We are using SBS2000 --with ISA Server 2000. We only have XP Clients.
Is there any reason to have both the Firewall Client and the Proxy
Server setting in Internet Explorer set to point to the ISA Server at
port 8080? Or, is the the Firewall Client alone sufficient for
Internet browsing? We think that setting the proxy setting is ony
necessary if for some reason (such as the OS or browser in use) the
Firewall Client cannot be installed.

As it is now, we have both. However, periodically, but very
infrequently, at random websites, the user is prompted for a username/
password for the Proxy Server. If we remove the proxy settings, the
prompts do not occur, but we sometimes get "page cannot be displayed"
or similar error. We are not sure why we are prompted as the same
webpage may or may not prompt the user?

Thanks.

Re: Firewall Client/Proxy Server Question by Cris

Cris
Mon Dec 03 09:53:04 PST 2007

This is a multi-part message in MIME format.

------=_NextPart_000_0D01_01C835A3.10254B00
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

There are many other programs you could possibly have installed that =
will look to IE's proxy settings

Probably best to have both

--=20
Cris Hanna [SBS - MVP]
-----------------------------------------------------------
MVPs Do Not Work for Microsoft
Please do not contact me directly regarding issues
<compsosinc@gmail.com> wrote in message =
news:0e13ef59-1d59-44b0-8770-d6d7b287c6c3@j20g2000hsi.googlegroups.com...=

We are using SBS2000 --with ISA Server 2000. We only have XP Clients.
Is there any reason to have both the Firewall Client and the Proxy
Server setting in Internet Explorer set to point to the ISA Server at
port 8080? Or, is the the Firewall Client alone sufficient for
Internet browsing? We think that setting the proxy setting is ony
necessary if for some reason (such as the OS or browser in use) the
Firewall Client cannot be installed.

As it is now, we have both. However, periodically, but very
infrequently, at random websites, the user is prompted for a username/
password for the Proxy Server. If we remove the proxy settings, the
prompts do not occur, but we sometimes get "page cannot be displayed"
or similar error. We are not sure why we are prompted as the same
webpage may or may not prompt the user?

Thanks.
------=_NextPart_000_0D01_01C835A3.10254B00
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.5730.13" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>There are many other programs you could =
possibly=20
have installed that will look to IE's proxy settings</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Probably best to have both</FONT></DIV>
<DIV><BR>-- <BR>Cris Hanna [SBS -=20
MVP]<BR>-----------------------------------------------------------<BR>MV=
Ps Do=20
Not Work for Microsoft<BR>Please do not contact me directly regarding=20
issues</DIV>
<BLOCKQUOTE=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>&lt;<A =
href=3D"mailto:compsosinc@gmail.com">compsosinc@gmail.com</A>&gt;=20
wrote in message <A=20
=
href=3D"news:0e13ef59-1d59-44b0-8770-d6d7b287c6c3@j20g2000hsi.googlegroup=
s.com">news:0e13ef59-1d59-44b0-8770-d6d7b287c6c3@j20g2000hsi.googlegroups=
.com</A>...</DIV>We=20
are using SBS2000 --with ISA Server 2000. We only have XP =
Clients.<BR>Is there=20
any reason to have both the Firewall Client and the Proxy<BR>Server =
setting in=20
Internet Explorer set to point to the ISA Server at<BR>port 8080? Or, =
is the=20
the Firewall Client alone sufficient for<BR>Internet browsing? We =
think that=20
setting the proxy setting is ony<BR>necessary if for some reason (such =
as the=20
OS or browser in use) the<BR>Firewall Client cannot be =
installed.<BR><BR>As it=20
is now, we have both. However, periodically, but very<BR>infrequently, =
at=20
random websites, the user is prompted for a username/<BR>password for =
the=20
Proxy Server. If we remove the proxy settings, the<BR>prompts do not =
occur,=20
but we sometimes get "page cannot be displayed"<BR>or similar error. =
We are=20
not sure why we are prompted as the same<BR>webpage may or may not =
prompt the=20
user?<BR><BR>Thanks.</BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0D01_01C835A3.10254B00--


Re: Firewall Client/Proxy Server Question by compsosinc

compsosinc
Mon Dec 03 10:10:57 PST 2007

On Dec 3, 12:53 pm, "Cris Hanna [SBS-MVP]"
<crisnospamha...@cpunospamservices.net> wrote:
> There are many other programs you could possibly have installed that will look to IE's proxy settings
>
> Probably best to have both
>
> --
> Cris Hanna [SBS - MVP]
> -----------------------------------------------------------
> MVPs Do Not Work for Microsoft
> Please do not contact me directly regarding issues <compsos...@gmail.com> wrote in messagenews:0e13ef59-1d59-44b0-8770-d6d7b287c6c3@j20g2000hsi.googlegroups.com...
>
> We are using SBS2000 --with ISA Server 2000. We only have XP Clients.
> Is there any reason to have both the Firewall Client and the Proxy
> Server setting in Internet Explorer set to point to the ISA Server at
> port 8080? Or, is the the Firewall Client alone sufficient for
> Internet browsing? We think that setting the proxy setting is ony
> necessary if for some reason (such as the OS or browser in use) the
> Firewall Client cannot be installed.
>
> As it is now, we have both. However, periodically, but very
> infrequently, at random websites, the user is prompted for a username/
> password for the Proxy Server. If we remove the proxy settings, the
> prompts do not occur, but we sometimes get "page cannot be displayed"
> or similar error. We are not sure why we are prompted as the same
> webpage may or may not prompt the user?
>
> Thanks.

Ok, but what is typically the reason that while Internet Browsing, a
user is prompted for their Username/Password, when they have had no
previous problem browsing to the same webpage?? Also, entering the
username/password generally does not help the matter...

Thanks in advance..

Re: Firewall Client/Proxy Server Question by Cris

Cris
Mon Dec 03 10:38:28 PST 2007

This is a multi-part message in MIME format.

------=_NextPart_000_0D59_01C835A9.6778BC10
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Well Unfortunately a while since I've worked on an SBS 2000 box

Are you currently running the Firewall Client and Proxy or just Proxy?

Are the users logged on to the domain vs the workstation?




--=20
Cris Hanna [SBS - MVP]
-----------------------------------------------------------
MVPs Do Not Work for Microsoft
Please do not contact me directly regarding issues
<compsosinc@gmail.com> wrote in message =
news:75c48aee-6329-498b-982a-5e737bda2f1c@w40g2000hsb.googlegroups.com...=

On Dec 3, 12:53 pm, "Cris Hanna [SBS-MVP]"
<crisnospamha...@cpunospamservices.net> wrote:
> There are many other programs you could possibly have installed that =
will look to IE's proxy settings
>
> Probably best to have both
>
> --
> Cris Hanna [SBS - MVP]
> -----------------------------------------------------------
> MVPs Do Not Work for Microsoft
> Please do not contact me directly regarding issues =
<compsos...@gmail.com> wrote in =
messagenews:0e13ef59-1d59-44b0-8770-d6d7b287c6c3@j20g2000hsi.googlegroups=
.com...
>
> We are using SBS2000 --with ISA Server 2000. We only have XP =
Clients.
> Is there any reason to have both the Firewall Client and the Proxy
> Server setting in Internet Explorer set to point to the ISA Server =
at
> port 8080? Or, is the the Firewall Client alone sufficient for
> Internet browsing? We think that setting the proxy setting is ony
> necessary if for some reason (such as the OS or browser in use) =
the
> Firewall Client cannot be installed.
>
> As it is now, we have both. However, periodically, but very
> infrequently, at random websites, the user is prompted for a =
username/
> password for the Proxy Server. If we remove the proxy settings, =
the
> prompts do not occur, but we sometimes get "page cannot be =
displayed"
> or similar error. We are not sure why we are prompted as the same
> webpage may or may not prompt the user?
>
> Thanks.

Ok, but what is typically the reason that while Internet Browsing, a
user is prompted for their Username/Password, when they have had no
previous problem browsing to the same webpage?? Also, entering the
username/password generally does not help the matter...

