Cannot access server in HQ through proxy server

Hi Experts,
We have a TMG 2010 installed and clients are accessing Internet through it.
And now there is an access problem to the destinatined server in HQ in another country, and it was fine to reach the destinated server before the servere changed its IP.
When trying to accesss the destinated server with new IP, the TMG log and report shows the connection status with
12030: The connection with the server was terminated abnoramlly.
While there is another guest segment that allows Internet access without proxy server, and they are able to access the server with no problem at all.
When I captured packets using Wireshark from the pc and found that the connection was actually from the pc to proxy server with the following result:
from PC to Proxy server
CONNECT xxx.xxx.com:443 HTTP/1.0
from Proxy server to PC
HTTP/1.1 502 Proxy Error (The connection with the server was terminated abnormally) (text/html)
Would there be a configuration problem inside TMG?
When i include the domain in https inspection exemption list, is that means client would be able to reach ther destination without being inspected?
Then how about the incoming connection? Is there any rules which will restrict HTTPS inbound?
Apart from above problem, clients also not able access some of https website such as banking with CA's, and no problem using guest segment (not through proxy server).
Thanks in advance
Ben

Hi,
>>And now there is an access problem to the destinatined server in HQ in another country, and it was fine to reach the destinated server before the servere changed its IP.
Have you tried to re-create the rule to access the destinatined server after it changed the IP?
>>When i include the domain in https inspection exemption list, is that means client would be able to reach ther destination without being inspected?
When a site is added to the HTTPS inspection exclusion list, Forefront TMG does not check the site’s certificate for expiration or revocation. However, name mismatch and trust are always checked, unless the “No Validation” mark is set.
Reference:Troubleshooting HTTPS inspection
Best Regards,
Joyce
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Similar Messages

  • Can't access some secure sites through proxy?

    can't access some secure sites through proxy server on osx it just keeps going local authority couldn't be contacted, i had the same problem with parental controls, but now that is off and its still doing it, is there a setting or something i need to enable?

    In my original post, not today's, I had said I was having the issues on the Mini, running OSX 10.6.8 and Safari v.5.1.5 for my bank's pill pay. I should have been more specific as to which machine and OSX Safari browser I'm having the T-Mobile problem with. My mistake.
    It is on both the MacMini and now the Air too. A moment ago, I was able to log in to my.t-mobile.com on the Air, but after putting into my Bookmarks folder, I can't do it anymore. The Log in button comes up greyed out instead of green.
    I'm also still having trouble with my bank's bill pay section on both computers too.
    I wonder if it's related to the saving of the log in info or putting in the Bookmark Folder?

  • Accessing WS Service through proxy server

    Working with WLS 8.1.4 i cannot access remote service through proxy server.
    I have setted up everithing needed and more:
    http.proxyHost=HOST
    http.proxyPort=8080
    http.proxyUser=WIN_DOMAIN\USERNAME
    http.proxyPassword=PASSWORD
    http.agent="Microsoft Internet Explorer 5.0" weblogic.net.proxyAuthenticatorClassName=MyProxyAuthenticator
    weblogic.webservice.transport.http.proxy.host=HOST
    weblogic.webservice.transport.http.proxy.port=8080
    weblogic.webservice.client.proxyusername=WIN_DOMAIN\USERNAME
    weblogic.webservice.client.proxypassword=PASSWORD
    weblogic.webservice.verbose=true
    weblogic.webservice.binding.verbose=true
    weblogic.webservice.transport.http.full-url=true
    The strangest thing is that apparently no MyProxyAuthenticator is instantiated for I cannot see a System.out.print(message) I wrote its init() method.
    Please help ... thanks in advance.

