Dear Team,

I have installed a server 2003 in my virtual machine & have created a DNS in the same.

Also I installed ISA 2000 with SP2 patch. I am able to browse all the websites except any of the Microsoft website.

Can anyone help me in this issue. My local PC is also able to connect to Microsoft websites without proxy.

Error I am getting is 11004 host not found when I am using the proxy in IE or Mozilla or chrome.

Thanks & Regards,

Habibur Rehman Ansari

• Moved by Steven_Lee0510Microsoft contingent staff Tuesday, December 23, 2014 7:17 AM

Hi Habibur

Due to this issue is more related to ISA server, to get better help, please allow me to move this case to the Forefront TMG and ISA Server forum.

Thanks for your understanding!

Best Regards.

Hi,

Firstly, please use Nslookup.exe to see if the website can be resolved. If not, it would be a DNS related issue. If the client uses ISA Server as a proxy, ensure that the DNS server used by ISA Server to resolve external names is able to resolve the name of the Microsoft websites.

In addition, please check the logs and the access rules on the ISA server to ensure no rule is denying access to the Microsoft website.

Best regards,

Dear Susie,

When I tried nslookup the Microsoft website are getting resolved.

& I am getting the ip address of Microsoft as

Non-authoritative answer:
Name:    microsoft.com
Addresses:  134.170.188.221
          134.170.185.46

Thanks for the rep.

Waiting for the solution.

Regard,

Habibur Rehman Ansari

Hi,

Thanks for youe reply.

It seems that DNS name resolution is fine. Did you find any related logs on the ISA server? If yes, please post them and you can hide the private parts.

Best regards,

Susie

First try to access the site from ISA server. If it is not accessible from ISA their might be something else blocking. Check Rule 18/19 allowing HTTP/HTTPS connections.

If you are able to access the websites from ISA then try below.

There might be some rule blocking access. To confirm this, you can create a new access rule. Create a Domain name set with contains Microsoft sites you are try to access you can use wildcard entries like *.Microsoft.com; *.live.com.

From :- The network from where you are trying to access (e.g. Internal)

To :- The Domain name set you created above.

Allow HTTP/HTTPS

Users - All users

** Make sure you keep this rule on the very top of the list. Apply settings and then check.

• Proposed as answer by Susie LongMicrosoft contingent staff, Moderator Tuesday, December 30, 2014 6:42 AM

Hi,

The rule is there & its the only rule that I have inserted in ISA. My ISA is directly connected to Internet without any firewall.

When I disable the proxy in IE I am able to browse. & when I enable the proxy it gives error of 11004.

Kindly suggest. Also tell me how to get the log file in ISA 2000 so I can share with you.

Regards,

Habibur Rehman Ansari

Hi,

It seems that the error 11004 is due to the DNS could not be resolved. Can you obtain the IP address when you use nslookup to resolve the website(such as run "nslookup google.com")?

In addition, ISA Server provides logging to a file for the Web Proxy Service, Firewall Service, and for packet filters. Please make sure you have enable ISA logging for the Web Proxy Service and Firewall Service. Then you can check the logs on the path you have configured.

More information:

Configuring ISA Server Log Files. (Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft.)

Best regards,

Susie

Hi,

I am able to do nslookup.

Non-authoritative answer:
Name:    yahoo.com
Addresses:  98.138.253.109
          98.139.183.24
          206.190.36.45

> msn.com

Non-authoritative answer:
Name:    msn.com
Address:  23.101.196.141

> micorosoft.com

Non-authoritative answer:
Name:    micorosoft.com
Addresses:  65.55.39.10
          64.4.6.100

Hi,

Thanks for your reply.

Which server did you configure as a proxy server? In addition, please also make sure that the port used for proxy is not blocked on the client and server.

Did you find any related logs on the ISA server? If not, I recommend you to capture packets using network monitor when you encounter this issue.

Best regards,

Susie

Hi,

The server is Server 2003 x86.Proxy is ISA 2000.

I have a monthly log report. I can send you if required.

Regards,

Habibur Rehman Ansari

Hi,

I am able to nslookup microsoft.com

but unable to ping the same. what could be the issue

Regards,

Habibur Rehman Ansari