Thanks in advance..
------=_NextPart_000_0D59_01C835A9.6778BC10
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.5730.13" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Well Unfortunately a while since I've =
worked on an=20
SBS 2000 box</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Are you currently running the Firewall =
Client and=20
Proxy or just Proxy?</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Are the users logged on to the domain =
vs the=20
workstation?</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
<DIV><BR>-- <BR>Cris Hanna [SBS -=20
MVP]<BR>-----------------------------------------------------------<BR>MV=
Ps Do=20
Not Work for Microsoft<BR>Please do not contact me directly regarding=20
issues</DIV>
<BLOCKQUOTE=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>&lt;<A =
href=3D"mailto:compsosinc@gmail.com">compsosinc@gmail.com</A>&gt;=20
wrote in message <A=20
=
href=3D"news:75c48aee-6329-498b-982a-5e737bda2f1c@w40g2000hsb.googlegroup=
s.com">news:75c48aee-6329-498b-982a-5e737bda2f1c@w40g2000hsb.googlegroups=
.com</A>...</DIV>On=20
Dec 3, 12:53 pm, "Cris Hanna [SBS-MVP]"<BR>&lt;<A=20
=
href=3D"mailto:crisnospamha...@cpunospamservices.net">crisnospamha...@cpu=
nospamservices.net</A>&gt;=20
wrote:<BR>&gt; There are many other programs you could possibly have =
installed=20
that will look to IE's proxy settings<BR>&gt;<BR>&gt; Probably best to =
have=20
both<BR>&gt;<BR>&gt; --<BR>&gt; Cris Hanna [SBS - MVP]<BR>&gt;=20
-----------------------------------------------------------<BR>&gt; =
MVPs Do=20
Not Work for Microsoft<BR>&gt; Please do not contact me directly =
regarding=20
issues&nbsp; &lt;<A=20
href=3D"mailto:compsos...@gmail.com">compsos...@gmail.com</A>&gt; =
wrote in=20
=
messagenews:0e13ef59-1d59-44b0-8770-d6d7b287c6c3@j20g2000hsi.googlegroups=
.com...<BR>&gt;<BR>&gt;&nbsp;&nbsp;=20
We are using SBS2000 --with ISA Server 2000. We only have XP=20
Clients.<BR>&gt;&nbsp;&nbsp; Is there any reason to have both the =
Firewall=20
Client and the Proxy<BR>&gt;&nbsp;&nbsp; Server setting in Internet =
Explorer=20
set to point to the ISA Server at<BR>&gt;&nbsp;&nbsp; port 8080? Or, =
is the=20
the Firewall Client alone sufficient for<BR>&gt;&nbsp;&nbsp; Internet=20
browsing? We think that setting the proxy setting is =
ony<BR>&gt;&nbsp;&nbsp;=20
necessary if for some reason (such as the OS or browser in use)=20
the<BR>&gt;&nbsp;&nbsp; Firewall Client cannot be=20
installed.<BR>&gt;<BR>&gt;&nbsp;&nbsp; As it is now, we have both. =
However,=20
periodically, but very<BR>&gt;&nbsp;&nbsp; infrequently, at random =
websites,=20
the user is prompted for a username/<BR>&gt;&nbsp;&nbsp; password for =
the=20
Proxy Server. If we remove the proxy settings, the<BR>&gt;&nbsp;&nbsp; =
prompts=20
do not occur, but we sometimes get "page cannot be=20
displayed"<BR>&gt;&nbsp;&nbsp; or similar error. We are not sure why =
we are=20
prompted as the same<BR>&gt;&nbsp;&nbsp; webpage may or may not prompt =
the=20
user?<BR>&gt;<BR>&gt;&nbsp;&nbsp; Thanks.<BR><BR>Ok, but what is =
typically the=20
reason that while Internet Browsing, a<BR>user is prompted for their=20
Username/Password, when they have had no<BR>previous problem browsing =
to the=20
same webpage?? Also, entering the<BR>username/password generally does =
not help=20
the matter...<BR><BR>Thanks in advance..</BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0D59_01C835A9.6778BC10--


Re: Firewall Client/Proxy Server Question by compsosinc

compsosinc
Mon Dec 03 10:51:32 PST 2007

On Dec 3, 1:38 pm, "Cris Hanna [SBS-MVP]"
<crisnospamha...@cpunospamservices.net> wrote:
> Well Unfortunately a while since I've worked on an SBS 2000 box
>
> Are you currently running the Firewall Client and Proxy or just Proxy?
>
> Are the users logged on to the domain vs the workstation?
>
> --
> Cris Hanna [SBS - MVP]
> -----------------------------------------------------------
> MVPs Do Not Work for Microsoft
> Please do not contact me directly regarding issues <compsos...@gmail.com> wrote in messagenews:75c48aee-6329-498b-982a-5e737bda2f1c@w40g2000hsb.googlegroups.com...
>
> On Dec 3, 12:53 pm, "Cris Hanna [SBS-MVP]" <crisnospamha...@cpunospamservices.net> wrote:
>
> > There are many other programs you could possibly have installed that will look to IE's proxy settings
> >
> > Probably best to have both
> >
> > --
> > Cris Hanna [SBS - MVP]
> > -----------------------------------------------------------
> > MVPs Do Not Work for Microsoft
> > Please do not contact me directly regarding issues <compsos...@gmail.com> wrote in messagenews:0e13ef59-1d59-44b0-8770-d6d7b287c6c3@j20g2000hsi.googlegroups.com...
> >
> > We are using SBS2000 --with ISA Server 2000. We only have XP Clients.
> > Is there any reason to have both the Firewall Client and the Proxy
> > Server setting in Internet Explorer set to point to the ISA Server at
> > port 8080? Or, is the the Firewall Client alone sufficient for
> > Internet browsing? We think that setting the proxy setting is ony
> > necessary if for some reason (such as the OS or browser in use) the
> > Firewall Client cannot be installed.
> >
> > As it is now, we have both. However, periodically, but very
> > infrequently, at random websites, the user is prompted for a username/
> > password for the Proxy Server. If we remove the proxy settings, the
> > prompts do not occur, but we sometimes get "page cannot be displayed"
> > or similar error. We are not sure why we are prompted as the same
> > webpage may or may not prompt the user?
> >
> > Thanks.
>
> Ok, but what is typically the reason that while Internet Browsing, a
> user is prompted for their Username/Password, when they have had no
> previous problem browsing to the same webpage?? Also, entering the
> username/password generally does not help the matter...
>
> Thanks in advance..

