microsoft:isa:misc

Create an Application.ini in C:\Documents and Settings\All Users\Application Data\Microsoft\Firewall Client 2004\.
Add the following per application:
```
[application.exe]
Disable=1
```

Source for this and other options: Internal Client Concepts in ISA Server 2006

Java (upload) applets, port -1 and ISA Server 2006

Ran across a Java applet that accepts files via drag and drop and then uploads these files to the website.

When that traffic passed through an MS ISA 2006 SP0 proxy server the following was shown in the log:

Failed Connection Attempt ISA 30-1-2009 10:41:56 
Log type: Web Proxy (Forward) 
Status: 12005 The Uniform Resource Locator (URL) is invalid. The request was not entered correctly. Enter the correct URL and try again.  
Rule:  
Source: Internal (10.x.x.x) 
Destination: (10.x.x.x:8080) 
Request: POST http://www.website.com:-1/virtualdir/uploadservlet 
Filter information: Req ID: 05024d14; Compression: client=No, server=No, compress rate=0% decompress rate=0% 
Protocol:  
User: anonymous 
Additional information 
Client agent: Mozilla/4.0 (Windows XP 5.1) Java/1.6.0_11
Object source: (No source information is available.)
Cache info: 0x0
Processing time: 1 MIME type:

When not using the proxy, the site works fine. From Class Java.Net.URL: “Specifying a port number of -1 indicates that the URL should use the default port for the protocol.” <speculation> This doesn't seem to work when the traffic goes through ISA 2006.</speculation> On the Sun bugdatabase more bugs are listed when using Java with an ISA server, so this could be a Java bug.

HTTPFilter

FreeLists - [ISAserver.org Discussion List] - RE: HTTP Filter rejecting some requests describes that a URL with spaces (%20) in it can cause problems with the Verify normalization HTTPFilter option in ISA Server. If you monitor the connection in the ISA management console you'll see “Error message = 12217 The request was rejected” and “Blocked by the HTTP security filter: URL normalization was not complete after one pass.”

Microsoft TechNet - HTTP Filtering in ISA Server 2004
Alexander's Blog - Error Code: 500 Internal Server Error. The request was rejected by the HTTP filter. Contact the server administrator.

ISA and SAN certificates

Kent Nordstrom - ISA 2006 and SAN Certificates
Forefront TMG (ISA Server) Product Team Blog - Certificates with Multiple SAN Entries May Break ISA Server Web Publishing
Microsoft Exchange Server Forums - Unable to publish CAS with ISA 2006 if certificates with subject alternative names are used
ISAserver.org - Implementing and Troubleshooting Certificate Deployment in ISA Server 2006

(Expired) Password Change TMG/ISA published OWA

Follow Microsoft TechNet - Forefront TMG - Configuring the change password feature, ignore 6a, b and c for setting customized HTML forms. Don't forget the script from Microsoft Support - The "change password" feature does not work as expected after you install ISA Server 2006 Service Pack 1 or if you use Microsoft Threat Management Gateway 2010

Table of Contents

Microsoft ISA/TMG - Miscellaneous

TMG 2010 end of support

Blogs

Blogposts/Articles

TMG 2010

Documentation

Licensing/Subscriptions

TMG 2010

MS KB Articles

ISA 2006

TMG 2010

Setting ISA Client Exceptions per application

Java (upload) applets, port -1 and ISA Server 2006

HTTPFilter

ISA and SAN certificates

(Expired) Password Change TMG/ISA published OWA