Welcome to TechNet Blogs Sign in | Join | Help

Browse by Tags

All Tags » Troubleshooting   (RSS)

64-bit RPC traffic fails across ISA Sever 2006

1. Introduction This post describes an issue where two 64-bit Windows hosts are failing to communicate to each other using RPC . The hosts each operate in a network physically separated from each other by ISA Server 2006. Figure 1 illustrates the basic
Posted by isablog | 0 Comments
Filed under: ,

ISA Scripting Without “Scripting ISA”

Introduction ISA Server 2006 SP1 includes a fix released in September 2007 that allowed ISA 2006 arrays to use multicast and IGMP-aware Integrated NLB . Implementing this change is a four-part process: 1. Install the update (or preferably; SP1 ) 2. Run
Posted by isablog | 0 Comments
Filed under: ,

ISA Server 2006 SP1 – Problems that Go Beyond the Test Button

Introduction ISA Server 2006 SP1 shipped last week and it represents a big milestone for the product. The troubleshooting tools that are now built in will help the administrators effectively test their publishing rules prior to deploy published server
Posted by isablog | 2 Comments

Another Look at Kerberos Constrained Delegation on ISA Server 2006 – OWA Publishing Scenario

A really nice feature that was added in ISA Server 2006 is support for Kerberos Constrained Delegation (KCD). Kerberos Constrained Delegation allows ISA Server 2006 to verify the identity of a client using a non-Kerberos authentication method (in this
Posted by isablog | 3 Comments
Filed under:

Understanding Why ISA Server re-prompts for Authentication when Passwords Expire

Introduction There are times that the user does not change their password on the day that Group Policy forces a password change. Normally, if the user logs off and tries to logon again, Windows will inform him that his password is expired and require
Posted by isablog | 1 Comments
Filed under: ,

ISA Server 2006 form base authentication problem using UPN logon format on a multiple domain environment

1. Understanding the Environment The scenario that I’m going to describe on this post was based on a case where the customer’s need was really specific and the configuration of the ISA Server was restricted by the company’s hardening policy. The topology
Posted by isablog | 2 Comments
Filed under: ,

Isolating problems that seems to be related to the ISA Server – Part III

1. Introduction On the last session , back in July last year we saw an issue that on the first perspective looks like an ISA Server issue, however it end up to be another component. The scenario that I’m going to describe now is really something that
Posted by isablog | 4 Comments
Filed under: ,

Questionable users

You may have noticed that in certain cases, the Client Username field in the ISA firewall log has user names with question marks - (?) - after them: Who are these questionable users? These user names appear when you have a policy rule which allows All
Posted by isablog | 2 Comments
Filed under: ,

Certificates with Multiple SAN Entries May Break ISA Server Web Publishing

What is a “SAN”? “SAN” in this context refers to the certificate attribute “Subject Alternative Name”. Among other uses, this attribute allows the site administrator to save money and administrative overhead by building a single certificate that lists
Posted by isablog | 23 Comments
Filed under:

Testing RPC over HTTP through ISA Server 2006 Part 3; Common Failures and Resolutions

Common Failure States In the sections below, you’ll find the most common failure states listed in “priority” order, including the relevant data provided by each tool or traffic processing point and the most appropriate resolutions to each. While it may
Posted by isablog | 3 Comments
Filed under:

Testing RPC over HTTP through ISA Server 2006 Part 2; Test Tools and Strategies

The Solution(s) As luck would have it, we have several tools available: · RPCPing.exe ; thoughtfully supplied by the very same RPC team that gave us the RPC over HTTP protocol, you’ll find it included in the Windows 2003 Resource Kit Tools . · WinHttpTraceCfg
Posted by isablog | 3 Comments
Filed under:

Testing RPC over HTTP through ISA Server 2006 Part 1; Protocols, Authentication and Processing

Recommended Reading Before you delve into the following discussion, you will likely find the following articles very useful: TechNet article Troubleshooting RPC over HTTP Communications Microsoft Knowledge Base article 831051 , How to use the RPC Ping
Posted by isablog | 4 Comments
Filed under:
 
Page view tracker