We are currently using both the Firewall Client and the Proxy Server
and the workstations are logged into the domain, though I am trying to
recall why we ever set the Proxy settings to begin with. Like I
stated, the prompt for Username/Password happens very infrequently.
However, when the user does get the prompt and we remove the proxy
settings, the webpage displays fine. The same page may sometimes
display fine with the proxy settings.Or, with proxy settings we
sometimes get an error at the Windows Update site--but if removed we
do not get an error.

I guess we are just trying to determine which apps we use may need a
proxy setting--do you have an example??

Re: Firewall Client/Proxy Server Question by Duncan

Duncan
Mon Dec 03 14:40:13 PST 2007

In article <5879588e-68f6-4621-b18d-a62291b7ac32
@l1g2000hsa.googlegroups.com>, compsosinc@gmail.com says...
> On Dec 3, 1:38 pm, "Cris Hanna [SBS-MVP]"
> <crisnospamha...@cpunospamservices.net> wrote:
> > Well Unfortunately a while since I've worked on an SBS 2000 box
> >
> > Are you currently running the Firewall Client and Proxy or just Proxy?
> >
> > Are the users logged on to the domain vs the workstation?
> >
> > --
> > Cris Hanna [SBS - MVP]
> > -----------------------------------------------------------
> > MVPs Do Not Work for Microsoft
> > Please do not contact me directly regarding issues <compsos...@gmail.com> wrote in messagenews:75c48aee-6329-498b-982a-5e737bda2f1c@w40g2000hsb.googlegroups.com...
> >
> > On Dec 3, 12:53 pm, "Cris Hanna [SBS-MVP]" <crisnospamha...@cpunospamservices.net> wrote:
> >
> > > There are many other programs you could possibly have installed that will look to IE's proxy settings
> > >
> > > Probably best to have both
> > >
> > > --
> > > Cris Hanna [SBS - MVP]
> > > -----------------------------------------------------------
> > > MVPs Do Not Work for Microsoft
> > > Please do not contact me directly regarding issues <compsos...@gmail.com> wrote in messagenews:0e13ef59-1d59-44b0-8770-d6d7b287c6c3@j20g2000hsi.googlegroups.com...
> > >
> > > We are using SBS2000 --with ISA Server 2000. We only have XP Clients.
> > > Is there any reason to have both the Firewall Client and the Proxy
> > > Server setting in Internet Explorer set to point to the ISA Server at
> > > port 8080? Or, is the the Firewall Client alone sufficient for
> > > Internet browsing? We think that setting the proxy setting is ony
> > > necessary if for some reason (such as the OS or browser in use) the
> > > Firewall Client cannot be installed.
> > >
> > > As it is now, we have both. However, periodically, but very
> > > infrequently, at random websites, the user is prompted for a username/
> > > password for the Proxy Server. If we remove the proxy settings, the
> > > prompts do not occur, but we sometimes get "page cannot be displayed"
> > > or similar error. We are not sure why we are prompted as the same
> > > webpage may or may not prompt the user?
> > >
> > > Thanks.
> >
> > Ok, but what is typically the reason that while Internet Browsing, a
> > user is prompted for their Username/Password, when they have had no
> > previous problem browsing to the same webpage?? Also, entering the
> > username/password generally does not help the matter...
> >
> > Thanks in advance..
>
> We are currently using both the Firewall Client and the Proxy Server
> and the workstations are logged into the domain, though I am trying to
> recall why we ever set the Proxy settings to begin with. Like I
> stated, the prompt for Username/Password happens very infrequently.
> However, when the user does get the prompt and we remove the proxy
> settings, the webpage displays fine. The same page may sometimes
> display fine with the proxy settings.Or, with proxy settings we
> sometimes get an error at the Windows Update site--but if removed we
> do not get an error.
>
> I guess we are just trying to determine which apps we use may need a
> proxy setting--do you have an example??

There are many apps that will use IE's proxy settings - can't think of
one off the top of my head though :)

I maintain one SBS 2000 network (changing this week to 2003), and I've
always used the (SBS) firewall client and proxy settings for ISA.

Of note, in SBS 2003 Premium (w' ISA Server) the SBS firewall client
actually has a new button that configures IE (sets the proxy settings
and installs a dll to run on start (of IE)). I think it's the later
that checks the proxy settings are set.

So yeah, it's meant to be that way.

Are the users members of the Internet group?

--
Duncan

Re: Firewall Client/Proxy Server Question by compsosinc

compsosinc
Mon Dec 03 15:00:03 PST 2007

On Dec 3, 5:40 pm, Duncan McC <h...@work.ok> wrote:
> In article <5879588e-68f6-4621-b18d-a62291b7ac32
> @l1g2000hsa.googlegroups.com>, compsos...@gmail.com says...
>
>
>
>
>
> > On Dec 3, 1:38 pm, "Cris Hanna [SBS-MVP]"
> > <crisnospamha...@cpunospamservices.net> wrote:
> > > Well Unfortunately a while since I've worked on an SBS 2000 box
>
> > > Are you currently running the Firewall Client and Proxy or just Proxy?
>
> > > Are the users logged on to the domain vs the workstation?
>
> > > --
> > > Cris Hanna [SBS - MVP]
> > > -----------------------------------------------------------
> > > MVPs Do Not Work for Microsoft
> > > Please do not contact me directly regarding issues <compsos...@gmail.com> wrote in messagenews:75c48aee-6329-498b-982a-5e737bda2f1c@w40g2000hsb.googlegroups.com...
>
> > > On Dec 3, 12:53 pm, "Cris Hanna [SBS-MVP]" <crisnospamha...@cpunospamservices.net> wrote:
>
> > > > There are many other programs you could possibly have installed that will look to IE's proxy settings
>
> > > > Probably best to have both
>
> > > > --
> > > > Cris Hanna [SBS - MVP]
> > > > -----------------------------------------------------------
> > > > MVPs Do Not Work for Microsoft
> > > > Please do not contact me directly regarding issues <compsos...@gmail.com> wrote in messagenews:0e13ef59-1d59-44b0-8770-d6d7b287c6c3@j20g2000hsi.googlegroups.com...
>
> > > > We are using SBS2000 --with ISA Server 2000. We only have XP Clients.
> > > > Is there any reason to have both the Firewall Client and the Proxy
> > > > Server setting in Internet Explorer set to point to the ISA Server at
> > > > port 8080? Or, is the the Firewall Client alone sufficient for
> > > > Internet browsing? We think that setting the proxy setting is ony
> > > > necessary if for some reason (such as the OS or browser in use) the
> > > > Firewall Client cannot be installed.
>
> > > > As it is now, we have both. However, periodically, but very
> > > > infrequently, at random websites, the user is prompted for a username/
> > > > password for the Proxy Server. If we remove the proxy settings, the
> > > > prompts do not occur, but we sometimes get "page cannot be displayed"
> > > > or similar error. We are not sure why we are prompted as the same
> > > > webpage may or may not prompt the user?
>
> > > > Thanks.
>
> > > Ok, but what is typically the reason that while Internet Browsing, a
> > > user is prompted for their Username/Password, when they have had no
> > > previous problem browsing to the same webpage?? Also, entering the
> > > username/password generally does not help the matter...
>
> > > Thanks in advance..
>
> > We are currently using both the Firewall Client and the Proxy Server
> > and the workstations are logged into the domain, though I am trying to
> > recall why we ever set the Proxy settings to begin with. Like I
> > stated, the prompt for Username/Password happens very infrequently.
> > However, when the user does get the prompt and we remove the proxy
> > settings, the webpage displays fine. The same page may sometimes
> > display fine with the proxy settings.Or, with proxy settings we
> > sometimes get an error at the Windows Update site--but if removed we
> > do not get an error.
>
> > I guess we are just trying to determine which apps we use may need a
> > proxy setting--do you have an example??
>
> There are many apps that will use IE's proxy settings - can't think of
> one off the top of my head though :)
>
> I maintain one SBS 2000 network (changing this week to 2003), and I've
> always used the (SBS) firewall client and proxy settings for ISA.
>
> Of note, in SBS 2003 Premium (w' ISA Server) the SBS firewall client
> actually has a new button that configures IE (sets the proxy settings
> and installs a dll to run on start (of IE)). I think it's the later
> that checks the proxy settings are set.
>
> So yeah, it's meant to be that way.
>
> Are the users members of the Internet group?
>
> --
> Duncan- Hide quoted text -
>
> - Show quoted text -

Thank you for the help. Yes, the Users are members of: "BackOffice
Internet Users". Using both Firewall client & Proxy settings.

