Suddenly could not access one particular web site with Error 64

Below is a popular news website in Hong Kong and just a sudden from early June, there is error when access this site.

http://hk.apple.nextmedia.com

I've been researched for a long time and noticed it seems a very common problem on ISA.  I tried all of the suggested solution but none works.

I desparately need some help on this please.

Many thanks.

June 25th, 2013 5:49pm

Hi,

What exactly did you try? Can you reach the site from the ISA itself?

Free Windows Admin Tool Kit Click here and download it now
June 25th, 2013 9:24pm

I did try the following:

- disable http compression

- disable compression filter

- disable http filter

- create deny rule after the access rule

- create an no authentication rule

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters:
a)       EnableTCPA =0
b)      EnableTCPChimney =0
c)      EnablePMTUBHDetect =1
d)       EnablePMTUDiscovery =1

But still no luck, it just display a blank page and from the logging, it showed

64 The specified network name is no longer available

Thanks

June 26th, 2013 11:04am

Hi,

I hope you reverted those filters' settings back :) You missed one more question form me - Can you reach the site from the ISA itself?


Free Windows Admin Tool Kit Click here and download it now
June 26th, 2013 8:50pm

Yes, I did revert the changes.

No, same problem if access from ISA itself.

I saw some forum mentioned the cause was from the website that they don't follow the RFC standard blah blah, ISA is just doing it's job to terminate the connection.  The problem is user can access the site from home, wifi or any boardband, just not from the firm.  All I want to know is how to get rid of the problem.  Any clues to me?

June 27th, 2013 4:42am

Hi,

Thank you for the post.

Please check if there is device between ISA server and Internet, and sniffer the outside traffic to verify if the traffic  hit the external interface of ISA Server. You should also make sure that network interface card is update, the switch where ISA is connected is working properly.

Regards

Free Windows Admin Tool Kit Click here and download it now
June 27th, 2013 11:17am

Yes, there is a Juniper firewall between ISA and Internet.  But it's been there ages ago, why the problem just happened recently and only to this specific website? I can't follow what the above would cause the issue?

Many thanks.

June 27th, 2013 11:23am

Hi,

If it doesn't work even from ISA, then it could be something in front. I would sniff traffic and have a look at it.

Free Windows Admin Tool Kit Click here and download it now
June 28th, 2013 7:48pm

Sorry, I made a mistake when test to access the url on ISA server itself and here is the correct result.

I tried to access the url on the ISA server itself and unclick the 'use proxy server setting' on IE, it has the same error and I thought this way to isolating the ISA software.  However, I find out it is not correct.  And I did another test to stop the ISA web proxy service and firewall service, then I can access the url from ISA server.  Which proofed that the problem should lies on the ISA software.

Any more suggestion please.

July 2nd, 2013 11:38am

How does your IE work; as webproxy or secureNAT client? How many NICs does the ISA have? How is DNS configured on the ISA?
Free Windows Admin Tool Kit Click here and download it now
July 3rd, 2013 1:46am

There are two NICs, one for the local network with internal AD DNS, the other for the internet with public DNS.  I now test with the IE in the ISA server and disable the proxy setting. 
July 3rd, 2013 1:51am

I just used a testing server with the same config as the production and did following test:

1. access the url on server - no error

2. install ISA2006

3. add internal network address, create only one access rule, enable web proxy and authentication on Internal network; do the same on local host

4. access the url on server - error appears

any clues?

Free Windows Admin Tool Kit Click here and download it now
July 3rd, 2013 12:25pm

Having DNS defined on both NICs is a bad design. You should leave DNS on internal nic only which points to local DNS. Then set up DNS server to forward DNS request to ISP DNS. There are several articles on MS site as well as on TechNet which recommend it.

TrY it and let me know whether it helps.

July 3rd, 2013 12:52pm

Tried, removed the dNS from the internet NIC,same error.

Can't figure out why with ISA installed would produce error, once stopped the ISA service, the server can access the url OK?

Free Windows Admin Tool Kit Click here and download it now
July 4th, 2013 2:57am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics