ISA 2004 cisco SSL vpn client
|
Prev: DCOM error
Next: Sender ID Filtering vs. SBS Fax Server
From: Oswaldo on 5 Jul 2006 13:21 Hi, I am having the same problem, I am trying to connect to a website that uses the Cisco SSL VPN and after I start the connection the Active X ask for proxy credentials, and when I put them I get the same error everytime "the ssl vpn client was unable to successfully verify the ip forwardign table modification. an ssl vpn connection will not be established" I am sure that the proxy user and name are correct do you know how to fix this problem? Thanks a lot -- Oswaldo Cortes "mugen" wrote: > hi.. > > trying to get cisco ssl vpn client to work through ISA 2004 (i'm now of the > mind isa is way more trouble than it's worth, but trying to stick with it) > > i can connect to the https portion, i have the firewall client installed, > but when the active x portion tried to connect to the ssl vpn client i get > the following error > "the ssl vpn client was unable to successfully verify the ip forwardign > table modification. an ssl vpn connection will not be established" > > any ideas would be greatly appreciated before i bin isa 2k4 for ever :) > > thanks in advance > > >
From: "Crina Li" on 6 Jul 2006 05:31 Hi Oswaldo, Thank you for posting. Please refer to my reply for mugen. Thanks for your time. Best regards, Crina Li (MSFT) Microsoft CSS Online Newsgroup Support Get Secure! - www.microsoft.com/security ===================================================== This newsgroup only focuses on SBS technical issues. If you have issues regarding other Microsoft products, you'd better post in the corresponding newsgroups so that they can be resolved in an efficient and timely manner. You can locate the newsgroup here: http://www.microsoft.com/communities/newsgroups/en-us/default.aspx When opening a new thread via the web interface, we recommend you check the "Notify me of replies" box to receive e-mail notifications when there are any updates in your thread. When responding to posts via your newsreader, please "Reply to Group" so that others may learn and benefit from your issue. Microsoft engineers can only focus on one issue per thread. Although we provide other information for your reference, we recommend you post different incidents in different threads to keep the thread clean. In doing so, it will ensure your issues are resolved in a timely manner. For urgent issues, you may want to contact Microsoft CSS directly. Please check http://support.microsoft.com for regional support phone numbers. Any input or comments in this thread are highly appreciated. ===================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- | From: "mugen" <b(a)brainless.net> | Subject: ISA 2004 cisco SSL vpn client | Date: Mon, 22 May 2006 18:23:59 +0100 | Lines: 16 | X-Priority: 3 | X-MSMail-Priority: Normal | X-Newsreader: Microsoft Outlook Express 6.00.2900.2869 | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869 | X-RFC2646: Format=Flowed; Original | Message-ID: <u$97GScfGHA.4852(a)TK2MSFTNGP05.phx.gbl> | Newsgroups: microsoft.public.windows.server.sbs | NNTP-Posting-Host: 82-41-237-100.cable.ubr01.edin.blueyonder.co.uk 82.41.237.100 | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:269888 | X-Tomcat-NG: microsoft.public.windows.server.sbs | | hi.. | | trying to get cisco ssl vpn client to work through ISA 2004 (i'm now of the | mind isa is way more trouble than it's worth, but trying to stick with it) | | i can connect to the https portion, i have the firewall client installed, | but when the active x portion tried to connect to the ssl vpn client i get | the following error | "the ssl vpn client was unable to successfully verify the ip forwardign | table modification. an ssl vpn connection will not be established" | | any ideas would be greatly appreciated before i bin isa 2k4 for ever :) | | thanks in advance | | |
From: Oswaldo on 6 Jul 2006 17:19 Hi Crina, I read all the articles and followed the instructions but I keep getting the same error. One diference with the problems listed on some articles is that they can get connected but I am unable to connect. After the Active X installer starts I get a screen asking me for my proxy credentials I put the correct User and Password and I get the screen telling me that The SSL VPN Client was unable to succesfully verify the IP forwarding table modifications. If put the wrong User/Pass or leave it blank I get other screen telling me that Proxy authentication failed using the supplied credentials. I have the 3 protocols two, that were already there and the 10000 port that I added, and I have the access rule to allow the traffic from Internal to External. I checked that the CEICW has Virtual Private Networking (VPN) selected in the Services Configuration page. And I know that VPN site is using Cisco VPN 3030.The only thing that I don't know how to check is that the clients are running in SecureNAT mode. Please could you tell me? Also If you think that I need something else please let me know. Thank you very much for all your time and consideration. Regards, -- Oswaldo Cortes ""Crina Li"" wrote: > Hi Oswaldo, > > Thank you for posting. > > Please refer to my reply for mugen. > > Thanks for your time. > > Best regards, > > Crina Li (MSFT) > > Microsoft CSS Online Newsgroup Support > > Get Secure! - www.microsoft.com/security > > ===================================================== > This newsgroup only focuses on SBS technical issues. If you have issues > regarding other Microsoft products, you'd better post in the corresponding > newsgroups so that they can be resolved in an efficient and timely manner. > You can locate the newsgroup here: > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx > > When opening a new thread via the web interface, we recommend you check the > "Notify me of replies" box to receive e-mail notifications when there are > any updates in your thread. When responding to posts via your newsreader, > please "Reply to Group" so that others may learn and benefit from your > issue. > > Microsoft engineers can only focus on one issue per thread. Although we > provide other information for your reference, we recommend you post > different incidents in different threads to keep the thread clean. In doing > so, it will ensure your issues are resolved in a timely manner. > > For urgent issues, you may want to contact Microsoft CSS directly. Please > check http://support.microsoft.com for regional support phone numbers. > > Any input or comments in this thread are highly appreciated. > > ===================================================== > > This posting is provided "AS IS" with no warranties, and confers no rights. > > -------------------- > | From: "mugen" <b(a)brainless.net> > | Subject: ISA 2004 cisco SSL vpn client > | Date: Mon, 22 May 2006 18:23:59 +0100 > | Lines: 16 > | X-Priority: 3 > | X-MSMail-Priority: Normal > | X-Newsreader: Microsoft Outlook Express 6.00.2900.2869 > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869 > | X-RFC2646: Format=Flowed; Original > | Message-ID: <u$97GScfGHA.4852(a)TK2MSFTNGP05.phx.gbl> > | Newsgroups: microsoft.public.windows.server.sbs > | NNTP-Posting-Host: 82-41-237-100.cable.ubr01.edin.blueyonder.co.uk > 82.41.237.100 > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP05.phx.gbl > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:269888 > | X-Tomcat-NG: microsoft.public.windows.server.sbs > | > | hi.. > | > | trying to get cisco ssl vpn client to work through ISA 2004 (i'm now of > the > | mind isa is way more trouble than it's worth, but trying to stick with it) > | > | i can connect to the https portion, i have the firewall client installed, > | but when the active x portion tried to connect to the ssl vpn client i > get > | the following error > | "the ssl vpn client was unable to successfully verify the ip forwardign > | table modification. an ssl vpn connection will not be established" > | > | any ideas would be greatly appreciated before i bin isa 2k4 for ever :) > | > | thanks in advance > | > | > | > >
From: "Crina Li" on 7 Jul 2006 05:49 Hi Oswaldo, Thanks for your updates. SecureNAT means you need to configure the internal IP of the ISA server as client's default gateway. For your issue, I also recommend you to involve the Cisco support. Some settings on the VPN client or the server could also affect the VPN connection through a firewall. Thanks for your time and I look forward to hearing from you. Best regards, Crina Li (MSFT) Microsoft CSS Online Newsgroup Support Get Secure! - www.microsoft.com/security ===================================================== This newsgroup only focuses on SBS technical issues. If you have issues regarding other Microsoft products, you'd better post in the corresponding newsgroups so that they can be resolved in an efficient and timely manner. You can locate the newsgroup here: http://www.microsoft.com/communities/newsgroups/en-us/default.aspx When opening a new thread via the web interface, we recommend you check the "Notify me of replies" box to receive e-mail notifications when there are any updates in your thread. When responding to posts via your newsreader, please "Reply to Group" so that others may learn and benefit from your issue. Microsoft engineers can only focus on one issue per thread. Although we provide other information for your reference, we recommend you post different incidents in different threads to keep the thread clean. In doing so, it will ensure your issues are resolved in a timely manner. For urgent issues, you may want to contact Microsoft CSS directly. Please check http://support.microsoft.com for regional support phone numbers. Any input or comments in this thread are highly appreciated. ===================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- | Thread-Topic: ISA 2004 cisco SSL vpn client | thread-index: AcahQc04C2KJ/haJT8iyJ/bcZhbA+g== | X-WBNR-Posting-Host: 208.33.47.68 | From: =?Utf-8?B?T3N3YWxkbw==?