In ISA Management, there was already an "Allow" Protocol Rule for "All
IP Traffic" but I created a separate rule for just the FTP-related
Protocol Definitions --did not work. I did restart the ISA Service to
be sure & I had disabled any FTP IP Packet Filters.

Note, if I enable the FTP Packet Filters, and attempt to go to the FTP
site I am testing, from the Server itself I can get the FTP USername/
Password prompt. At the users I get the HTTP Proxy 502 error
concerning Logon failure (12015).

So, if I add the login credentials to the FTP URL I can get to the FTP
site from the client. Such as ftp://username:password@ftp.website.com.
Why is this? So if I remove the Proxy settings from the clients, I do
get the username/password prompt at the FTP site.

Thanks again!

Thanks again.
Thanks

Re: Firewall Client/Proxy Server Question by compsosinc

compsosinc
Mon Dec 03 16:06:37 PST 2007

On Dec 3, 6:00 pm, compsos...@gmail.com wrote:
> On Dec 3, 5:40 pm, Duncan McC <h...@work.ok> wrote:
>
>
>
>
>
> > In article <5879588e-68f6-4621-b18d-a62291b7ac32
> > @l1g2000hsa.googlegroups.com>, compsos...@gmail.com says...
>
> > > On Dec 3, 1:38 pm, "Cris Hanna [SBS-MVP]"
> > > <crisnospamha...@cpunospamservices.net> wrote:
> > > > Well Unfortunately a while since I've worked on an SBS 2000 box
>
> > > > Are you currently running the Firewall Client and Proxy or just Proxy?
>
> > > > Are the users logged on to the domain vs the workstation?
>
> > > > --
> > > > Cris Hanna [SBS - MVP]
> > > > -----------------------------------------------------------
> > > > MVPs Do Not Work for Microsoft
> > > > Please do not contact me directly regarding issues <compsos...@gmail.com> wrote in messagenews:75c48aee-6329-498b-982a-5e737bda2f1c@w40g2000hsb.googlegroups.com...
>
> > > > On Dec 3, 12:53 pm, "Cris Hanna [SBS-MVP]" <crisnospamha...@cpunospamservices.net> wrote:
>
> > > > > There are many other programs you could possibly have installed that will look to IE's proxy settings
>
> > > > > Probably best to have both
>
> > > > > --
> > > > > Cris Hanna [SBS - MVP]
> > > > > -----------------------------------------------------------
> > > > > MVPs Do Not Work for Microsoft
> > > > > Please do not contact me directly regarding issues <compsos...@gmail.com> wrote in messagenews:0e13ef59-1d59-44b0-8770-d6d7b287c6c3@j20g2000hsi.googlegroups.com...
>
> > > > > We are using SBS2000 --with ISA Server 2000. We only have XP Clients.
> > > > > Is there any reason to have both the Firewall Client and the Proxy
> > > > > Server setting in Internet Explorer set to point to the ISA Server at
> > > > > port 8080? Or, is the the Firewall Client alone sufficient for
> > > > > Internet browsing? We think that setting the proxy setting is ony
> > > > > necessary if for some reason (such as the OS or browser in use) the
> > > > > Firewall Client cannot be installed.
>
> > > > > As it is now, we have both. However, periodically, but very
> > > > > infrequently, at random websites, the user is prompted for a username/
> > > > > password for the Proxy Server. If we remove the proxy settings, the
> > > > > prompts do not occur, but we sometimes get "page cannot be displayed"
> > > > > or similar error. We are not sure why we are prompted as the same
> > > > > webpage may or may not prompt the user?
>
> > > > > Thanks.
>
> > > > Ok, but what is typically the reason that while Internet Browsing, a
> > > > user is prompted for their Username/Password, when they have had no
> > > > previous problem browsing to the same webpage?? Also, entering the
> > > > username/password generally does not help the matter...
>
> > > > Thanks in advance..
>
> > > We are currently using both the Firewall Client and the Proxy Server
> > > and the workstations are logged into the domain, though I am trying to
> > > recall why we ever set the Proxy settings to begin with. Like I
> > > stated, the prompt for Username/Password happens very infrequently.
> > > However, when the user does get the prompt and we remove the proxy
> > > settings, the webpage displays fine. The same page may sometimes
> > > display fine with the proxy settings.Or, with proxy settings we
> > > sometimes get an error at the Windows Update site--but if removed we
> > > do not get an error.
>
> > > I guess we are just trying to determine which apps we use may need a
> > > proxy setting--do you have an example??
>
> > There are many apps that will use IE's proxy settings - can't think of
> > one off the top of my head though :)
>
> > I maintain one SBS 2000 network (changing this week to 2003), and I've
> > always used the (SBS) firewall client and proxy settings for ISA.
>
> > Of note, in SBS 2003 Premium (w' ISA Server) the SBS firewall client
> > actually has a new button that configures IE (sets the proxy settings
> > and installs a dll to run on start (of IE)). I think it's the later
> > that checks the proxy settings are set.
>
> > So yeah, it's meant to be that way.
>
> > Are the users members of the Internet group?
>
> > --
> > Duncan- Hide quoted text -
>
> > - Show quoted text -
>
> Thank you for the help. Yes, the Users are members of: "BackOffice
> Internet Users". Using both Firewall client & Proxy settings.
>
> In ISA Management, there was already an "Allow" Protocol Rule for "All
> IP Traffic" but I created a separate rule for just the FTP-related
> Protocol Definitions --did not work. I did restart the ISA Service to
> be sure & I had disabled any FTP IP Packet Filters.
>
> Note, if I enable the FTP Packet Filters, and attempt to go to the FTP
> site I am testing, from the Server itself I can get the FTP USername/
> Password prompt. At the users I get the HTTP Proxy 502 error
> concerning Logon failure (12015).
>
> So, if I add the login credentials to the FTP URL I can get to the FTP
> site from the client. Such as ftp://username:passw...@ftp.website.com.
> Why is this? So if I remove the Proxy settings from the clients, I do
> get the username/password prompt at the FTP site.
>
> Thanks again!
>
> Thanks again.
> Thanks- Hide quoted text -
>
> - Show quoted text -

