ISA 2k6 - uploading files to Fronter

[adamf]

I'm trying to upload a SCORM course to Fronter that is 300MB in size. All traffic goes via our ISA Server. Whenever we try this using the multiple files upload java applet in Fronter nothing happens, the file appears to upload but the connection times out after a while.

I started a query in ISA and found that the connection is being denied for some reason... When I change the proxy in IE to our ISPs proxy everything uploads fine.

It doesn't seem to make a difference if I upload a small set of files or a large set of files - if it goes via the ISA server it doesn't work. This is what ISA is chucking out:

Denied Connection ISASERVER 10/03/2009 21:34:22 
Log type: Web Proxy (Forward) 
Status: 12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.  
Rule: Allow HTTP traffic 
Source: Internal (10.59.100.12) 
Destination: External (10.59.100.16:8080) 
Request: POST http://fronter.com/croydon/links/archive_multiupload.php?jupart=1&jufinal=0 
Filter information: Req ID: 0c0933fa; Compression: client=No, server=No, compress rate=0% decompress rate=0% 
Protocol: http 
User: anonymous 
 Additional information 
Client agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.2; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Object source: (No source information is available.)
Cache info: 0x0
Processing time: 1 ms
MIME type:

Am I missing something in ISA? Becuase the file is being uploaded via a java applet is it normal http traffic or something else?

Cheers.

[john]

Java is notorious for being annoying. I know in our ISA box I have set, due to the arrangement our LEA have in place, that traffic to fronter bypasses the ISA stuff so it goes straight through direct to them.

Have you got the ISA firewall client instaled, setup and working on your machine?

[adamf]

Nope. I don't use the firewall client - rather hoping to avoid it if I can!

[john]

Stick it on your machine and it will probably solve it, solves most things I've found.

[adamf]

I can work around it by changing the proxy settings in IE - it's normal staff that need to be able to upload. Does it need any configuring or does it just get straight to work??

[john]

The FW client just installs and goes in most cases. Maybe worth trying to bypass the proxy by puttin a route directly to upstream server rule in on your ISA box perhaps and see if that works?

What LEA are you in as that may help as well.

[SYNACK]

It looks like it is attempting to open a second seporate connection to upload the files through and is not configured to prompt for authentication (possible integrated authentication on the HTTP rule that requires the UN/PW for the user).

You could test/solve this by adding a new http access rule above your current one with everyone allowd and have the location set to fronter.com this should allow the badly programed java application to still send its data without needing to authenticate and will push all of the rest of the traffic through the original rule that you have that does require authentication.

[adamf]

@SYNACK

Worked! Thanks.

[snuggletech]

Afternoon guys.
We too use ISA to control all internet traffic for our students (not for staff that bypass it) and we are starting to use fronter. It is in the testing stage at the moment and the 1st group of kids we tried have hit a snag.
I'm not sure if it's the same type of problem but i'm hoping you might be able to help all the same.
The kids can access the site well enough and can see the general shell of the site if you like; the problems occur when they enter the rooms. Content like .jpeg files and a youtube video will not load on the front page. We just get that lovely white box with red cross that we all enjoy.
Also when they try and download a word document from the student resources they get the same ISA page they would when accessing a blocked website.

We have tried everything in ISA including:
creating new access rules pointing directly to fronter URLs and IP address ranges.
we've opened ports that we got from their help desk
i also added a new content type list full of different variations of phtml format that fronter use (something i took from another forum).

We also tried using group policy to make the kids bypass ISA when using fronter but not even that worked.
We know for sure that it is ISA because as soon as you force the kids round it with Ranger Administrator it works.
I was thinking that it may be something to do with this 2nd connection that it tries to open.
Any help on this would be great but any step by step guides or screen shots would be even better.
Please for my own sanity or i think ISA may go for a swim in the thames after taking a kicking.