= <Oswaldo(a)discussions.microsoft.com> | References: <u$97GScfGHA.4852(a)TK2MSFTNGP05.phx.gbl> <W3yb27NoGHA.2028(a)TK2MSFTNGXA01.phx.gbl> | Subject: RE: ISA 2004 cisco SSL vpn client | Date: Thu, 6 Jul 2006 14:19:01 -0700 | Lines: 108 | Message-ID: <CE543673-D801-4FD2-9BFC-F36FC1422480(a)microsoft.com> | MIME-Version: 1.0 | Content-Type: text/plain; | charset="Utf-8" | Content-Transfer-Encoding: 7bit | X-Newsreader: Microsoft CDO for Windows 2000 | Content-Class: urn:content-classes:message | Importance: normal | Priority: normal | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830 | Newsgroups: microsoft.public.windows.server.sbs | Path: TK2MSFTNGXA01.phx.gbl | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:279547 | NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250 | X-Tomcat-NG: microsoft.public.windows.server.sbs | | Hi Crina, | I read all the articles and followed the instructions but I keep getting the | same error. One diference with the problems listed on some articles is that | they can get connected but I am unable to connect. After the Active X | installer starts I get a screen asking me for my proxy credentials I put the | correct User and Password and I get the screen telling me that The SSL VPN | Client was unable to succesfully verify the IP forwarding table | modifications. If put the wrong User/Pass or leave it blank I get other | screen telling me that Proxy authentication failed using the supplied | credentials. | I have the 3 protocols two, that were already there and the 10000 port that | I added, and I have the access rule to allow the traffic from Internal to | External. I checked that the CEICW has Virtual Private Networking (VPN) | selected in the Services Configuration page. And I know that VPN site is | using Cisco VPN 3030.The only thing that I don't know how to check is that | the clients are running in SecureNAT mode. Please could you tell me? | Also If you think that I need something else please let me know. | Thank you very much for all your time and consideration. | Regards, | | -- | Oswaldo Cortes | | | ""Crina Li"" wrote: | | > Hi Oswaldo, | > | > Thank you for posting. | > | > Please refer to my reply for mugen. | > | > Thanks for your time. | > | > Best regards, | > | > Crina Li (MSFT) | > | > Microsoft CSS Online Newsgroup Support | > | > Get Secure! - www.microsoft.com/security | > | > ===================================================== | > This newsgroup only focuses on SBS technical issues. If you have issues | > regarding other Microsoft products, you'd better post in the corresponding | > newsgroups so that they can be resolved in an efficient and timely manner. | > You can locate the newsgroup here: | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx | > | > When opening a new thread via the web interface, we recommend you check the | > "Notify me of replies" box to receive e-mail notifications when there are | > any updates in your thread. When responding to posts via your newsreader, | > please "Reply to Group" so that others may learn and benefit from your | > issue. | > | > Microsoft engineers can only focus on one issue per thread. Although we | > provide other information for your reference, we recommend you post | > different incidents in different threads to keep the thread clean. In doing | > so, it will ensure your issues are resolved in a timely manner. | > | > For urgent issues, you may want to contact Microsoft CSS directly. Please | > check http://support.microsoft.com for regional support phone numbers. | > | > Any input or comments in this thread are highly appreciated. | > | > ===================================================== | > | > This posting is provided "AS IS" with no warranties, and confers no rights. | > | > -------------------- | > | From: "mugen" <b(a)brainless.net> | > | Subject: ISA 2004 cisco SSL vpn client | > | Date: Mon, 22 May 2006 18:23:59 +0100 | > | Lines: 16 | > | X-Priority: 3 | > | X-MSMail-Priority: Normal | > | X-Newsreader: Microsoft Outlook Express 6.00.2900.2869 | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869 | > | X-RFC2646: Format=Flowed; Original | > | Message-ID: <u$97GScfGHA.4852(a)TK2MSFTNGP05.phx.gbl> | > | Newsgroups: microsoft.public.windows.server.sbs
From: Oswaldo on 7 Jul 2006 09:56
Hi Crina, That means that I have to stop using DHCP and assign a static IP to the machine so the default gateway field on my local Area Connection will be active? And in this case I will need to unistall the firewall client that comes with ISA? Thanks for help. Regards, -- Oswaldo Cortes ""Crina Li"" wrote: > Hi Oswaldo, > > Thanks for your updates. > > SecureNAT means you need to configure the internal IP of the ISA server as > client's default gateway. For your issue, I also recommend you to involve > the Cisco support. Some settings on the VPN client or the server could also > affect the VPN connection through a firewall. > > Thanks for your time and I look forward to hearing from you. > > Best regards, > > Crina Li (MSFT) > > Microsoft CSS Online Newsgroup Support > > Get Secure! - www.microsoft.com/security > > ===================================================== > This newsgroup only focuses on SBS technical issues. If you have issues > regarding other Microsoft products, you'd better post in the corresponding > newsgroups so that they can be resolved