We have had numerous issues with this with our clients. I thought I
would publish the solution:
SP5 has changed the way XPUs and updates are downloaded. This has
introduced a problem for those people using proxies, proxy-firewalls, or
Internet-content filters (like websense).
When something is downloaded over HTTP, it has a content-type associated
to it. Common types are "application\msword" or "image\jpg".
When Site Protector connects to the ISS site, the communications use a
non-standard content-type for their XPU updates and downloads. If you
use a proxy firewall, proxy device, or are doing any content-type
restrictions though an Internet content device, ISS's XPU updates will
fail because of this unusual content type.
The content type ISS is using is "application\octect-stream"
The standard content type is "application\octet-stream"
Many firewalls and proxy devices will not recognize this content type.
As such, they will block it. You may need to reconfigure your
proxy/firewall to allow this content type. If your firewall or proxy
servers do not do any blocking based on content type, then this issue
should not be a problem for you.
XPU updates also do not happen exclusively over port 443. Site Protector
downloads information off the ISS site first using regular old HTTP.
Then it switches over the HTTPS for the actual downloads.
___________________________________
Andrew Plato, CISSP
President/Principal Consultant
ANITIAN ENTERPRISE SECURITY
3800 SW Cedar Hills Blvd, Suite 298
Beaverton, OR 97005
503-644-5656 Office
503-214-8069 Fax
503-201-0821 Mobile
www.anitian.com
___________________________________
GPG fingerprint: 16E6 C5B0 B6CB F287 776E E9A9 AF47 9914 3582 633D
GPG public key available at: http://www.anitian.com/corp/keys.htm
<blocked::http://www.anitian.com/corp/keys.htm>
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