Note: With Proxy settings and Firewall client installed, if I use
Windows Explorer, instead of IE7, I get the username/password prompt
as I would expect.

I have recently read that this is a problem with IE7, but not IE6???
In IE7 advanced properties, I have checked "enable FTP folder view"
and unchecked use "passive ftp". I have played with these settings in
differnet configurations but still does not work.

So I am now thinking that this is a problem with IE7. I have IE6 on my
server so maybe that is why IT is working??? I have no cliet with IE6.


Re: Firewall Client/Proxy Server Question by Duncan

Duncan
Wed Dec 05 13:05:59 PST 2007

In article <45601790-4ff0-4a05-8dbd-
eb73695d2d3c@d61g2000hsa.googlegroups.com>, compsosinc@gmail.com says...
> On Dec 3, 6:00 pm, compsos...@gmail.com wrote:
> > On Dec 3, 5:40 pm, Duncan McC <h...@work.ok> wrote:
> >
> >
> >
> >
> >
> > > In article <5879588e-68f6-4621-b18d-a62291b7ac32
> > > @l1g2000hsa.googlegroups.com>, compsos...@gmail.com says...
> >
> > > > On Dec 3, 1:38 pm, "Cris Hanna [SBS-MVP]"
> > > > <crisnospamha...@cpunospamservices.net> wrote:
> > > > > Well Unfortunately a while since I've worked on an SBS 2000 box
> >
> > > > > Are you currently running the Firewall Client and Proxy or just Proxy?
> >
> > > > > Are the users logged on to the domain vs the workstation?
> >
> > > > > --
> > > > > Cris Hanna [SBS - MVP]
> > > > > -----------------------------------------------------------
> > > > > MVPs Do Not Work for Microsoft
> > > > > Please do not contact me directly regarding issues <compsos...@gmail.com> wrote in messagenews:75c48aee-6329-498b-982a-5e737bda2f1c@w40g2000hsb.googlegroups.com...
> >
> > > > > On Dec 3, 12:53 pm, "Cris Hanna [SBS-MVP]" <crisnospamha...@cpunospamservices.net> wrote:
> >
> > > > > > There are many other programs you could possibly have installed that will look to IE's proxy settings
> >
> > > > > > Probably best to have both
> >
> > > > > > --
> > > > > > Cris Hanna [SBS - MVP]
> > > > > > -----------------------------------------------------------
> > > > > > MVPs Do Not Work for Microsoft
> > > > > > Please do not contact me directly regarding issues <compsos...@gmail.com> wrote in messagenews:0e13ef59-1d59-44b0-8770-d6d7b287c6c3@j20g2000hsi.googlegroups.com...
> >
> > > > > > We are using SBS2000 --with ISA Server 2000. We only have XP Clients.
> > > > > > Is there any reason to have both the Firewall Client and the Proxy
> > > > > > Server setting in Internet Explorer set to point to the ISA Server at
> > > > > > port 8080? Or, is the the Firewall Client alone sufficient for
> > > > > > Internet browsing? We think that setting the proxy setting is ony
> > > > > > necessary if for some reason (such as the OS or browser in use) the
> > > > > > Firewall Client cannot be installed.
> >
> > > > > > As it is now, we have both. However, periodically, but very
> > > > > > infrequently, at random websites, the user is prompted for a username/
> > > > > > password for the Proxy Server. If we remove the proxy settings, the
> > > > > > prompts do not occur, but we sometimes get "page cannot be displayed"
> > > > > > or similar error. We are not sure why we are prompted as the same
> > > > > > webpage may or may not prompt the user?
> >
> > > > > > Thanks.
> >
> > > > > Ok, but what is typically the reason that while Internet Browsing, a
> > > > > user is prompted for their Username/Password, when they have had no
> > > > > previous problem browsing to the same webpage?? Also, entering the
> > > > > username/password generally does not help the matter...
> >
