Quantcast
Channel: Forefront TMG and ISA Server forum
Viewing all articles
Browse latest Browse all 3822

Problem with URL/Domain Sets as destination - help!

$
0
0

Hello,

We got TMG 2010 single server as internet gateway, where I have rules with users categorized in

  1. VIP (All Outbound Traffic open to External),
  2. Standard (All Outbound Traffic to specific URL+Domain Name sets)
  3.  Time-based (All Outbound Traffic to specific URL+Domain Name sets) - with a calender restriction.

Here VIP group has everything expect for some denial rules I created atop this rule, perfect.  The standard group has specific URLs and domains explicitly opened based on their request for e.g. http://www.moi.gov.sa/ as follows

  • - in URL set - http://*.moi.gov.sa/*; https://*.moi.gov.sa/*
  • -in Domain Set - moi.gov.sa/*; *.moi.gov.sa/*  

Both of these threads should ensure all pages, parts of www.moi.gov.sa to the Standard Users (or is this syntax wrong??)

The problem, even after opening like that, certain sites would not load properly - few examples

https://www.linkedin.com/ , http://www.booking.com/.  Sometimes homepage and some sub pages will load well, then an unclear/not-well-loaded page inside. Or homepage won't load well, but inside most pages would work.

If this used is moved to VIP group, everything works so well  because the traffic is open to 'External' i.e. all.  I even created another rule atop all exisiting rules namely " Allowed Sites" where traffic set from 'All outbound' to Set or URL+Domains sets of course, but put system default "All Users" in condition, which I think will anonymous level access to those URL/Domain sets for all users. Still the same error -

If my explanation is messy, please ask for clarification.  Appreciate any tips.


Insaf Muhammed


Viewing all articles
Browse latest Browse all 3822

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>