Elicensing and ISA proxy server

Hello
Our organization uses Micrsoft ISA server to secure port 80 traffic. If we choose to have Adobe host our licensing service will this work with ISA. Does it pick up the IE proxy settings or can you specify this somewhere in the client configuration file.
thanks Daron

The license manager component embedded into Acrobat 8 picks up the IE proxy settings, so it should work fine without any settings in the Client Setup file (also know as configuration file or just Adobeconfig.xml)
Make sure to follow the instructions in the "Configuring Acrobat 8 with ALM" document to prepare your installation image. The document is available at: http://www.adobe.com/elicensing/licensemanagement/alm/pdfs/ConfiguringAdobeAcrobat8withAL M_EN.pdf

Similar Messages

Update fails behind a MS ISA proxy server

We have all our clients behind a MS ISA proxy server. When
Flash player tries to update itself, or when you try to install it
from the download site, a network connection for the update times
out over and over. The only way to get around this has been to set
the configuration on the ISA server so that the workstation is
allowed to use anonymous authentication through the ISA server.
This is a royal pain in the neck and not something I can leave
configured for 60+ users. Anyone know of a fix or work around for
this? Even downloading the installer through a browser other than
IE and installing it doesn't seem to install the whole player.
Thanks in advance!
ML

Hum,
I've got the same problem with any kind of proxies.
And this is not news. Every other apple apps use the proxy config, but not mail since Tiger.
Why?
There is an ugly method by using some proxifier to open outgoing ssh tunnel, but, as i said, that's ugly and this solution needs to have an access to SSH server.
so, UP

Web Clipping proxy error with ISA Proxy server

hi
i'm trying to prepare web clipping in portal .
and fill in http proxy in webclipping test page option like this:
HTTP Proxy: isa.sazehgostar.com(fill in http proxy in internet option,with port 8080 )
port :8080
Requires Authentication:yes
type :Basic
Realm:sazehgostar.com (our domain name)
my username:474
my password :.....
but when i trying to connect to http://www.yahoo.com i get this error message:
An exception has occurred : oracle.portal.wcs.transport.http.HttpTransportException WCS-519 -- HTTP Proxy Authentication failed for proxy isa.sazehgostar.com:8080 with authentication of type "Basic" at realm "sazehgostar.com". Update your proxy login information in the Edit Defaults / Personalize page to
authenticate.
but my username and password is correct.
our application server is 10.2.
and oracle portal 10.1.2 that upgrade to 10.1.4
and our proxy server is isa server

I have the same problem with isa server.
Did you sovle it?

Give me description about JAVA Proxy Runtime and JAVA Proxy Server

Give me description about JAVA Proxy Runtime and JAVA Proxy Server with some examples.

Hi,
Java proxy runtime :
Using the Java proxy runtime you can receive messages or send messages to the Integration Server.
This will help you
http://help.sap.com/saphelp_nw04/helpdata/en/64/7e5e3c754e476ee10000000a11405a/frameset.htm
Java proxy server :
The connection to the Integration Server by using the Java proxy runtime.
This will help you
http://help.sap.com/saphelp_nw04/helpdata/en/87/5305adc23540b8ac7bce08dbe96bd5/frameset.htm
Regards
Agasthuri Doss

HTTPS and a Proxy server?

Does the plugin-in still not work with HTTPS and a proxy server?
From plug-in docs -
"Java Plug-in supports http, ftp, gopher and SOCKS v4 protocols through the proxy server. Currently, Java Plug-in does not support https (SSL). "

Hello
I am making HTTPS calls from within my applet code and this works fine using the basic Java Plug-in support for HTTPS.
This means my code basically does:
URL url = new URL("https://myhost.com/servlet/Test");
URLConnection conn = url.openConnection();
etc..
We are using Java 1.4.2. I've read in the "How HTTPS Works in Java Plug-in" for 1.3, that the plugin uses the browsers API for making HTTPS connections. Is this still the case for 1.4?
My basic problem is that it all works fine if the browser is NOT configured to use a proxy server. If a proxy server is configured we get the following Exception in the client:
java.io.IOException: Unable to tunnel through proxy. Proxy returns "HTTP/1.1 400 Bad Request ( The data is invalid. )"
I have read that "Sun's Java Secure Socket Extension (JSSE) library allows you to access a secure Web server from behind a firewall via proxy tunnelling. However, JSSE expects the proxy's reply to the tunnelling request to begin with "HTTP 1.0"; otherwise, it throws an IOException" (http://www.javaworld.com/javatips/jw-javatip111_p.html)
The article talks about using the JSSE library but it seems to be assuming the client is an application not an applet.
How do I use JSSE from within an applet if all the proxy information I seem to need to set in the JSSE code is held by the browser?
Will JSSE support proxies returning responses beginning HTTP 1.1 in the future?
Any help on this would be greatly appreciated.
Many thanks
mark

