Unable to browse microsoft website through ISA 2000 proxy
Dear Team,
I have installed a server 2003 in my virtual machine & have created a DNS in the same.
Also I installed ISA 2000 with SP2 patch. I am able to browse all the websites except any of the Microsoft website.
Can anyone help me in this issue. My local PC is also able to connect to Microsoft websites without proxy.
Error I am getting is 11004 host not found when I am using the proxy in IE or Mozilla or chrome.
Thanks & Regards,
Habibur Rehman Ansari
-
Moved by
Steven_Lee0510Microsoft contingent staff
Tuesday, December 23, 2014 7:17 AM
December 22nd, 2014 12:42pm
Hi Habibur
Due to this issue is more related to ISA server, to get better help, please allow me to move this case to the Forefront TMG and ISA Server forum.
Thanks for your understanding!
Best Regards.
December 23rd, 2014 10:17am
Hi,
Firstly, please use Nslookup.exe to see if the website can be resolved. If not, it would be a DNS related issue. If the client uses ISA Server as a proxy, ensure that the DNS server used by ISA Server to resolve external names is able to resolve the name
of the Microsoft websites.
In addition, please check the logs and the access rules on the ISA server to ensure no rule is denying access to the Microsoft website.
Best regards,
December 24th, 2014 12:07pm
Dear Susie,
When I tried nslookup the Microsoft website are getting resolved.
& I am getting the ip address of Microsoft as
Non-authoritative answer:
Name: microsoft.com
Addresses: 134.170.188.221
134.170.185.46
Thanks for the rep.
Waiting for the solution.
Regard,
Habibur Rehman Ansari
December 24th, 2014 12:26pm
Hi,
Thanks for youe reply.
It seems that DNS name resolution is fine. Did you find any related logs on the ISA server? If yes, please post them and you can hide the private parts.
Best regards,
Susie
December 29th, 2014 5:39am
First try to access the site from ISA server. If it is not accessible from ISA their might be something else blocking. Check Rule 18/19 allowing HTTP/HTTPS connections.
If you are able to access the websites from ISA then try below.
There might be some rule blocking access. To confirm this, you can create a new access rule. Create a Domain name set with contains Microsoft sites you are try to access you can use wildcard entries like *.Microsoft.com; *.live.com.
From :- The network from where you are trying to access (e.g. Internal)
To :- The Domain name set you created above.
Allow HTTP/HTTPS
Users - All users
** Make sure you keep this rule on the very top of the list. Apply settings and then check.
-
Proposed as answer by
Susie LongMicrosoft contingent staff, Moderator
Tuesday, December 30, 2014 6:42 AM
December 29th, 2014 9:01am
Hi,
The rule is there & its the only rule that I have inserted in ISA. My ISA is directly connected to Internet without any firewall.
When I disable the proxy in IE I am able to browse. & when I enable the proxy it gives error of 11004.
Kindly suggest. Also tell me how to get the log file in ISA 2000 so I can share with you.
Regards,
Habibur Rehman Ansari
January 2nd, 2015 10:36am
Hi,
It seems that the error 11004 is due to the DNS could not be resolved. Can you obtain the IP address when you use nslookup to resolve the website(such as run "nslookup google.com")?
In addition, ISA Server provides logging to a file for the Web Proxy Service, Firewall Service, and for packet filters. Please make sure you have enable ISA logging for the Web Proxy Service and Firewall Service. Then you can check the logs on the path
you have configured.
More information:
Configuring ISA Server Log Files. (Note:
Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft.)
Best regards,
Susie
January 6th, 2015 9:49am
Hi,
I am able to do nslookup.
Non-authoritative answer:
Name: yahoo.com
Addresses: 98.138.253.109
98.139.183.24
206.190.36.45
> msn.com
Non-authoritative answer:
Name: msn.com
Address: 23.101.196.141
> micorosoft.com
Non-authoritative answer:
Name: micorosoft.com
Addresses: 65.55.39.10
64.4.6.100
January 12th, 2015 3:41pm
Hi,
Thanks for your reply.
Which server did you configure as a proxy server? In addition, please also make sure that the port used for proxy is not blocked on the client and server.
Did you find any related logs on the ISA server? If not, I recommend you to capture packets using network monitor when you encounter this issue.
Best regards,
Susie
January 14th, 2015 9:31am
Hi,
The server is Server 2003 x86.Proxy is ISA 2000.
I have a monthly log report. I can send you if required.
Regards,
Habibur Rehman Ansari
January 15th, 2015 12:09pm
Hi,
I am able to nslookup microsoft.com
but unable to ping the same. what could be the issue
Regards,
Habibur Rehman Ansari
February 4th, 2015 7:40am