Maybe the answer to my question is already posted on this forum, but I couldn't find it ... .

Prior to installing isa server 2004 on an sbs premium edition, I installed Trenmicro SMB 3.0.

Trend worked perfectly, no problems at all.

I installed the clients through https://servername.domain.local:4343/smb

That worked just fine till ... I installed ISA 2004.

 

With isa enabled, I get this error:

Network Access Message: The page cannot be displayed
 
Technical Information (for Support personnel)
Error Code: 502 Proxy Error. The specified Secure Sockets Layer (SSL) port is not allowed. ISA Server is not configured to allow SSL requests from this port. Most Web browsers use port 443 for SSL requests. (12204)
IP Address: 192.168.16.2
Date: 14/05/2006 8:43:39

 

I added a rule on isa to allow port 4343 and 8080 internally, still no luck...

The live logging gives 'failed connection attempt' on destination port 4343

port 8080 seems to pass fine.

 

Can somebody give me some help on how to get the thing working again please?

You should not install Trend with SSL, there is really no need for that. ISA 2004 does not allow SSL traffic on non-standard SSL ports like 4343. If you want to add 4343 you need to have a look at this article: Blank page or page cannot be displayed when you view SSL sites through ISA Server: http://support.microsoft.com/default.aspx?scid=kb;en-us;283284

Hi,

 

You could also use the ISA Server 2004 Tunnel Port Editor found on following article:

 

You can download the tool from: http://www.isatools.org/ISAtrpe.zip

 

Have fun.

 

thx for the answers!

I tried the tool from isaserver.org. I added port 4343 to that port, and also an outbound rule for that port, still no luck ...

 

Network Access Message: The page cannot be displayed
 
Technical Information (for Support personnel)
Error Code: 502 Proxy Error. Connection refused(10061)
IP Address: 195.162.*.*
Date: 14/05/2006 17:17:17
Server: server.domain.local
Source: proxy

 

This is on the sbs server itself (with isa) when I try to connect to the security dashboard:

https://server.domain.local:4343/officescan/default_SMB.htm
 
So it looks like still no luck ... is there anything else I need to change?

In Internet Explorer try to go to Tools - Internet Options - Connections - Lan Settings - Advanced and remove your proxy server name from SSL protocol.

Thanks for the tip Vladimir!

It works when I add the https:// in the 'do not use proxy server for addresses that begin with ...'

Just bypass proxy server for local addresses should also work?

But adding the site to trusted sites will do too?