    I am having the same problem. My client has the exact same properties as the previous poster:
    // Standard JDK Properties
    System.setProperty("http.proxyHost", "proxy-cache.xxxxx.xxx");
    System.setProperty("http.proxyPort", "9119");
    System.setProperty("http.proxyUser", "username");
    System.setProperty("http.proxyPassword", "password");
    System.setProperty("http.agent", "Microsoft Internet Explorer 5.0");
    // Specific Weblogic properties
    System.setProperty("weblogic.net.proxyAuthenticatorClassName", "com.bcbsmn.webservices.authentication.ProxyAuthenticatorImpl");
    System.setProperty("weblogic.webservice.transport.http.proxy.host", "proxy-cache.xxxxx.xxx);
    System.setProperty("weblogic.webservice.transport.http.proxy.port", "9119");
    And here is part the response I get from the proxy server:
    [java] <BODY>
    [java] <H1>ERROR</H1>
    [java] <H2>Cache Access Denied</H2>
    [java] <HR noshade size="1px">
    [java] <P>
    [java] While trying to retrieve the URL:
    [java] <A HREF="......">http://................
    ITestPricer</A>
    [java] <P>
    [java] The following error was encountered:
    [java] <UL>
    [java] <LI>
    [java] <STRONG>
    [java] Cache Access Denied.
    [java] </STRONG>
    [java] </UL>
    [java] </P>
    [java] <P>Sorry, you are not currently allowed to request:
    [java] <PRE> http://...............</PRE>
    [java] from this cache until you have authenticated yourself.
    [java] </P>
    ...and my authentication impl is never called according to my println's. I tried adding the proxyAuthenticatorClassName property to the command line as a JVM arg with no luck. Please help if you can, thanks.
    Matt Dowell
    Blue Cross Blue Shield

  • Re: (forte-users) HTTP request through proxy server

    Daniel -
    No, it does not. ;)
    How do you say to HTTPRequest to go through proxy?
    Thanks,
    Taras
    Daniel Nguyen wrote:
    >
    Hi,
    It works very well. I have experienced this model for a distant Forte client
    calling a Forte Server service Object for instance without any environment
    and without TCP access (passing through firewall for instance).
    It has also worked very well to make an injectot to improve Web Enterprise
    and IIS using the SendRequest from HTTPAccess.
    Hope this helps,
    Daniel Nguyen
    Freelance Forte Consultant
    http://perso.club-internet.fr/dnguyen/
    Taras Katkov a &eacute;crit:
    HTTP request through proxy server using forte HTTP library?
    Any experience?
    Thanks,
    Taras
    For the archives, go to: http://lists.xpedior.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in a new
    email the word: 'Unsubscribe' to: forte-users-requestlists.xpedior.com--
    For the archives, go to: http://lists.xpedior.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in a new
    email the word: 'Unsubscribe' to: forte-users-requestlists.xpedior.com

    You can also use the HTTP-DC project.... You don't
    need Web Enterprise for this. From what I can tell,
    this is available in L.x on....
    There is api documentation in M.2 (with scant
    examples.)
    There's a special process to put the project in your
    repository (it isn't installed in the repository in
    the standard install,) the documentation in M.2
    (probably in M.0 too, AFAIK) that tells you how to do
    this (look for HTTP-DC in the online help.)
    I haven't done much with it yet, I've just installed
    it. If anybody out there has examples, that'd be
    great. I'll try to contribute more the moment I get a
    chance to explore it....
    Christopher Fury
    BellSouth Communications Systems
    --- Daniel Nguyen <dnguyenclub-internet.fr> wrote:
    Hi,
    If you have Web Enterprise, you can user
    HttpAccess.SendRequest().
    Hope this helps,
    Daniel Nguyen
    Freelance Forte Consultant
    Amin, Kamran a &eacute;crit:
    Is there any way to make a HTTP request from TOOLto another HTTP Service?
    thanks in advance.
    For the archives, go to:
    http://lists.xpedior.com/forte-users and use
    the login: forte and the password: archive. Tounsubscribe, send in a new
    email the word: 'Unsubscribe' to:forte-users-requestlists.xpedior.com
    For the archives, go to:
    http://lists.xpedior.com/forte-users and use
    the login: forte and the password: archive. To
    unsubscribe, send in a new
    email the word: 'Unsubscribe' to:
    forte-users-requestlists.xpedior.com
    Kick off your party with Yahoo! Invites.
    http://invites.yahoo.com/

  • Adding Pix device public interface through Proxy server into CSM Fails

    Hi
    I am trying to add a device into CSM. The device is only reachable through proxy server. If i try to add the device, the connectivity test fails" unable to communicate with device". If i debug on the PIX i see no connection attemps. If imake a https connection from the Explorer from the windows server running CSM i get connected. I have set the proxy settings under Server Administration. I can update packages from CCO through the proxy. Is there somewhere else to tell CSM to run through proxy ?

    Hello,
    maybe your problem has to do something with loading SLPDA.NLM. If you
    cannot get to open Autoexec.ncf then go back to DOS-Mode, rename this
    file in C:\nwserver-directory and start again. i have seenthis behaviour
    on servers loading SLPDA with no network-communication and they stop
    loading at WPSD.NLM. Try to load SLPD.NLM manually when the server is
    up. After that shift the line in Autoexec.ncf where you want to load
    Slpda.NLM to the end of the file and boot the server again to see what
    happens.
    Good luck
    Burkhard Wiegand
    Netware Admin
    Debeka-Versicherungen
    D-56068 Koblenz

  • Mac Appstore not working through proxy server

    I use net through proxy server of my college(lan). My Appstore doesnt work on it. it keeps blinking or shows "cannot connect to appstore". GoogleChrome and other apps are working fine. Also, appstore worked at my home where i use wifi.