in an efficient and timely manner. > You can locate the newsgroup here: > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx > > When opening a new thread via the web interface, we recommend you check the > "Notify me of replies" box to receive e-mail notifications when there are > any updates in your thread. When responding to posts via your newsreader, > please "Reply to Group" so that others may learn and benefit from your > issue. > > Microsoft engineers can only focus on one issue per thread. Although we > provide other information for your reference, we recommend you post > different incidents in different threads to keep the thread clean. In doing > so, it will ensure your issues are resolved in a timely manner. > > For urgent issues, you may want to contact Microsoft CSS directly. Please > check http://support.microsoft.com for regional support phone numbers. > > Any input or comments in this thread are highly appreciated. > > ===================================================== > > This posting is provided "AS IS" with no warranties, and confers no rights. > -------------------- > | Thread-Topic: ISA 2004 cisco SSL vpn client > | thread-index: AcahQc04C2KJ/haJT8iyJ/bcZhbA+g== > | X-WBNR-Posting-Host: 208.33.47.68 > | From: =?Utf-8?B?T3N3YWxkbw==?= <Oswaldo(a)discussions.microsoft.com> > | References: <u$97GScfGHA.4852(a)TK2MSFTNGP05.phx.gbl> > <W3yb27NoGHA.2028(a)TK2MSFTNGXA01.phx.gbl> > | Subject: RE: ISA 2004 cisco SSL vpn client > | Date: Thu, 6 Jul 2006 14:19:01 -0700 > | Lines: 108 > | Message-ID: <CE543673-D801-4FD2-9BFC-F36FC1422480(a)microsoft.com> > | MIME-Version: 1.0 > | Content-Type: text/plain; > | charset="Utf-8" > | Content-Transfer-Encoding: 7bit > | X-Newsreader: Microsoft CDO for Windows 2000 > | Content-Class: urn:content-classes:message > | Importance: normal > | Priority: normal > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830 > | Newsgroups: microsoft.public.windows.server.sbs > | Path: TK2MSFTNGXA01.phx.gbl > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:279547 > | NNTP-Posting-Host: TK2MSFTNGXA01.phx.gbl 10.40.2.250 > | X-Tomcat-NG: microsoft.public.windows.server.sbs > | > | Hi Crina, > | I read all the articles and followed the instructions but I keep getting > the > | same error. One diference with the problems listed on some articles is > that > | they can get connected but I am unable to connect. After the Active X > | installer starts I get a screen asking me for my proxy credentials I put > the > | correct User and Password and I get the screen telling me that The SSL > VPN > | Client was unable to succesfully verify the IP forwarding table > | modifications. If put the wrong User/Pass or leave it blank I get other > | screen telling me that Proxy authentication failed using the supplied > | credentials. > | I have the 3 protocols two, that were already there and the 10000 port > that > | I added, and I have the access rule to allow the traffic from Internal to > | External. I checked that the CEICW has Virtual Private Networking (VPN) > | selected in the Services Configuration page. And I know that VPN site is > | using Cisco VPN 3030.The only thing that I don't know how to check is > that > | the clients are running in SecureNAT mode. Please could you tell me? > | Also If you think that I need something else please let me know. > | Thank you very much for all your time and consideration. > | Regards, > | > | -- > | Oswaldo Cortes > | > | > | ""Crina Li"" wrote: > | > | > Hi Oswaldo, > | > > | > Thank you for posting. > | > > | > Please refer to my reply for mugen. > | > > | > Thanks for your time. > | > > | > Best regards, > | > > | > Crina Li (MSFT) > | > > | > Microsoft CSS Online Newsgroup Support > | > > | > Get Secure! - www.microsoft.com/security > | > > | > ===================================================== > | > This newsgroup only focuses on SBS technical issues. If you have issues > | > regarding other Microsoft products, you'd better post in the > corresponding > | > newsgroups so that they can be resolved in an efficient and timely > manner. > | > You can locate the newsgroup here: > | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx > | > > | > When opening a new thread via the web interface, we recommend you check > the > | > "Notify me of replies" box to receive e-mail notifications when there > are > | > any updates in your thread. When responding to posts via your > newsreader, > | > please "Reply to Group" so that others may learn and benefit from your > | > issue. > | > > | > Microsoft engineers can only focus on one issue per thread. Although we > | > provide other information for your reference, we recommend you post > | > different incidents in different threads to keep the thread clean. In > doing > | > so, it will ensure your issues are resolved in a timely manner. > | > > | > For urgent issues, you may want to contact Microsoft CSS directly. > Please > | > check http://support.microsoft.com for regional support phone numbers. > | > > | > Any input or comments in this thread are highly appreciated. > | > > | > ============================== |