ISA 2004 SP2 Hotfix Available
From Jim Harrison on the ISAserver.org mailing list:
You can call PSS and ask for the fix for KB 915045. The KB isn’t published yet, but this is the number PSS needs to access the public fix. You must either open a case with them or wait for it so appear on MU (ASAP).
This package fixes the following issues introduced in ISA 2004 Service Pack 2:
“502 Proxy Error. The HTTP Request includes a non-supported header.” (www.delta.com) “500 Internal Server Error; Not implemented (-2147467263)” (OWA zip files) “The server supplied a compressed response although ISA Server did not request compression” (iTunes)
HTH,
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP — ISA Firewalls
Cesar Liscano Says:
March 14th, 2006 at 8:27 am
I Have this error ……………
Technical Information (for support personnel)
Error Code: 502 Proxy Error. Not implemented (-2147467263)
IP Address: 64.58.88.100
Date: 14/03/2006 02:38:21 p.m.
Server: xxxxxxxxx
Source: web filter
Please help me with this issue
Thomas Shinder Says:
March 14th, 2006 at 8:35 am
Call PSS for the hotfix.
HTH,
Tom
Rob Kleinpeter Says:
March 14th, 2006 at 12:21 pm
….Called PSS and was told they could not give me the hotfix until it was posted to Microsoft’s website.
Thomas Shinder Says:
March 14th, 2006 at 12:36 pm
Hi Rob,
That’s not the information I have. Let me check.
Thanks!
Tom
Thomas Shinder Says:
March 14th, 2006 at 2:17 pm
Hi Rob,
Do you have a PSS case number? You can email it to me at tshinder@tacteam.net and I’ll forward it on to the right people.
Thanks!
Tom
Anup Gupta Says:
March 15th, 2006 at 3:25 pm
Could you please point me to a web location to download this fix. We do need it urgently. Thank you!
Thomas Shinder Says:
March 15th, 2006 at 3:30 pm
An Anup,
Just call PSS and they’ll give it to you for free.
HTH,
Tom
Jeroen Busschers Says:
March 16th, 2006 at 7:59 am
This problem was resolved for the website www.delta.com but not for the following dutch site http://www.jsw-online.nl/template_jsw/listview.asp...id=39#
Maybe can somebody help me with this problem,
Thomas Shinder Says:
March 16th, 2006 at 8:24 am
Hi Jeroen,
Works OK for me.
Tom
Jeroen Busschers Says:
March 16th, 2006 at 8:35 am
I’m sorry you must try to download a pdf that is not working for me.
Thomas Shinder Says:
March 16th, 2006 at 8:36 am
Hi Jeroen,
OK, I see the same thing. Do you have the new hotfix installed?
Thanks!
Tom
Jeroen Busschers Says:
March 16th, 2006 at 8:57 am
Yes the new hotfix is installed, all the sites are working only i’ve got the problem with this site. The site http://www.delta.com is now working.
Rob Kleinpeter Says:
March 16th, 2006 at 10:13 am
Hey Tom,
Sorry for the delayed responce. I call PSS again and this time got someone who knew what I was talking about. Thanks for offering your help.
CRK
Jim Harrison Says:
March 16th, 2006 at 11:20 am
Thanks for the report - I got a capture and it looks like another “variation on the theme”
Thomas Shinder Says:
March 16th, 2006 at 12:40 pm
Hi Jim,
Thanks!
Tom
Thomas Shinder Says:
March 16th, 2006 at 12:40 pm
“Rob Kleinpeter Says:
March 16th, 2006 at 10:13 am e
Hey Tom,
Sorry for the delayed responce. I call PSS again and this time got someone who knew what I was talking about. Thanks for offering your help.
CRK”
Hi Bob,
Great! Good to you got it fixed and thanks for the follow up!
Tom
Jim Harrison Says:
March 16th, 2006 at 1:05 pm
I checked it out.
The server is sending a combination of “Transfer-Encoding: base-64″ and “Content-Length: 511357″.