> > > > > Thanks in advance..
> >
> > > > We are currently using both the Firewall Client and the Proxy Server
> > > > and the workstations are logged into the domain, though I am trying to
> > > > recall why we ever set the Proxy settings to begin with. Like I
> > > > stated, the prompt for Username/Password happens very infrequently.
> > > > However, when the user does get the prompt and we remove the proxy
> > > > settings, the webpage displays fine. The same page may sometimes
> > > > display fine with the proxy settings.Or, with proxy settings we
> > > > sometimes get an error at the Windows Update site--but if removed we
> > > > do not get an error.
> >
> > > > I guess we are just trying to determine which apps we use may need a
> > > > proxy setting--do you have an example??
> >
> > > There are many apps that will use IE's proxy settings - can't think of
> > > one off the top of my head though :)
> >
> > > I maintain one SBS 2000 network (changing this week to 2003), and I've
> > > always used the (SBS) firewall client and proxy settings for ISA.
> >
> > > Of note, in SBS 2003 Premium (w' ISA Server) the SBS firewall client
> > > actually has a new button that configures IE (sets the proxy settings
> > > and installs a dll to run on start (of IE)). I think it's the later
> > > that checks the proxy settings are set.
> >
> > > So yeah, it's meant to be that way.
> >
> > > Are the users members of the Internet group?
> >
> > > --
> > > Duncan- Hide quoted text -
> >
> > > - Show quoted text -
> >
> > Thank you for the help. Yes, the Users are members of: "BackOffice
> > Internet Users". Using both Firewall client & Proxy settings.
> >
> > In ISA Management, there was already an "Allow" Protocol Rule for "All
> > IP Traffic" but I created a separate rule for just the FTP-related
> > Protocol Definitions --did not work. I did restart the ISA Service to
> > be sure & I had disabled any FTP IP Packet Filters.
> >
> > Note, if I enable the FTP Packet Filters, and attempt to go to the FTP
> > site I am testing, from the Server itself I can get the FTP USername/
> > Password prompt. At the users I get the HTTP Proxy 502 error
> > concerning Logon failure (12015).
> >
> > So, if I add the login credentials to the FTP URL I can get to the FTP
> > site from the client. Such as ftp://username:passw...@ftp.website.com.
> > Why is this? So if I remove the Proxy settings from the clients, I do
> > get the username/password prompt at the FTP site.
> >
> > Thanks again!
> >
> > Thanks again.
> > Thanks- Hide quoted text -
> >
> > - Show quoted text -
>
> Note: With Proxy settings and Firewall client installed, if I use
> Windows Explorer, instead of IE7, I get the username/password prompt
> as I would expect.
>
> I have recently read that this is a problem with IE7, but not IE6???
> In IE7 advanced properties, I have checked "enable FTP folder view"
> and unchecked use "passive ftp". I have played with these settings in
> differnet configurations but still does not work.
>
> So I am now thinking that this is a problem with IE7. I have IE6 on my
> server so maybe that is why IT is working??? I have no cliet with IE6.
>

Haven't had any probs using FTP from IE6 or & myself.

An easy way to config ISA for FTP is use the ICW (Internet Connection
Wizard) - and don't change anything but the ISA filters, tick the FTP
options (amoung your other options), and you should have access.

NB: you'll need to config any othe custom ISA filter via ISA management
itself - as the wizard will leave them there, but turn them off (ie
you'll need to turn back on any custom filters).


--
Duncan