    That's right. It doesn't work through a proxy.

  • Help needed for CORBA over Http through proxy server[Very Urgent]

    Hi Friendz,
    I am new to J2EE. Right now I am learning RMI, Corba now.
    In RMI, to pass through Http to bypass firewall or through proxy sever, we can use either Http to port or Http to CGI/Servlet i.e., Http tunneling.
    In the same, I am running a simple corba application, i want my corba application to pass through my proxy server using http which is configured to address 127.0.0.1 and port 8118.
    How to pass my corba application through proxy server. please help me and it is very urgent.
    Is it possible or not, please let me know some comments about this topic
    Thanks in advance Friends for your help

    This is so extremely urgent that it needs to be asked multiple times.
    http://forum.java.sun.com/thread.jspa?threadID=762950

  • Applet using socket connection always go through proxy server

    Socket connection with socks always go through proxy server
    We have two applets in different codebases using socket to talk to each other, until now nothing new, but the problem is that we are behind a proxy server with socks and because of that, the connection always go through the proxy server even with proxy override point to the applet machine. We have tried a lof of things and until now nothing worked, it looks like the socket is ignoring proxy override configuration. We would like to know if there is a way to solve this problem making the applets comunicate to each other ignoring the proxy server. It should happen when we set the plug-in option to "no proxy host", but it doesn't. Maybe it can be a bug of JVM, I don't know, just maybe, and if it's true, any other good idea would be welcome as well.
    Thanks in advance.

    Hi,
    I am not very much sure if I can help you. In my previous experience, once you set the system property to use the proxy, then the jvm uses the proxy. If you want disable, in your code, you have to disable it.
    like System.setProperty("socksProxyHost","someHost"), Properties props = System.getProperties(); props.remove(("socksProxyHost");

  • How to access Internet through proxy server

    Please help... I cannot get Internet access through a proxy server at work.

    Some things to try first:
    1. Turn Off your iPad. Then turn Off (disconnect power cord for 30 seconds or longer) the wireless router & then back On. Now boot your iPad. Hopefully it will see the WiFi.
    2. Go to Settings>Wi-Fi and turn Off. Then while at Settings>Wi-Fi, turn back On and chose a Network.
    3. Change the channel on your wireless router (Auto or Channel 6 is best). Instructions at http://macintoshhowto.com/advanced/how-to-get-a-good-range-on-your-wireless-netw ork.html
    4. Go into your router security settings and change from WEP to WPA with AES.
    5.  Renew IP Address: (especially if you are droping internet connection)
        •    Launch Settings app
        •    Tap on Wi-Fi
        •    Tap on the blue arrow of the Wi-Fi network that you connect to from the list
        •    In the window that opens, tap on the Renew Lease button
    ~~~~~~~~~~~~~~~~~~~~~~~~~
    iOS 6 Wifi Problems/Fixes
    Fix For iOS 6 WiFi Problems?
    http://tabletcrunch.com/2012/09/27/fix-ios-6-wifi-problems/
    Did iOS 6 Screw Your Wi-Fi? Here’s How to Fix It
    http://gizmodo.com/5944761/does-ios-6-have-a-wi+fi-bug
    How To Fix Wi-Fi Connectivity Issue After Upgrading To iOS 6
    http://www.iphonehacks.com/2012/09/fix-wi-fi-connectivity-issue-after-upgrading- to-ios-6.html
    iOS 6 iPad 3 wi-fi "connection fix" for netgear router
    http://www.youtube.com/watch?v=XsWS4ha-dn0
    Apple's iOS 6 Wi-Fi problems
    http://www.zdnet.com/apples-ios-6-wi-fi-problems-linger-on-7000004799/
    ~~~~~~~~~~~~~~~~~~~~~~~
    Look at iOS Troubleshooting Wi-Fi networks and connections  http://support.apple.com/kb/TS1398
    iPad: Issues connecting to Wi-Fi networks  http://support.apple.com/kb/ts3304
    WiFi Connecting/Troubleshooting http://www.apple.com/support/ipad/wifi/
    How to Fix: My iPad Won't Connect to WiFi
    http://ipad.about.com/od/iPad_Troubleshooting/ss/How-To-Fix-My-Ipad-Wont-Connect -To-Wi-Fi.htm
    iOS: Connecting to the Internet http://support.apple.com/kb/HT1695
    iOS: Recommended settings for Wi-Fi routers and access points  http://support.apple.com/kb/HT4199
    How to Quickly Fix iPad 3 Wi-Fi Reception Problems
    http://osxdaily.com/2012/03/21/fix-new-ipad-3-wi-fi-reception-problems/
    iPad Wi-Fi Problems: Comprehensive List of Fixes
    http://appletoolbox.com/2010/04/ipad-wi-fi-problems-comprehensive-list-of-fixes/
    Fix iPad Wifi Connection and Signal Issues  http://www.youtube.com/watch?v=uwWtIG5jUxE
    Fix Slow WiFi Issue https://discussions.apple.com/thread/2398063?start=60&tstart=0
    How To Fix iPhone, iPad, iPod Touch Wi-Fi Connectivity Issue http://tinyurl.com/7nvxbmz
    Unable to Connect After iOS Update - saw this solution on another post.
    https://discussions.apple.com/thread/4010130
    Note - When troubleshooting wifi connection problems, don't hold your iPad by hand. There have been a few reports that holding the iPad by hand, seems to attenuate the wifi signal.
    ~~~~~~~~~~~~~~~
    If any of the above solutions work, please post back what solved your problem. It will help others with the same problem.
     Cheers, Tom

