as a web proxy on my network.

     

    When I am trying to access a website that is using a non-standard SSL Port, ISA is blocking the page due to the port not being configured to be used.

     

    Error:

    Error Code: 502 Proxy Error. The specified Secure Sockets Layer (SSL) port is not allowed. ISA Server is not configured to allow SSL requests from this port. Most Web browsers use port 443 for SSL requests. (12204)

     

    PLEASE HELP

    Monday, November 26, 2007 4:50 PM

Answers

All replies

  • hi

     

    please check this link

    http://support.microsoft.com/kb/283284/en-us

     

    Monday, November 26, 2007 7:04 PM
  • Hi,

     

    You will need to extend the SSL Tunnel port range.

     

    check this article to know how : http://www.isaserver.org/articles/2004tunnelportrange.html

     

    and the tools can be installed from here :

     

    The Script : http://www.isatools.org/tools/isa_tpr.js

    or

    The GUI Tool : http://www.isatools.org/tools/ISAtrpe.zip

     

    _____________________________

    Tarek Majdalani
    Computer Engineer, CIW, MCSA: Security 2000/2003, TS: Windows Vista
    MVP -- ISA Firewalls
    Website : http://www.elmajdal.net/ISAServer

    Monday, November 26, 2007 8:32 PM
    Moderator
  •  

    I ran the script to add an additional SSL Tunnel and then restarted my ISA Server Service from the ISA Server Manager. Afterwards the pages were working properly.

     

    Thank you,

    Michael

    Tuesday, November 27, 2007 5:33 PM
  • HI Michael,

     

    Glad it worked and thanks for the follow up .

     

     

    Thanks,

    Tarek

    _____________________________

    Tarek Majdalani
    Computer Engineer, CIW, MCSA: Security 2000/2003, TS: Windows Vista
    MVP -- ISA Firewalls
    Website : http://www.elmajdal.net/ISAServer

    Tuesday, November 27, 2007 5:49 PM
    Moderator
  • Hi,

    I am having the same problem and i have tried to open the required ports with ISAtrpe, but ISA2006 still dose not allow SSL-Tunneling any idea's?

    Kind Regards
    Rich Overton MCP

     

    Tuesday, June 30, 2009 11:02 AM
  • Same problem... ISA 2006 Standard.
    Monday, September 07, 2009 7:49 AM
  • i have same problem.  but what if you dont know the port the ssl site is using?  then how would you know what to extend the tunnel too?
    Friday, September 11, 2009 3:18 PM
  • Take a network capture on ISA's Internal interface or look at live monitoring in ISA. See what port the client is trying to use. You will need to know what the client IP address is when looking at the data.
    Friday, September 11, 2009 3:25 PM
    Answerer
  • Hello, I ran the isa_tpr.js to create the port https8443 and everything went well. I run isa_tpr.js / show the port appears correctly.

    But, on the ISA Server Management, I can not find the port, not appears on the list of protocols

    (ISA SERVER 2006 Standard)

    Thanks for any help

    Kind regards,
    Adao
    Thursday, February 18, 2010 12:46 PM