"Setting up ISA Proxy Server" White Paper

Hello
I'd like to receive this white paper "Setting up ISA Proxy Server" as mentionned in "SAP_BPC_70_SP03_M_Install.pdf" guide.
Can someone send it to me ?
Thanks

You can find the Microsoft ISA Server whitepapers here:
[http://www.microsoft.com/forefront/edgesecurity/isaserver/en/us/white-papers.aspx|http://www.microsoft.com/forefront/edgesecurity/isaserver/en/us/white-papers.aspx]
SAP also has a blog on ISA Servers here:
[/people/kishor.gopinathan/blog/2008/07/12/isa-server-as-reverse-proxy-for-sap-applications|/people/kishor.gopinathan/blog/2008/07/12/isa-server-as-reverse-proxy-for-sap-applications]

ASA DMZ zone and Unix proxy server

Hi.
i have router which all nat translation done at here. i have a asa and core sw.
192.168.1930.0/24 subnet my user and some server are located at this subnet. this subnet created at core sw.
int vlan 393
ip address 192.168.193.1 255.255.255.0
core sw connected to asa inside interface.asa inside interface ip 172.30.30.1 and at core sw site this port access vlan 8 which is
int vlan 8
ip address 172.30.30.2
at core sw at i have a default route to asa.
ip route 0.0.0.0 0.0.0.0 172.30.30.1
and asa site
route inside 192.168.193.0 255.255.255.0 172.30.30.2
all of them are ok.
i think that is ok.
at asa i have dmz zone which ip address:
interface Ethernet0/1
description connect to CoreSW
nameif inside
security-level 100
ip address 172.30.30.1 255.255.255.0 standby 172.30.30.3
interface Ethernet0/2
description DMZ zone connect mail server
nameif DMZ
security-level 50
ip address 172.16.10.1 255.255.255.0 standby 172.16.10.2
my proxy server inside interface connected to asa dmz zone and ip address 172.16.10.254 and outside interface is connected asa outside site which mean that is same subnet of asa outside interface which is 10.0.0.254 and then 10.0.0.254 i do static nat at router. i have no problem at nat translation.
i want my 192.168.193.0 subnet pass througth from proxy when this subnet want to connet internet.
i wrote
static (inside,DMZ) 192.168.193.0 192.168.193.0 netmask 255.255.255.0
and access-list
access-list from_dmz_to_in extended permit ip host 172.16.10.254 any
access-group from_dmz_to_in in interface DMZ
at this time what is up?
the user can not access internet and what i do? i wrote proxy server inside ip and default port 3128 at user internet explorer properties.
internet explorerr--tools-properties-connection-lan settting and show there 172.16.10.254 and port 3128.
at this time my user connect internet when i wrote this. when i remove this they can not connect internet
but i do not want write anything at my user. how i solved this?
after that one problem occur.
when my server to do nslookup it can not work.
i thnik that it is true because we have only one port 3128 is open and my server need udp 53.so it can not work
how i solve this issue?
as you see my access-list all of is open and i do
static (inside,DMZ) 192.168.193.0 192.168.193.0 netmask 255.255.255.0
it is this wrong proxy connection???
musti change proxy server inside interface to other device or asa other interface?
thanks.

There is 2 way the proxy server can work, ie: either transparent or explicit proxy.
From your explaination, explicit proxy works just fine when you configure the proxy settings on your browser.
The reason why transparent proxy does not work is because:
1) When user browser connects to the Internet, the ASA default gateway is via the outside interface, that is why the Internet traffic is not being routed transparently towards your proxy server which is connected to the DMZ interface.
The static NAT statement configured on the ASA does not perform redirection. If you would like to transparently route the internet traffic towards the proxy server on DMZ, you would need to route the traffic towards the proxy server. With the current topology that you have, it is not achievable on the ASA. ASA does not support Policy Based Routing, nor it supports WCCP when the user and the proxy server is on different interfaces.
2) Also need to find out if the proxy server itself supports transparent proxy.
Otherwise, since explicit proxy works, why don't you just push the proxy settings to the browser via Active Directory Group Policy?