  • Cannot access mailbox hosted on remote EX2010 server through OWA

    Our Internet facing OWA is published through our EX2013 server as MAIL.CONTOSO.COM
    We have multiple sites acrossed global. OWA proxy from EX2013 to EX2010 works fine for NZ and US. But for some reason when tries to access mailbox on UK EX2010 SP3 server through the EX2013 OWA, I got error below:
    OWA-Error: Microsoft.Exchange.Data.Storage.NotSupportedWithServerVersionException
    X-OWA-Version: 15.0.775.32
    X-FEServer: EX2013-CAS
    X-BEServer: EX2013-CAS
    Checked the mailbox ExchangeVersion on the UK EX2010 server, it is 0.10 (14.0.100.0) same as NZ and US EX2010 mailbox users.

    What is the version using get-exchangeServer | FL *Version* ?  2010 Sp3 is required at a minimum : Build 14.3.123.4
    Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

  • Traffic move through Proxy Server in Production

    Hello,
                                                                                            Internet
                                                                                                  |
                                                                                          Internet Router
                                                                                                  |
                                                                                          Internet switch
                                                                                                  |
                                                                                               IPS
                                                                                                  |
                                                                                               Firewall
                                                                                                  |
                                                                                               IPS
                                        Inside ()---- Access-sw----------Core-SW------------DMZ
    This is my Company network diagram, all data go through the firewall  IPS is Inline mode on Acess and Core sw static route is configured for firewall but management wants all inside (Noc Room Helpdesk Team and Third Party members) traffic must pass via Proxy server that is connected to Core switch Please anybody tell me How can i do this in a Production Enviornment and which type of changes i need to do on Access or Core Switch.They will use Squid for Proxy on Linux Server

    WCCP can be used to redirect traffic to the proxy server. See below a configuration example:
    http://www.crypt.gen.nz/papers/cisco_squid_wccp.html
    Don't forget to rate all posts that are helpful by clicking on the stars below.

