Download problems in IE7 (and ISA?)

[Ryan]

Not sure what's getting in the way, but users are unable to download some files from websites using IE7. I tested with Firefox bypassing the proxy (ISA 2006) and it worked fine, so it leads me to believe it's ISA-related. Tested on IE7 on my PC going through proxy and can't download.

 

The file seems to download fine, and displays the Secure Download page, but once the user is offered "Save to Disk" button, it can't go past this step. Anyone come across this?

 

Sits here for ages:

Edited March 20, 2008 by Ryan
Added screenshot

[contink]

The file seems to download fine, and displays the Secure Download page, but once the user is offered "Save to Disk" button, it can't go past this step. Anyone come across this?

When you say it can't get past that step....do you mean you don't get the explorer style window showing you where you can save the file to?

 

If so, I wonder if it's a permissions issue specific to IE7...

 

Just a guess mind..

[CHR1S]

As Contink said, could be permissions, Add the URL to the trusted sites bit and try again.

[Ryan]

you don't get the explorer style window showing you where you can save the file to?

Correct, yep. The progress bar at the bottom just crawls along and does nowt.

Add the URL to the trusted sites bit and try again

Nope, no dice

[contink]

Hmm... is it using a secure socket or some special socket with this secure download system?

 

Maybe that's being blocked?

[Ryan]

Top of my head, this new Secure Download crap was introduced in XP SP2 as an intermediary step for downloading files, no? Supposed to keep us all safe and secure when downloading nasty files from t'interweb.

 

Haven't been able to find much on how it's actually implemented yet.

[contink]

Top of my head, this new Secure Download crap was introduced in XP SP2 as an intermediary step for downloading files, no? Supposed to keep us all safe and secure when downloading nasty files from t'interweb.

It was?? I've never seen it before myself..

[Ryan]

It was?? I've never seen it before myself..

Maybe it's an ISA Server thing then?

 

So if you go to: http://www.connexions.gov.uk/partnerships/documents/Behaviour%20of%20Young%20People%20Reader%203.pdf

 

Do you not get a page similar to the attached screeny in OP? Do you just get the "Save to Disk" pop up dialog?

[contink]

So if you go to: http://www.connexions.gov.uk/partnerships/documents/Behaviour%20of%20Young%20People%20Reader%203.pdf

 

Do you not get a page similar to the attached screeny in OP? Do you just get the "Save to Disk" pop up dialog?

 

Nope... All I get is actually Adobe Acrobat Reader opening up the document.. although I think that's an add-in GPO setting.

 

 

Given the information that your screenshot showed though I'm wondering if you have an add-in installed that's providing that functionality.. Have you tried looking in your active-x add-ons for your IE7?

[bizzel]

Mmhmm, sounds like an intercept page from the ISA server. It's not something I've seen with IE7 and SP2 here.

[Ryan]

Think i've resolved it. Must have been an auth issue with ISA Server.

 

Went into: Tools > Internet Options > Security tab > Custom Level (on Internet Zone) and right at the bottom changed User Authentication > Logon to "Automatic Logon with current username and password".

 

Was previously set to "Automatic logon in Intranet only". Seems to have done the trick. Now to set it for everyone....

[SYNACK]

Think i've resolved it. Must have been an auth issue with ISA Server.

 

Went into: Tools > Internet Options > Security tab > Custom Level (on Internet Zone) and right at the bottom changed User Authentication > Logon to "Automatic Logon with current username and password".

 

Was previously set to "Automatic logon in Intranet only". Seems to have done the trick. Now to set it for everyone....

 

Yes, this makes sense. The downloader thing is not a part of IE7 or ISA, I would suspect that it is an active x browser extension added by your AV package. Each of the active x controls on a page has to authenticate individually with the ISA server as it opens its own connection. As the setup was before it probably was unable to get the correct authentication details and did not have the facility within the control to prompt for authentication.

[Ryan]

Was being dense, sorry. I presumed it was a built-in thing. I don't use IE at home, and only use it here for testing rendering of internet/intranet web pages.

 

Thx for the additional info Sy. McAfee AV 8/8.5 here for reference.

[Ryan]

Bugger, after GP-enforced changes it's not working again. Arg.

 

Well i'll be even more God damned, it's a GFI WebMonitor feature! Wonder why it's not working as it should. Now, do i disable it...

Edited March 20, 2008 by Ryan

[SYNACK]

You could use wireshark on the pc and packet sniff the request. That should help you get to the bottom of what it is actually requesting that it can't get from the ISA server. As its an http download it should not use any dodgey ports for the download itself, these should be handled under port 80. Perhaps it is trying to use some other protocol to get more file information or something - maybe a remote lookup of the URL to check if it has been reported bad.

[Ryan]

Ended up definitely being an issue with the 3 stage virus scan that GFI WebMon does (BitDefender, Kaspersky, Norman). Tried just using one of them in turn, same issue. Ended up turning it off, downloads work fine.

 

Obviously it'd be nice to have this extra level of protection, but it's causing too much hassle atm and stopping people doing their jobs (or rather helping them do it even slower).

 

Thanks for everyone's help.