Web Clipping proxy error ISA proxy server

hi everybody.
help me please
i'm using web clipping in portal .Our proxy server is ISA server.
http proxy in webclipping test page option like this:
HTTP Proxy: webproxy.domain.ru
port :8080
Requires Authentication:yes
type :Basic
Realm:domain.com (our domain name)
my username:domain\user1
my password :***
but when i trying to connect to http://www.blabla.com i get this error message:
An exception has occurred : oracle.portal.wcs.transport.http.HttpTransportException WCS-519 -- HTTP Proxy Authentication failed for proxy webproxy.domain.ru:8080 with authentication of type "Basic" at realm "domain.ru". Update your proxy login information in the Edit Defaults / Personalize page to
authenticate.
in isa server logs we can see that webclipping try to authenticate as anonimous
my username and password is correct.
application server is 10.2.
oracle portal 10.1.2 that upgrade to 10.1.4
Edited by: user12104721 on Nov 29, 2010 2:47 AM

I have the same problem with isa server.
Did you sovle it?

Isa Proxy Server 2004 replacement for Windows Server 2012 Essential R2

Good evening everyone. I am searching for a replacement for our proxy/firewall server which is ISA Server 2004. At present, we have Windows Server 2003 Premium and ISA Server 2004. As we know already, these two already expires their life cycle as per Microsoft. So, can you please help me to find a solution for this? WS 2003 Premium will be replaced by Windows Server 2012 R2 Essential.
Thank you very much.
This topic first appeared in the Spiceworks Community

Good evening everyone. I am searching for a replacement for our proxy/firewall server which is ISA Server 2004. At present, we have Windows Server 2003 Premium and ISA Server 2004. As we know already, these two already expires their life cycle as per Microsoft. So, can you please help me to find a solution for this? WS 2003 Premium will be replaced by Windows Server 2012 R2 Essential.
Thank you very much.
This topic first appeared in the Spiceworks Community

Safari 3.x (Leopard) and Web Proxy Server Problems:

I have a Squid proxy server running on Linux. Users web traffic is directed through it via WPAD server which hosts a simple PAC file. The PAC files is very clean and small. It basically points all external (Internet) web traffic to our Proxy server. All of our Windows, Linux and Tiger clients work fine. However, Leopard (Safari 3.x) doesn't work quite right. Here's what happens:
Mac user logs into a Leopard 10.5 Mac. User launches Safari and tries to go to an external (Internet) site. The WPAD server is contacted and the Mac User is prompted to authenticate to the Proxy server. This is totally normal behavior thus far. Then, however, every few minutes the Leopard Mac user will be prompted to authenticate again (sometimes 2 or 3 times in a row!). Firefox 2.0.x, when configured to use the WPAD/PAC server and Proxy server, works fine in Leopard. Only Safari 3 in Leopard is having the problem.
All the Macs (Tiger and Leopard) are configured to use the Proxy server via OS X's Network Pref Pane (using the "Automatic Proxy Configuaration"). Reminder: Tiger works fine (even with the Safari betas), but Leopard's doesnt not.
I have attached our PAC file inline below (some things edited for privacy):
// SIMR automatic configuration for Mozilla and friends
// $Id: wpad.dat,v 1.8 2005/12/14 20:18:23 dct Exp $
// Edit carefully, since many may be relying on this...
function FindProxyForURL(url, host) {
// Bypass the proxy for internal addresses
if (!url.match("http:")
|| url.match("http://127.0.")
|| url.match("http://10.")
|| url.match("http://192.168.")
|| isPlainHostName(host)
return "DIRECT";
// These are exceptions given in the IE config for Windows.
if (host == "www.ncbi.nlm.nih.gov"
|| host == "chabry.caltech.edu"
|| host == "flybase.bio.indiana.edu"
|| host == "www.fedex.com"
|| host == "domain.org"
return "DIRECT";
return "PROXY <proxy server>:8080";
}

I think I have a similar problem. I am a Mac connecting to an otherwise all PC school network.
A new location with all correct proxies has been set up. However, Safari always crashes on first attempt to negotiate its way through our server to the internet. Internet explorer gets through because in its preferences it is possible to include the name of the school domain as well as my user name and password.
We have been unable to find any way of including the domain name into Location in Network or into Safari.
However, once Internet Explorer has negotiated with the server I can launch Safari and it works as normal.
Safari/Network seems to lack this option of including a domain name that my PC server requires.
Make sense to anyone?
Worth mentioning that my copy of Internet Explorer (5.2) often crashes, but usually it has done its job by then. I quite like the concept of Internet Explorer sacrificing itself to clear a path for Safari.

