Troubleshooting - checking the CSP (ISA server)

book

Article ID: 178316

calendar_today

Updated On:

Products

Web Security.cloud

Issue/Introduction

 

Resolution

Troubleshooting - checking the CSP (ISA server)

The three main issues that may occur with the Client Site Proxy for ISA server are:

  • The CSP ISA plug-in does not have any custom logs within ISA.

    The best way to check that the CSP works correctly is with two policy rules in the portal.

    See Troubleshooting - testing the Client Site Proxy with web Security policy rules.

  • To see the standard ISA server logs:

    1. Start the ISA server administration console.

    2. In the left pane, select Monitoring.

    3. In the right pane, select Start Query or Edit Query as necessary.

    You can now see queries to the ISA firewall.

  • ISA server cannot contact upstream proxy

    The cause may be network issues or firewall rules on the local ISA server or (if the ISA server is not the edge device) on the edge firewall.

    Example client error (displayed in web browser ):

                        
    Network Access Message: The page cannot be displayed 
                        
    Explanation: The request timed out before the page could be retrieved.
                        
    Try the following:
    Refresh page: Search for the page again by clicking the Refresh button. 
    The timeout may have occurred due to Internet congestion.
    Check spelling: Check that you typed the web page address correctly. 
    The address may have been mistyped.
    Contact website: You may want to contact the website administrator to 
    make sure the web page still exists. You can do this by using the e-mail 
    address or phone number listed on the website home page.
    If you are still not able to view the requested page, try contacting 
    your administrator or Helpdesk.
                        
    Technical Information (for support personnel)
    Error Code 10060: Connection timeout
    Background: The gateway could not receive a timely response from the 
    website you are trying to access. This might indicate that the network 
    is congested, or that the website is experiencing technical difficulties.
    Date: 3/10/2006 1:34:34 a.m.
    Server: fw.Company.local
    Source: Firewall
                        
    

See Troubleshooting - testing the Client Site Proxy with web Security policy rules