RFC-2616 clearly states:
Whenever a transfer-coding is applied to a message-body, the set of transfer-codings MUST include “chunked”, unless the message is terminated by closing the connection. When the “chunked” transfer-coding is used, it MUST be the last transfer-coding applied to the message-body. The “chunked” transfer-coding MUST NOT be applied more than once to a message-body. These rules allow the recipient to determine the transfer-length of the message (section 4.4).
There is no “Transfer-encoding: chunked” directive for ISA to use and so ISA rejects it.
Thomas Shinder Says:
March 16th, 2006 at 1:25 pm
Hi Jim,
Thanks for the update!
Tom
Gagavitz Posada Says:
March 16th, 2006 at 1:45 pm
We have also installed the hotfix, but are still getting problems with the site vanircm.constructware.com. It is no longer the same error message (12156 header problem) but now it gives me corrupted data on the headers of the page, not the headers of the request, or a timeout when downloadign the headers on the page. Is this something related to the hotfix, or a setting that we forgot to include? Is there a way to post a screen shot so you can see what the problem looks like?
Thomas Shinder Says:
March 16th, 2006 at 1:48 pm
Hi Gagavitz,
I don’t see any problems reaching that page.
Tom
Gagavitz Posada Says:
March 16th, 2006 at 1:54 pm
Hi Tom,
Unfortunately you have to be logged on for it to work. This is why I’m asking if there’s any way to post screenshots. I also forgot to mention one more problem with it. We get a lot of server connection loses: Error code 64.
When we installed it, it restarted the services but didn’t prompt for a reboot of the server. One of the technicians at MS told us that the reboot was required. We went ahead and did it last night, but the problems still remain. I don’t think the problem is the one that the hotfix was meant to resolve. I think that some type of setting was reset by the hotfix and I’m wondering if anybody has seen this happen. We used to not be able to get into the site at all, at least now we can.
-Gagy
Thomas Shinder Says:
March 16th, 2006 at 2:07 pm
Hi Gagavitz,
Without credentials, its hard to replicate the problem. If you could get Network Monitor traces on both the internal and external interfaces of the ISA firewall while the problem occurs and then forward them to me at tshinder@tacteam.net, I’ll send them along to Jim Harrison. Or, Jim, if you’re reading this, if you want them to forward them directly to you, then you can post your email address here. I didn’t want to volunteer you
Thanks!
Tom
Gagavitz Posada Says:
March 16th, 2006 at 2:11 pm
Hi Tom,
Unfortunately, even though this problem has been delegated to me, I don’t have direct access to the server. I will wait for the person who does to come in and send the traces then. Thanks for your help. If you don’t mind, I can also send you the screenshots.
-Gagy
Thomas Shinder Says:
March 16th, 2006 at 2:22 pm
Hi Gagavitz,
That will be fine.
Thanks!
Tom
Jim Harrison Says:
March 16th, 2006 at 2:57 pm
Hi Gagavitz,
Please ask for the network captures.
Screenshots are great to understand the user experience, but not for analyzing the underlying problem.
Please ask your ISA admin to gather them from *both* side of the ISA simultaneously and forward them to jim@isatools.org.
Thomas Shinder Says:
March 16th, 2006 at 2:59 pm
Hi Jim,
Thanks again!
Tom
Jeremy Says:
March 16th, 2006 at 9:49 pm
Any news on when the hotfix will be published? I’m not really looking forward to calling PSS, and would much prefer to download the fix if possible.
Thanks…
Thomas Shinder Says:
March 16th, 2006 at 9:53 pm
Hi Jeremy,
Haven’t heard an ETA yet. But it should be relatively soon.
Tom
Marius De Kock Says:
March 21st, 2006 at 10:52 am
Dear Thomas,
I’m having a problem connection to http://www.fieldandtrek.com/
Will this hotfix help with the Error Code 10061: Connection refused error?
I have tested this web site through a non ISA 2004 firewall with success.