HTTP tunneling and reverse proxy server

We're currently using Windows Media Services (WMS) to stream
video on our website. There is an option WMS to use the HTTP
protocol and to specify the port you'd like to use. This has
allowed us to stream video through our external firewall, through
our reverse proxy server, and through our internal firewall to our
media server. I've been trying for two days now to get Flash Media
Server (FMS) to do the same thing. For some reason the HTTP
tunneling (RTMPT) protocol doesn't appear to be acting like the
HTTP protocol that WMS is using. Anyone have some tips on this
configuration. I've scoured web resources and documentation as best
I could. Any help would be greatly appreciated.
Thanks.

To give a better picture, here's a more complete description of set up and goals
Static IP hits external interface of ASA. ASA has a static nat rule to forward it to my DMZ server.
DMZ server is running IIS 8. Here are what some of the sites look like.
jira.xxxxx.com -> 10.1.10.21 (ubuntu server) | port 80
email.xxxxx.com - > 10.1.10.16 (domain joined server 2012) port 80, 443
media.xxxxx.com -> 10.1.10.14 (domain joined server 2012) port 80, 443
other stuff like this -> 10.1.10.x port 80 or others
All of the A records for those domain names point to the static which routes to the ASA and then is NAT'd to the DMZ server.
What do I need to do in IIS to have those sites get directed to the proper internal locations?
Thanks!!

IMAPS and SMTPS proxy server

Hi,
I come from Germany. We use Lotus Domino in our enterprise. After evaluating Lotus Ultralite we would like to use a imaps/smtps proxy server for email access.
Normaly we would use a Cisco ASA, but there seems to be a problem/incompatility with the iPhone Mail client.
The mail account can be set up on the iPhone and is succesfully verified. But when I try to access my mails I only get an "server not found". The debug log on the ASA shows that the imap server reports an error and quits. I can access my mails with other mail clients like Apple Mail on 10.5.
So I am looking for an alternative. Which proxy server (soft- or hardware) can you recommend?

Hello
I am making HTTPS calls from within my applet code and this works fine using the basic Java Plug-in support for HTTPS.
This means my code basically does:
URL url = new URL("https://myhost.com/servlet/Test");
URLConnection conn = url.openConnection();
etc..
We are using Java 1.4.2. I've read in the "How HTTPS Works in Java Plug-in" for 1.3, that the plugin uses the browsers API for making HTTPS connections. Is this still the case for 1.4?
My basic problem is that it all works fine if the browser is NOT configured to use a proxy server. If a proxy server is configured we get the following Exception in the client:
java.io.IOException: Unable to tunnel through proxy. Proxy returns "HTTP/1.1 400 Bad Request ( The data is invalid. )"
I have read that "Sun's Java Secure Socket Extension (JSSE) library allows you to access a secure Web server from behind a firewall via proxy tunnelling. However, JSSE expects the proxy's reply to the tunnelling request to begin with "HTTP 1.0"; otherwise, it throws an IOException" (http://www.javaworld.com/javatips/jw-javatip111_p.html)
The article talks about using the JSSE library but it seems to be assuming the client is an application not an applet.
How do I use JSSE from within an applet if all the proxy information I seem to need to set in the JSSE code is held by the browser?
Will JSSE support proxies returning responses beginning HTTP 1.1 in the future?
Any help on this would be greatly appreciated.
Many thanks
mark

InPrivate Browsing and a Proxy Server

Is it possible to have IE8 InPrivate Browsing use a proxy server and not regular IE8 not using the proxy without changing the settings every time I use IPB?

Hi,
Thank for posting in Microsoft TechNet Forum.
Inprivate Browsing only affect following items:
Information
How it is affected by InPrivate Browsing
Cookies
Kept in memory so pages work correctly, but cleared when you close the browser.
Temporary Internet Files
Stored on disk so pages work correctly, but deleted when you close the browser.
Webpage history
This information is not stored.
Form data and passwords
This information is not stored.
Anti-phishing cache
Temporary information is encrypted and stored so pages work correctly.
Address bar and search AutoComplete
This information is not stored.
Automatic Crash Restore (ACR)
ACR can restore when a tab crashes in a session, but if the whole window crashes, data is deleted and the window cannot be restored.
Document Object Model (DOM) storage
The DOM storage is a kind of "super cookie" web developers can use to retain information. Like regular cookies, they are not kept after the window is closed.
Based on my know, we cannot use a proxy server separately for Inprivate Browsing.
Hope it helps.
Regards,
Alex Zhao
TechNet
Subscriber Support
in forum. If you have any feedback on our support, please contact
[email protected]
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Use of HeaderVariableLogonModule with ISA (Proxy server)

