Download and Save As problems
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
Download and Save As problems - 10.Dec.2008 6:39:51 AM
|
|
|
fjnevado
Posts: 8
Joined: 10.Dec.2008
Status: offline
|
Hi There,
At first time, appologies for my english...
I've installed wm4 in a ISA 4 Server and when i try to download a internet file, appears a message with a "Save As" option, but i can't download it.
I've read forum, and i've found many configurations to do, but the problem continue, appears a message from the ISA Server "502 error".
I'm follow the steps in the article ID KBID003453, and KBID003095. I've included in GFI GUI ACCESS tabs "FROM" and "TO", the "LocalHost" and "Internal" nets, but i'cant resolve the 502 error.
In the ISA logs, there are drop connections with this url http://127.0.0.1:1007/ I've included a new protocol with this port (1007) but with the same problem.
Please, could anyone give me a solution?
Thanks
|
|
|
|
|
RE: Download and Save As problems - 10.Dec.2008 8:05:30 AM
|
|
|
davidf
Posts: 143
Joined: 29.Jul.2003
Status: offline
|
Hi,
When you click "Save to disk" in DownloadStatus windows (which is partially same file as file DownloadingPage.html found in main WebMonitor directory), POST request is made to same URL as was download made from.
When WebMonitor "sitting" in ISA server see this POST request it knows from its parameters that this request should be served from WebMonitor as this request was scanned and cached by it.
So what happens next is that WebMonitor ISA plugin redirects request to http://127.0.0.1:1007/POSTF.aspx page which based on POST parameters serves downloaded file.
1.st try on ISA server to do direct access for http://127.0.0.1:1007/POSTF.aspx
You should see "Wrong or expired post request" ....
2.nd: try on ISA server to do direct access for http://monitor.isa/POSTF.aspx
You should see same result... difference is that one is directly accessing resource and one is testing redirection which should happen on ISA server by WebMonitor plug-in.
Let me know result so we can progress with solving your problem.
With Kind Regards DavidF.
|
|
|
|
|
RE: Download and Save As problems - 10.Dec.2008 10:13:32 AM
|
|
|
fjnevado
Posts: 8
Joined: 10.Dec.2008
Status: offline
|
Hi David,
With the first URL (http://127.0.0.1) appear the next text:
Wrong or expired post request.
Most likely your download was scanned long time ago and expired, please re-download it again.
With the second URL (using plugin), appear a ISA HTML page, with error code (11001).
Thanks in advanced.
Best regards,
Javier
|
|
|
|
|
RE: Download and Save As problems - 10.Dec.2008 11:22:06 AM
|
|
|
davidf
Posts: 143
Joined: 29.Jul.2003
Status: offline
|
so that confirms redirection is not taking place by WM ISAplug-in.
You mentioned that you tried http://kbase.gfi.com/showarticle.asp?id=KBID003453
If you changed those fields ( necessary only and only if you are using more than 1 ISA server)
most probably you missconfigured them...
What is your ISAServerUniqueID string from DownloadingPage.html ?
With Kind Regards DavidF.
|
|
|
|
|
RE: Download and Save As problems - 10.Dec.2008 12:00:19 PM
|
|
|
fjnevado
Posts: 8
Joined: 10.Dec.2008
Status: offline
|
Hi David,
We have two ISA Server Standard. One of them has WebMon, and use it as Proxy_Isa, the other one, is only to redirect connections between DMZ Nets.
At this moment, the ISAServerUniqueID has "GateWayXWM4X1" same as value in "POSTF.aspx".
I'm not sure, but port 1007 should be open in ISA Server...
I've tried so many configurations that do not do that. Thanks again,Javier
|
|
|
|
|
RE: Download and Save As problems - 11.Dec.2008 3:45:25 AM
|
|
|
davidf
Posts: 143
Joined: 29.Jul.2003
Status: offline
|
Make sure when changing ISAServerUniqueID to restart firewall service afterwards necessary when you change it in downloadingpage.html.
You dont need to open 1007 port.. as it should not be visible from LAN or outside due to security reasons. This has to be done as internal ISA redirection only. Rule: "GFI WebMonitor GUI Access" should enable from:"Internal" "Local Host" to "Local Host" this redirection. Protocol shoudl be visible as http even with different port number ... at least from our experience it works this way.
Next logical step in support of your issue is to get webmonplglog.txt (loging file from WM ISA plug-in webmonplg.dll) from time when you accessed http://monitor.isa/POSTF.aspx send it to GFI support and ask to send copy to davidf please.
Regards DavidF.
|
|
|
|
|
RE: Download and Save As problems - 11.Dec.2008 6:50:52 AM
|
|
|
fjnevado
Posts: 8
Joined: 10.Dec.2008
Status: offline
|
Hi David,
Whenever I have changed the value, I've restarted the service FireWall of the ISA.