Marius
Thomas Shinder Says:
March 21st, 2006 at 10:55 am
Hi Marius,
No, it works fine for me.
Tom
Brien Says:
March 21st, 2006 at 10:59 am
I need the hotfix! Who is PSS? How do I reach them?
Brien
Thomas Shinder Says:
March 21st, 2006 at 11:02 am
Hi Brien,
http://www.microsoft.com/services/microsoftservice...t.mspx
HTH,
Tom
Brien Says:
March 21st, 2006 at 11:33 am
Tom-
Thanks for the link. When I called Professional Services they were not aware of KB Article 915045. PSS was not aware of ISA2K4 Post SP2 hotfixes. How else should I request the hotfix?
Thanks,
Brien
Jim Harrison Says:
March 21st, 2006 at 11:50 am
What is the case number the PSS rep gave you?
I know for a fact that all frontline folks have been advised of this issue and how to provide it.
Use this link:
http://www.microsoft.com/services/microsoftservice...a.mspx
..to locate your local PSS folks.
Thomas Shinder Says:
March 21st, 2006 at 11:51 am
Hi Jim,
Thanks! I’ve been getting a number of comments like this.
Tom
Jim Harrison Says:
March 21st, 2006 at 11:52 am
FYI:
The problem encountered with http://www.jsw-online.nl/template_jsw/listview.asp...id=39#
..is a completely new issue - Jeroen Busschers gets credit for a new bug…
Brien Says:
March 21st, 2006 at 1:52 pm
OK - on the second call the technician was able to find the hotfix after an exaustive search. The first tech did not appear to look into the matter as requested and replied with “no hotfix available” within seconds. I suggest you implore the technician to look deeply in their database to look for the hotfix - they will find it… eventually.
Thanks for the help!
Brien
Jono Lewis Says:
March 24th, 2006 at 10:25 am
Do you happen to know if there is a patch being created for problems with MusicMatch (both v9 and v10) online music service, and issues with the http compression implementation? Not even sure if it has been submitted to PSS yet, but thought I would ask.
Thomas Shinder Says:
March 26th, 2006 at 2:27 pm
Hi Jono,
I haven’t heard anything about it. Have you tried turning off the compression filter?
Tom
Christopher Says:
March 28th, 2006 at 11:24 am
Our of interest does anyone get this error:
“undefined error type.
java.lang.NullPointerException”
When you attempt to login using ‘any’ account. For example try pretend username: Poo@018294381 password: 222
This error occurs with ISA 2004 Standard with and without SP2.
I’m not sure if I should report this to Microsoft as a bug or not. It ONLY occurs with the ISA product.
Christopher.
Christopher Says:
March 28th, 2006 at 11:25 am
I apologize - I didn’t provide the URL in question: http://www.smartmpaging.ais.co.th.
Christopher.
Thomas Shinder Says:
March 28th, 2006 at 11:28 am
Hi Christopher,
Java apps are well known for not being compliant with authenticating proxies. Confiugure non-compliant Java sites using Direct Access.
HTH,
Tom
Christopher Says:
March 28th, 2006 at 11:29 am
I apologize, I did not include the URL: http://www.smartmpaging.ais.co.th
Christopher Says:
March 28th, 2006 at 11:32 am
Tom,
I have configured direct access for the site but the problem still occurs.
I selected the internal network and modified the web proxy configuration to allow direct access to the www.smartmpaging.ais.co.th site.
Christopher.
Thomas Shinder Says:
March 28th, 2006 at 12:34 pm
Have you confirmed that Direct Access is actual taking place?
icbhthaph Says:
March 29th, 2006 at 11:58 pm
I Have this error ……………
Technical Information (for support personnel)
Error Code: 500 Internal Server Error. The request was rejected by the HTTP filter. Contact your ISA Server administrator. (12217)
Please help me with this issue
Tim Kirk Says:
March 30th, 2006 at 12:27 am
Hi Tom,
Have had the same issue with contacting PSS and them being unwilling or unable to provide me the patch. Is there anyone you can forward my case number too (SRS06033600374)?
