Enable HTTPS-HTTP Bridging on the TS Gateway

Open TS Gateway Manager.

In the TS Gateway Manager console tree, right click to the TS Gateway server, click Properties.

On the SSL Bridging tab, select the Use HTTPS-HTTP bridging check box, click OK.

A warning message will appear, stating that for the SSL bridging settings to take effect, you must recycle the default application pool of IIS. If you want to recycle the default application pool now click Yes. To recycle the default application pool manually later, click No.

ISA Server Configuration for TS Gateway

http://technet.microsoft.com/en-us/library/cc731353.aspx

Read more...

Block Conficker Script ISA 2004 & ISA 2006

Download the script file from the link above.

Block_Conficker_Script

Execute on the server that ISA server installed by double clicking the file.

New HTTP signatures will be automaticly created.



Read more...

Block Skype on ISA 2006 & ISA 2004

There is a research from Columbia University about Skype Blocking.
http://www1.cs.columbia.edu/~library/TR-repository/reports/reports-2004/cucs-039-04.pdf

By preventing all protocols access to 80.160.91.11 (Skype Auth Server), you can Block Skype.
Read more...

Configuring sqlsrvr.exe process memory usage on ISA server

If sqlsrvr.exe process is using huge amount of memory you can follow steps below to limit memory for this process.
Install SQL Server Management Console on ISA Server then;

Execute the following command on Management Studio;

EXEC sp_configure 'max server memory (MB)', 1024 \\ Memory in MB

USE master
EXEC sp_configure 'show advanced options', 1
RECONFIGURE WITH OVERRIDE

USE master
EXEC sp_configure 'max server memory (MB)',1024

USE master
EXEC sp_configure 'show advanced options', 0
RECONFIGURE WITH OVERRIDE

Read more...

ISA Server HTTP Status Code of 12202

ISA Server denied access through destination port 8080

By default Web Proxy filters are using 80 (HTTP), 443 (HTTPS) and 563 (NTP)


HKEY_LOCAL_MACHINE\IsaStg_Eff1Policy\WebProxy\Proxy-TunnelPortRanges

You can get "ISA Server tunnel port tool" from "isatools.org" to create custom port ranges. Run the script from your ISA Server and follow the instructions to create a new port binding. After doing this create a custom protocol with TCP 8080 outgoing and add it to your Allow Internet access rule.

Read more...

ISA Server 2004 2006 Block Script Injection

To block a script injection we will use 2 signatures.

First Signature;

Right Click to your Access Rule and Choose "Configure HTTP". Choose signature tab from the new window.


Click Add Button. Enter the New Signatuer name (it can be whatever you want) . Choose "Request URL" from Signature Search Criteria.


In the signature part type "<" (except quotas). Click OK and Apply.





Second Signature;





Open signature tab again. Fill the parts same as the first signature except signature part. This time write ">" (Except Quotas). Click OK and Apply.






Read more...

ISA Server 2006 Block File and Form Upload

Right Click to your Access Rule and Choose "Configure HTTP". Choose signature tab from the new window.

Click Add Button. Enter the New Signatuer name (it can be whatever you want) . Choose "Request Headers" in Signature Search Criteria.

Type "Content-Type:" (except quotas) to HTTP header line.
Type "multipart/form-data" (except quotas) to signature .
Click OK and Apply.




Read more...

ISA Server Error Code 502

If you are using ISA 2006 and getting Error Code 502 try the solution below.


The page cannot be displayed
There is a problem with the page you are trying to reach and it cannot be displayed.
Technical Information (for support personnel)
Error Code: 502 Proxy Error.
The HTTP message includes an unsupported header or an unsupported combination of headers. (12156)

The event that can cause to this problem is HTTP header that begins with a space or with a TAB character space.

To solve this issue.

Change the registry key stated below value to 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RAT\Stingray\Debug\Web FiltersValue DROP_CONTINUATION_LINES
Read more...