IIS Server Security - additional info

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > November 2004 > additional info





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author additional info
Dom

2004-10-20, 5:50 pm


sorry, forgot to mention, that I use IIS 6.0 on a Win2k3 server.
ssldiag shows no errors....


"Dom" wrote:

> Hello !
>
> I use Windows Server Certificates. Enabled the "require secure channel"
> option for a virtual directory.
> From some clients i can access the directory. A message pops up in IE, saying
> that the certificate wasn't issued by a trusted ca.
> Then I click yes and it works fine. O.K. so far.
>
> But from some clients i cannot access the directory. The message doesn't
> show up.
> I compared almost every setting in IE, they're the same.
>
> No Firewall issue. I see the client connect to 443.
>
> Any ideas, why some clients can't access the dir ? Same IE Version, same
> settings.
>
> Thanks for any hint.

Bernard

2004-10-21, 2:47 am

"But from some clients i cannot access the directory. The message doesn't
show up."

so ? what info is displayed ?
check IIS log file too.


--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



"Dom" <Dom@discussions.microsoft.com> wrote in message
news:D6416E44-971E-4504-BDA7-EADF093780B4@microsoft.com...[vbcol=seagreen]
>
> sorry, forgot to mention, that I use IIS 6.0 on a Win2k3 server.
> ssldiag shows no errors....
>
>
> "Dom" wrote:
>
saying[vbcol=seagreen]


Jason Rowley

2004-10-27, 5:52 pm

We had a similar problem with SSL pages not loading, we tracked down the
issue to a third party ISAPI Filter we had, when we disabled that filter SSL
was working fine. Check to see if you have any Third Party ISAPI Filter
(running either on the inidividual site or globally) and test disabling them
to see if that corrects your problem.

Jason Rowley

"Bernard" <qbernard@hotmail.com.discuss> wrote in message
news:OhAGuEytEHA.2980@tk2msftngp13.phx.gbl...
> "But from some clients i cannot access the directory. The message doesn't
> show up."
>
> so ? what info is displayed ?
> check IIS log file too.
>
>
> --
> Regards,
> Bernard Cheah
> http://www.tryiis.com/
> http://support.microsoft.com/
> http://www.msmvps.com/bernard/
>
>
>
> "Dom" <Dom@discussions.microsoft.com> wrote in message
> news:D6416E44-971E-4504-BDA7-EADF093780B4@microsoft.com...
channel"[vbcol=seagreen]
> saying
doesn't[vbcol=seagreen]
same[vbcol=seagreen]
>
>



Dom

2004-11-10, 2:49 am


thanks for the hint. I checked for that, unfortunately we have no
3. part. ISAPI Filters.

I figured out, that it isn't a client problem. If I take the same computer,
I can connect
from location A but not from location B.
Both behind ADSL lines....
This means, that some of our employes can connect and some can't. I can't
get to figure
out on what it depends whether they can connect or not.....
No banned IP's or such things. I see the https connection in the firewall
logs.....

Any ideas ?

"Jason Rowley" wrote:

> We had a similar problem with SSL pages not loading, we tracked down the
> issue to a third party ISAPI Filter we had, when we disabled that filter SSL
> was working fine. Check to see if you have any Third Party ISAPI Filter
> (running either on the inidividual site or globally) and test disabling them
> to see if that corrects your problem.
>
> Jason Rowley
>
> "Bernard" <qbernard@hotmail.com.discuss> wrote in message
> news:OhAGuEytEHA.2980@tk2msftngp13.phx.gbl...
> channel"
> doesn't
> same
>
>
>

Bernard

2004-11-10, 2:49 am

> https connection in the firewall logs.....

from both location A and B ?

can you do a 'telnet yourip 443' from both site ?
you should get a black screen if the port is open.



--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/



"Dom" <Dom@discussions.microsoft.com> wrote in message
news:1CC77536-82B3-4DFC-A2CF-14A2EA06ECA3@microsoft.com...
>
> thanks for the hint. I checked for that, unfortunately we have no
> 3. part. ISAPI Filters.
>
> I figured out, that it isn't a client problem. If I take the same

computer,[vbcol=seagreen]
> I can connect
> from location A but not from location B.
> Both behind ADSL lines....
> This means, that some of our employes can connect and some can't. I can't
> get to figure
> out on what it depends whether they can connect or not.....
> No banned IP's or such things. I see the https connection in the firewall
> logs.....
>
> Any ideas ?
>
> "Jason Rowley" wrote:
>
SSL[vbcol=seagreen]
them[vbcol=seagreen]
doesn't[vbcol=seagreen]
IE,[vbcol=seagreen]
Version,[vbcol=seagreen]


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com