Thanks for your help!
Cheers,
Tim
Ivan Says:
March 30th, 2006 at 7:46 am
Someone, please send me that fix to e-mail (admin@rost-tver.ru) - can’t get it from M$.
Thomas Shinder Says:
March 30th, 2006 at 7:59 am
“Hi Tom,
Have had the same issue with contacting PSS and them being unwilling or unable to provide me the patch. Is there anyone you can forward my case number too (SRS06033600374)?
Thanks for your help!
Cheers,
Tim”
Did you forward them to this blog post?
Thanks!
Tom
Thomas Shinder Says:
March 30th, 2006 at 8:02 am
“Ivan Says:
March 30th, 2006 at 7:46 am e
Someone, please send me that fix to e-mail (admin@rost-tver.ru) - can’t get it from M$.
Have you called PSS?
Thanks!
Tom
Matt R. Says:
March 30th, 2006 at 9:42 am
I just called Microsoft and got the initial, no we don’t have that, and then had the rep check further.
The “key” is that the MS Rep MUST use the “hotfix tool” to search for the ISA 2004 Std hotfix. The “hotfix tool” is evidentially the internal term that use to refer to the complete database of hotfixes.
Cheers -Matt
Thomas Shinder Says:
March 30th, 2006 at 9:53 am
Hi Matt,
Thanks for the tip!
Tom
Jim Harrison Says:
March 30th, 2006 at 5:11 pm
Hi Tim,
I’ve gone looking for your case, but that number doesn’t resolve in my PSS case tools. Maybe a typo?
Tim Kirk Says:
March 30th, 2006 at 8:23 pm
Hey Jim,
Unfortunately that’s the number that was provided by MS. Contacted them again today to try and get the patch but still no luck! Even tried to direct them to this blog as per Tom’s suggestion and surprise, surprise they can’t get to isaserver.org. Getting to be a little bit frustrating now, it seems that it’s the luck of the draw of who you manage to speak to that allows you to get the patch! If anyone has been able to get it are they able to e-mail it to me? Address is tk1rk82@gma1l.com (substitute the 1’s for i’s).
Cheers,
Tim
ClintD Says:
March 30th, 2006 at 8:27 pm
Jim - that’s supposed to be SRX06033600374
ClintD Says:
March 30th, 2006 at 8:31 pm
Actually, there is a number missing from that case.
SRX
06 - The year
03 - The month
3x - the date you opened the case - this looks like the missing/incorrect number
600374 - case number starting at 600000 everyday
Tim Kirk Says:
March 30th, 2006 at 10:34 pm
Thanks ClintD. In that case I would assume the case number is SRS060330600374 as it was logged yesterday.
Regards,
TIm
Leo Lazcarez Says:
April 4th, 2006 at 2:18 pm
We still can’t get a hold of this hotfix? I have 12 ISA servers everywhere and I would really love to install SP2.
Leo Lazcarez Says:
April 4th, 2006 at 2:33 pm
It would be easier to have someone post the ISA2004SE-KB915045-x86-ENU.msp file.
Thanks.
Thomas Shinder Says:
April 4th, 2006 at 2:35 pm
You can call PSS. They are working on it still, as there are still a number of issues that are cropping up. You can help them come out with a general release ready product.
Konstantin T Says:
April 10th, 2006 at 2:28 am
Hi,
I have some problems after my update to SP2.
“502 Proxy Error. The HTTP Request includes a non-supported header.” May be some one have hotfix for this problem?
For example web-site : www.delta.com
Christopher Says:
April 10th, 2006 at 9:13 am
Tom,
Regarding the www.smartmpaging.ais.co.th, what needs done to confirm that direct access is occuring?
Christopher.
Thomas Shinder Says:
April 10th, 2006 at 9:48 am
Hi Christopher,
You’ll see that the connections are not being handled by the Web proxy filter in the ISA firewall’s log files.