Hi,
We are planning to use the ISA 2010 Server as as reverse proxy to acess the SAP Portal 7.0 (EHP1). We are going to use the ISA authentication to access the SAP Portal. If we use ISA authentication, I don't want the Portal login page to appear. Once user is authenticated in the ISA server, it should come directly to portal without asking the Portal authentication again..
Can I achieve this scenario with HeaderVariableLogonModule ?.
Thanks

Hi,
You can prevent Header Spoofing this by writing your own login module on top of HeaderVariable login module or by having proper firewall rules in place which allows access of Portal only through the ISA server.
Check the link below for further details:
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/d0/a3d940c2653126e10000000a1550b0/content.htm
Regards,
Vijith

AAD Connect Health and outbound proxy server

Fired up the Azure AD Connect Health preview on some AD FS 2012 R2 servers today. Installation went fine and the servers show up in the portal, but no data is flowing. Event log shows repeated exceptions trying to connect to:
https://policykeyservice.dc.ad.msft.net/clientregistrationmanager.svc/AgentUpdateCheck?tenant=<mytenantguidhere>&env=adfs&productname=Microsoft.Identity.Health.Agent¤tversion=1.0.15022.0
The machines are on private IP addresses but have a proxy server configured (netsh winhttp set proxy). I'm not seeing any requests hit the proxy log, so I'm guessing the initial install used my IE proxy settings, but the service is not using the system proxy
config as it should.
Seems like a bug. Am I doing something wrong?
Cheers.

Event 171 from source Monitoring Agent. Not a simple HTTP 403 or 404 error -- the proxy is not being used so the system cannot be reached at all.
UpdateChecker.ThrottleUpdateInterval;Scheduling next attempt in 5 minutes. Exception: There was no endpoint listening at
https://policykeyservice.dc.ad.msft.net/clientregistrationmanager.svc/AgentUpdateCheck?tenant=my-tenant-guid&env=adfs&productname=Microsoft.Identity.Health.Agent&currentversion=1.0.15022.0 that could accept the message. This is often caused
by an incorrect address or SOAP action. See InnerException, if present, for more details. Unable to connect to the remote server
System.ServiceModel.EndpointNotFoundException: There was no endpoint listening at
https://policykeyservice.dc.ad.msft.net/clientregistrationmanager.svc/AgentUpdateCheck?tenant=my-tenant-guid&env=adfs&productname=Microsoft.Identity.Health.Agent&currentversion=1.0.15022.0 that could accept the message. This is often caused
by an incorrect address or SOAP action. See InnerException, if present, for more details. ---> System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected
party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 168.61.179.146:443
   at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
   at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Exception& exception)
   --- End of inner exception stack trace ---
   at System.Net.HttpWebRequest.GetResponse()
   at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
   --- End of inner exception stack trace ---
Server stack trace:
   at System.ServiceModel.Channels.HttpChannelUtilities.ProcessGetResponseWebException(WebException webException, HttpWebRequest request, HttpAbortReason abortReason)
   at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
   at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
   at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at Microsoft.Online.KeyAndPolicyService.Contracts.IClientRegistrationManager.CheckForAgentUpdate(String tenantName, String environment, String productName, String currentVersion)
   at Microsoft.Online.Reporting.MonitoringAgent.ClientRegistration.CheckForUpdates()
   at Microsoft.Online.Reporting.MonitoringAgent.UpdateChecker.CheckForUpdates()
   at Microsoft.Online.Reporting.MonitoringAgent.UpdateChecker.CheckForAndApplyUpdates(TimeSpan curUpdateCheckInterval)
   at Microsoft.Online.Reporting.MonitoringAgent.UpdateChecker.RunUpdateChecker(TimeSpan curUpdateCheckInterval)
There's also event 137 from Monitoring Agent with the same basic issue:
Agent.DownloadPolicyAndUpdateProcessors;DownloadPolicyFailed:There was no endpoint listening at
https://policykeyservice.dc.ad.msft.net/policymanager.svc/MonitoringPolicy/my-tenant-guid/adfs that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. Unable to connect
to the remote server
System.ServiceModel.EndpointNotFoundException: There was no endpoint listening at
https://policykeyservice.dc.ad.msft.net/policymanager.svc/MonitoringPolicy/my-tenant-guid/adfs that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. ---> System.Net.WebException:
Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to
respond 168.61.179.146:443
   at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
   at System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Exception& exception)
   --- End of inner exception stack trace ---
   at System.Net.HttpWebRequest.GetResponse()
   at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
   --- End of inner exception stack trace ---

Elicensing and ISA proxy server

Similar Messages

Maybe you are looking for