Could you indicate me, which the path of the webmonplglog.txt file? I've done a search around the disk and can't find it.
Otherwise, the Rule "GFI WebMonitor GUI Access" has the FROM with "Local Host" and "Internal", in the TO "Local Host".
Best regards,
Javier
|
|
|
|
|
RE: Download and Save As problems - 11.Dec.2008 7:54:44 AM
|
|
|
davidf
Posts: 143
Joined: 29.Jul.2003
Status: offline
|
You need to switch on debug on first and restart firewall service.
Then you will find that file in DebugLogs directory.
To switch on Debug Logging change registry value ...SOFTWARE-GFI-WebMonitor debug- DWORD value by default set to 0 change it to 1.
Dont forget to switch it off after testing... as debug mode slows down network.
|
|
|
|
|
RE: Download and Save As problems - 11.Dec.2008 9:04:17 AM
|
|
|
fjnevado
Posts: 8
Joined: 10.Dec.2008
Status: offline
|
Hi David,
I have a zip file with webmonplglog.txt file, but i can't send you because we don't have an UserId. We have an evaluation license.
Please could you send a email to send zip file?
Thanks,
Javier
|
|
|
|
|
RE: Download and Save As problems - 11.Dec.2008 10:08:20 AM
|
|
|
davidf
Posts: 143
Joined: 29.Jul.2003
Status: offline
|
We will send you email to your email address registered for this forum.
|
|
|
|
|
RE: Download and Save As problems - 12.Dec.2008 4:33:35 AM
|
|
|
davidf
Posts: 143
Joined: 29.Jul.2003
Status: offline
|
Hola,
I checked your logs passed to me by our support team and:
I can see monitor.isa beeing redirected correctly to local website of WebMonitor:
14:29:59 450634240 Preproc header Redirection to server
14:29:59 450634240 Set redirection Host: |127.0.0.1:1007|
14:29:59 450634240 monitor.isa redirecting URL |http://monitor.isa/|
14:29:59 450634240 monitor.isa redirected URL |http://127.0.0.1:1007/|
However reply data from ISA is:
14:29:59 ALL header collected.size:274 first 30 characters of object :HTTP/1.1 502 Proxy Error ( El
14:29:59 450634240 HTTP status code resoved as:502
This means ISA denied or failed to resolve this request further.
It seems that your OS is not english... and our support knows about possible issue on ISA on spanish and other non english ISA/OS versions:
When WM4.1 is installed on non english ISA/OS it seems to fail create ISA's network object default "URL Sets" named "WebMonitor update server" and maybe also "GFI WebMonitor Update access" rules and "GFI WebMonitor GUI access".
Please let me know if you had to create these yourself manually after installation.
Make sure you will pass "GFI WebMonitor GUI access" rule as your first rule.
Also try add to this rule to "TO" tab apart of localhost also new url set with "http://127.0.0.1:1007" URL.
Let me know how it goes... and also if you can enable all details for ISA loging and send me log entry where you see drop connections with http://127.0.0.1:1007/
Thank You.
|
|
|
|
|
RE: Download and Save As problems - 12.Dec.2008 4:36:37 AM
|
|
|
davidf
Posts: 143
Joined: 29.Jul.2003
Status: offline
|
Also let me know if you have any other 3rd party ISA plug-ins installed.
|
|
|
|
|
RE: Download and Save As problems - 12.Dec.2008 7:31:59 AM
|
|
|
fjnevado
Posts: 8
Joined: 10.Dec.2008
Status: offline
|
Hi David,
These is the WebMon configuration in ISA Server:
First Rule - "GFI WebMonitor GUI Access" "Allow" "HTTP / HTTPs" FROM(Local Host/Internal) TO (Local Host/http://127.0.0.1:1007)
Second Rule - "GFI WebMonitor Updates Access" "Allow" "HTTP / HTTPs" FROM(Blank) TO(http://*.gif.com)
I've modified the first rule, because, the installation doesn't included protocols (HTTP/HTTPs) and no references in "FROM" and "TO" options.
I've included the URL http://127.0.0.1:1007 and restarted FireWall service, and still doesn't work.
I'm generating the log file to send Arielle. Note that we do not have installed more plug-in.
Best regards,
Javier
|
|
|
|
|
RE: Download and Save As problems - 12.Dec.2008 7:49:18 AM
|
|
|
davidf
Posts: 143
Joined: 29.Jul.2003
Status: offline
|
Is "GFI WebMonitor GUI access" rule first in Firewall Policy?
Maybe just for test would be good to create rule which enables everything from all networks to all networks for all protocols and place it above all rules...
This would tell us if its policy problem or some routing problem.
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
RE: Download and Save As problems - 
Regards,Javier