HTH,
Tom
ElMajdal Says:
April 10th, 2006 at 5:57 pm
As from today , Its Available now from Microsoft,
ISA 2004 SP2 Hotfix , check out this : http://support.microsoft.com/?kbid=915045
Thomas Shinder Says:
April 10th, 2006 at 6:53 pm
Hi Tarek,
Thanks for the update!
Tom
Ben Lambert Says:
April 12th, 2006 at 8:14 am
Thanks for the information on this hotfix!
Thomas Shinder Says:
April 12th, 2006 at 8:15 am
Hi Ben,
You bet!
Thanks!
Tom
Jeremy Says:
April 12th, 2006 at 10:08 pm
I don’t see the hotfix being publicly available yet. I see kb 915045, which points to 916106, which says to contact PSS for the update. Where’s the public download link? Am I blind?
Christopher Says:
April 13th, 2006 at 2:35 am
The hot fix is not available via the aforementioned URL. As stated by Jeremy the link points to http://support.microsoft.com/kb/916106/.
Microsoft continues to require customers contact Microsoft Product Support Services which is similar to dealing with monkeys in a zoo. I’ve spoken with the in country office in Thailand as well as the Singapore office and neither are aware of the update.
Microsoft needs to review its procedures for releasing important fixes of this kind. Their failure to provide (or be aware of) a patch causes great distrust in their customers.
If anyone has a name off a support manager at the Thailand or Singapore office please let me know. I spoke with PSS in the US and they requested I contact PSS in my own country.
I may be missing something but I see no reason the patch cannot be published online.
Jo Lambrecht Says:
April 14th, 2006 at 3:57 am
The correct hotfix is the one reffered to in KB 916106.
That hotfix conseals different other KB articles (915045/915421/915422/916573/917134)
You have to call microsoft PSS and they will send you a mail with a link and a password to download the correct fix.
Important, there are 2 hotfixes with the same KB916106 number, one is for ISA standard edition the other for enterprise edition. Make sure that you mention that when contacting microsoft. (as i recieved first the wrong one)
Installed the hotfix and my problems where solved (problems contacting different website, like delta airlines)
Thomas Shinder Says:
April 14th, 2006 at 6:38 am
Hi Jo,
Thanks!
Tom
Wes Athawes Says:
April 18th, 2006 at 5:57 pm
KB 916106 encompasses all the post install problems that I have with my ISA 2004 SP2 SE. however I am a little bit uncertain about calling PSS in case they wish to charge me several hundred pounds for the privilege. I just find this statement unclear
“Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.”
Does anybody know if this will become available via Windows Update anytime soon? I am a little bit annoyed that a solution to a problem MS has created should incur the user money even a Premium rate phonecall. May be’s just don’t sit well with me.
Cheers
Wes
Thomas Shinder Says:
April 18th, 2006 at 6:04 pm
Hi Wes,
You will NOT be charged. They just want to keep track of the hotfix and make sure they can follow up to improve quality.
HTH,
Tom
Wes Athawes Says:
April 18th, 2006 at 7:10 pm
Thanks Tom, I will give it a go.
Wes
Scott Says:
April 24th, 2006 at 2:43 pm
Just applied teh hotfix 916106 and it resolved our issues.
Thanks to Jim and Tom for there hard work.
Martin M. Says:
May 15th, 2007 at 7:47 pm
I have applied SP2 + hotfix 916106 and still get errors with some websites;
Can you guys give a try to this link?: http://www.stm.info/sommaire.htm
Thanks for your help,
Martin
chalapathi Says:
May 23rd, 2007 at 2:39 am
Hi! any one help me
When i open gmail that isa server 2006 block this site
Network Access Message: The page cannot be displayed
Technical Information (for Support personnel)
Error Code: 502 Proxy Error. Connection refused(10061)
IP Address: 127.0.0.1
Date: 5/23/2003 8:37:44 AM [GMT]
Server: ISAServer
Source: proxy