Hello everyone!

 

I upgraded our ISA 2000 to ISA 2004 via the upgrade discs from Microsoft. Everything seemed to go ok until I ran the CEICW. IT gives me an error when it tries to configure the firewall and the secure website config. Initially the Web Proxy wouldn't bind to port 8080, so we couldnt get on the net. But I quickly figured out that another service was using that port. Once I stopped that service the Web Proxy configured successfully and we can acess the internet and everything works great except there is no RWW. I can access the RWW is I type "servername.domain.local" internally, but if I type the servers external IP or "servername.domain.com" outside of our network I get a "This page cannot be displayed" error. I am not too familiar with ISA 2004, but just by looking at the interface I can tell the upgrade will be worth it once I get these errors corrected. Any suggestions? There are no errors in the ISA 2004 events at this time.

I checked the ICW log and here are the errors I found:

 

4/15/2006 5:00 PM
Firewall Rule: SBS DHCP Client
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS HTTP 80 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS FTP 20 In CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS FTP 20 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS POP3 110 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS NTP 123 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS DnsLookupPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS IcmpPingQueryPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS IdentdPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS TS 3389 In CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS TS 3389 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS PptpReceivePredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS PptpCallPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS FTP 21 In CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS FTP 21 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS SMTP 25 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS SmtpPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS NNTP 119 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS Remote Web Workplace CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS NTP 123 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business RPC over HTTP Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Business Card Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business CompanyWeb Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business TSWEB Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business RUP Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Monitoring Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business OMA Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business OWA Web Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Web Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Server All Users Protocol Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Internet Access Protocol Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Internet Access Protocol Rule 2
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Server Internet Access Site and Content Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Server Internet Access Site and Content Rule 2
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Server All Users Site and Content Rule
Cannot find the firewall rule, ignoring the error
Call to Removing ISA2k related firewall rules () returned ok.
Custom protocol name: SBS FTP 20 In CustomFilter
Cannot find the custom protocol, ignoring the error
Custom protocol name: SBS FTP 20 Out CustomFilter
Cannot find the custom protocol, ignoring the error
Custom protocol name: SBS NTP 123 Out CustomFilter
Cannot find the custom protocol, ignoring the error
Custom protocol name: SBS Remote Web Workplace CustomFilter
Cannot find the custom protocol, ignoring the error

 

?

This fix seems to have fixed the errors and the CEICW finished properly:

 

Go to the IP Address and Domain Name Restrictions setting and change the setting. (Just do the opposite of what is set). If currently set to grant all, change it to deny all except for the local IP and subnet mask of the server.

Select all to apply the change to all sub webs.

Select all again to apply the change all the way down.

Running the CEICW now should be successful.

Based on your input, it will reset the IP and domain name restrictions accordingly.

Confirm that the IP and domain name restrictions are back to where they should be

 

However, I am still getting a 403 error when trying to access RWW externally. Any ideas?

Forget it, I am such a $^#^#$%^!!!! Now that I have ISA 2004 I have to add \Remote to the end of the URL! I am going to sit in the corner with my dunce cap for a while now. Thanks...

Nah, that's just one of those "Smack yourself on the back of the head" moments. We all do that on occasion and the busier we get, the more often it presents itself.

 

You got it running so therefore  "It's Fixed"

 

Jay

Jonathan is going to be a 'subject' in my next newsletter