Guys,

Please help me that the following site below can't display user cardinal section as long as behind TMG server however the site can work perfect if bypass TMG.

https://www.cileg.com/corporate-online/

Hi,

How do you configure th rule? Any error in TMG logging when you open the site?

Best Regards,

Joyce

thanks Joyce for your reply kindly check the rule configuration below:

Action=====> Allow

protocol =====> all outbound traffic

from =====> internal

To ======> external

users ======> spacfic users

content ======> all contact allow

I am attaching a print screen of error page

regards,

Ashawky

• Edited by Ahmed Shawky 2014 59 minutes ago

thanks Joyce for your reply kindly check the rule configuration below:

Action=====> Allow

protocol =====> all outbound traffic

from =====> internal

To ======> external

users ======> spacfic users

content ======> all contact allow

I am attaching a print screen of error page

regards,

Ashawky

• Edited by Ahmed Shawky 2014 Sunday, May 03, 2015 6:24 AM
• Proposed as answer by DenialoX 18 hours 15 minutes ago
• Unproposed as answer by DenialoX 18 hours 15 minutes ago

thanks Joyce for your reply kindly check the rule configuration below:

Action=====> Allow

protocol =====> all outbound traffic

from =====> internal

To ======> external

users ======> spacfic users

content ======> all contact allow

I am attaching a print screen of error page

regards,

Ashawky

• Edited by Ahmed Shawky 2014 Sunday, May 03, 2015 6:24 AM
• Proposed as answer by DenialoX Sunday, May 03, 2015 1:11 PM
• Unproposed as answer by DenialoX Sunday, May 03, 2015 1:11 PM

thanks Joyce for your reply kindly check the rule configuration below:

Action=====> Allow

protocol =====> all outbound traffic

from =====> internal

To ======> external

users ======> spacfic users

content ======> all contact allow

I am attaching a print screen of error page

regards,

Ashawky

• Edited by Ahmed Shawky 2014 Sunday, May 03, 2015 6:24 AM
• Proposed as answer by DenialoX Sunday, May 03, 2015 1:11 PM
• Unproposed as answer by DenialoX Sunday, May 03, 2015 1:11 PM

Dear,

As Far as i know TMG will not allow SSL Request from that port. TMG will handle Port 443 for SSl request.

A wA work around for this is to extend the SSL ports used by TMG Server,, First you need to download Script File Called " isa_tpr.js " and run it from elevated command prompt as follow: Cscript isa_tpr.js /add EXT5055 5055  Or you can use a .net application tool to open this port " isa tunel port editor " but i never used it.

or

 

 

• Edited by DenialoX 17 hours 56 minutes ago
• Proposed as answer by DenialoX 17 hours 53 minutes ago

Dear,

As Far as i know TMG will not allow SSL Request from that port. TMG will handle Port 443 for SSl request.

A wA work around for this is to extend the SSL ports used by TMG Server,, First you need to download Script File Called " isa_tpr.js " and run it from elevated command prompt as follow: Cscript isa_tpr.js /add EXT5055 5055  Or you can use a .net application tool to open this port " isa tunel port editor " but i never used it.

or

 

 

• Edited by DenialoX Sunday, May 03, 2015 1:30 PM
• Proposed as answer by DenialoX Sunday, May 03, 2015 1:34 PM

Dear,

As Far as i know TMG will not allow SSL Request from that port. TMG will handle Port 443 for SSl request.

A wA work around for this is to extend the SSL ports used by TMG Server,, First you need to download Script File Called " isa_tpr.js " and run it from elevated command prompt as follow: Cscript isa_tpr.js /add EXT5055 5055  Or you can use a .net application tool to open this port " isa tunel port editor " but i never used it.

or

 

 

• Edited by DenialoX Sunday, May 03, 2015 1:30 PM
• Proposed as answer by DenialoX Sunday, May 03, 2015 1:34 PM

Dear,

After run this script that it is supposed to the web will be opened automatically or it needs additional setting.

Thanks for your follow up.

Dear,

First Extend the SSL ports on tmg then use the TMG monitor to monitor traffic from the client IP you are using , it will give u a brief report when and why it is blocked, if it is blocked by URL Filtering or another rule, or another port is not allowed, etc...

PS: I have tested it on my TMG2010 server and it clearly saying that PORT 5055 is not allowed as SSL.

Regards

IS

Thanks Denialox could you please attach Ccscript isa_tpr.js in order to it doesn't exist. thanks again

Regards,

Ashawky



Dear Ashawky,

please check the below link:

you can download it at the end of article. under Option III: Enable ISA to allow SSL on port 4343

http://esupport.trendmicro.com.au/Pages/Error-Code-502-Proxy-Error-appears-when-opening-the-Worry-Free-Busines.aspx

Regards

Ihab Singer

thanks Ihab, I have installed the script.