  • Adobe Reader 9.0 has delay when downloading PDF file through proxy server

    There is an issue with the Adobe Reader (and Acrobat) 9.0 PDF Link Helper ActiveX control for Internet Explorer (6 or 7) on Windows computers with respect to proxy servers. Due to this issue, there is a 2 minute delay for any Internet Explorer web browser on the Deere network before any PDF file will open from the Internet within the IE web browser if In-Place activation (Display PDF in Browser) is enabled in Adobe Reader 9. This problem does not affect Adobe Reader 8.
    What we are seeing is that when someone on the Deere network clicks on a links to a PDF file in the Internet, the PDF file downloads immediately. But then, after the PDF file is downloaded, the Adobe Reader 9 PDF Link Helper ActiveX control tries to talk directly to the Internet web site. The Adobe Reader 9 PDF Link Helper ActiveX control does not know how to negotiate our proxy server. So after a minute or two, the Adobe Reader 9 PDF Link Helper ActiveX control times out (gives up) and allows the IE browser to display the downloaded PDF file in the IE browser.
    We work around this issue by disabling In Place Activation for PDF files in IE (uncheck Display PDF in Browser). But we would like a fix for the PDF Link Helper ActiveX control.
    [HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\Originals]
    "bBrowserIntegration"=dword:00000000
    [HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\9.0\Originals]
    "bBrowserIntegration"=dword:00000000
    Here's what our proxy people see when they do a trace of a PDF file download through their proxy server with IE 7 and Adobe Reader 9 with Display PDF in Browser checked.
    The browser tells the proxy to download the pdf, it does and sends it to the browser. Before the browser opens it something in Acrobat ( or I.E. ? ) tries to make a connection back to the content server that hosted the pdf. Unfortunately this agent does not ask the proxy to make the request for it, but rather asks local DNS to resolve the Internet server name. This request dies because our internal private network does not know anything about the Internet. Only the DNS used by the proxy can resolve Interent names. After two unsuccessful DNS queries into the private network, the agent tries to resolve the same Internet name with NBNS ( netbios name service) queries again into the private network, with the same results. These requests persists for more than two minutes ( over 200 unresolved queries ). Then for whatever reason the agent gives up and the already downloaded pdf file loads into the browser.
    I have a TCP capture file if you want it.

    Hi,
    I have the same problem with some specific PDF files. For more than 90% it hangs when opening the file, but sometimes it works (with the same file).
    The workflows where it sometimes worked:
    a) Loading the PDF, the reader is started the first time and displays license dialog.
    b) The reader was already runing and file is loaded with Drag&Drop or File/Open in the Reader
    But most times it does not load.
    I could not find out which file is missing or trying to be opened. So I tried with the CP949.TXT.
    I found no CP949.TXT in Reader 8 installation, so I took it from the link, pasted into notepad and stored in the respective directory
    C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\
    Now it seems to work fine, opening PDFs with double click from exporer.
    But why did Adobe Reader 8 not have the TypeSupport directory at all?
    Even when having found a fix (hack?), I think I did not understand the cause of this problem.
    Regards,
    TheLastReader

  • NIO through proxy server

    I have an Apache web server that is configured to proxy a URL to a java server that I have behind the proxy server. My clients send data through a URLConnection to a specific URL in which redirects it to my java server behind the proxy. My java server has a ServerSocket that gets the request from the proxy and then uses the PrintStream to send data back through the proxy to my clients (Which is an applet). I would like to use the NIO non blocking but the problem is when I create a Channel the only thing that can be written on that Socket Chanel is a ByteBuffer. Because it is a ByteBuffer gets passed the proxy server can not handle the request and thus will not forward it on to my clients. PrintStream currently does this for me and allows this to work. Any ideas how I can use NIO channels to write data that a proxy server will be able to understand? I was thinking of using the ftp proxy instead of http proxy and have not tried that yet but then I would have to have my java server understand ftp protocol......Would really just like to do sockets connections with NIO. Any help would be greatfully appreciated.

    Here is a good question that I found fixed my problem. Within my application I have a SocketChannel. When writing through a proxy with an HTTP Header in the front of all my data it doesn't seem to go through the proxy server at all. However, when getting a Socket object from my SocketChannel and then using the OutputStream of the Socket (PrintStream api) will end up pushing the data out through the proxy. What isthe difference between using the write method from the SocketChannel compared to getting a Socket object from the SocketChannel and using its OutputStream to write data?

  • Apps won't work through proxy server

    At work I have to connect through a proxy server. Safari works well but none of my apps will connect or update. can anyone help please.
    Brad

    They are probably blocking the port the apps are trying to utilize.

  • REMOTE SERVER  MYSQL  DATABASE  CONNECTION THROUGH PROXY SERVER

    I want to connect to remote server through my proxy server, I have done all required parameter but the Exception is comming as follows :-
    Exception while connecting to database: java.sql.SQLException: Unable to connect to any hosts due to exception:java.net.ConnectException: Connection refused: connect
    Please help

    To clarify, if it helps, I have a database of event dates and and details which I wish to query in order to show the most imminent event on one page, and to display all forthcoming events on another.
    I would be happy to delve into whatever package is required to achieve this, but would prefer not to go down a whole set of blind alleys to get where I am going.
    If the recommendation is to find and install the original extensions, then great, but I don't have them in my Dreamweaver CC package. If there is a better, more up to date option then great; I am guessing/hoping that Adobe would not have taken one method away if there wasn't a better alternative.
    A push in the right direction would be most appreciated.

Maybe you are looking for