Reinstalling in new location with .4.9 - comments and question

[Ben M Johnson]

Setup Wizard Suggestions

-When changing IP scheme from 192.168.75.x to anything different, have the boxes change automatically via javascript when you change the routers IP so the user

-Set timezone/time

-prompt to add CCO ID

-Need to set expectations on how long the box takes to restart after setup wizard

-IE Support only?? What?? 

- Setup wizard failed (NO DHCP, couldn't ping device) first attempt in chrome on Mac.  2nd attempt in firefox worked on Mac.  Had to reset to default.

Typos

-security dashboard - typo in license status

- browser warning - space between ie and 8

Question:

What is the URL for SSLVPN users to login with?  Not clear from help documents or from interface.  The SA500 gave the URL in the SSLVPN Config

[Ben M Johnson]

URL Filtering - By typing in https:// instead of http:// you bypass blocking.  This is a big issue.

[Ben M Johnson]

ok found my answer to my question:

Users can access the SSL VPN portal via a web browser from the WAN side by using the HTTPS protocol. You must first enable the SSL VPN feature on the security appliance and then enter the entire address pair “Gateway IP address:Gateway port number” in the address bar to access the SSL VPN portal.

.

[Ben M Johnson]

DNSMasq Issue??

Facebook.com and other domains (none of them blocked by name or by category, and I even turned all security services off and restarted, basically stopped working.

The only fix that worked was to change my DNS server on my mac from the ISA To google's DNS.  It appears there is some issue with DNSMasq (don't see where to turn this on or off?).

Note that I could ping facebook.com fine, but could not browse to it.

After changing my DNS server web browsing subjectively seems faster as well.

[Ben M Johnson]

I had to pull the device - installed at my house to do a site to site to the office and the internet would not stay up consistently. 

I'm going to have to wait on another firmware update to even test it was so bad.

Even with alternate DNS in place, frequently 10+ times hours the internet would drop (comcast 30mb connection, dhcp wan).

I read through the release notes and don't see anything related to this in there.  The only settings I changed were the IP and network to something besides 192.168.75.1.  I activated security services that are supported now, and did a few tests .

Happy to troubleshoot more if we need to - I think you guys have my email/phone number.

[juliomar]

Hi Ben,

Thanks for all the feedback.

We do have an open bug on this issue- recently discovered. CSCtw47700.   Can you provide me the topology you are using at the site with comcast cable, along with the ISA500's configuration file and cable modem make and model?

I filed a bug for typo on browser warning - IE8 needs space before "8".

As far as the DNS issue you see, is your ISA set to obtain DNS server information automatically from your cable modem? or are you manually entering the DNS servers?  Did the issue occur after enabling security services or was internet name resolution always failing for your mac?  Were other machines/devices experiencing same behavior? 

Best regards,

Julio

[Ben M Johnson]

I will get further info and post tonight.

Here's what I can retrieve from my brain:

Topology is Comcast Docsis 3 Cable modem directly hooked up to ISA570w on wan1 - wan IP and dns DHCP. Wired and wireless clients.

Experienced up/down internet on multiple hosts on network. The DNS issue didn't seem consistent across different hosts, but all had issues with name resolution (different hostnames would work/not work - but they would resolve). DNS issue could be rooted in the internet going in and out issue.

Disabling all security services and restarting made no difference.

[Ben M Johnson]

Hardware Information

System:	ARRIS DOCSIS 3.0 / PacketCable 1.5 Touchstone Telephony Modem HW_REV: 3 VENDOR: Arris Interactive, L.L.C. BOOTR: 1.2.1.25 SW_REV: 7.1.103 MODEL: TM722G
Serial Number:	B3XBPG4BN379950
Battery Charger FW Rev:	02.20
Options:

Firmware Build and Revisions

Firmware Name:	TS0701103_100810_MODEL_7
Firmware Build Time:	Fri Oct 8 18:02:43 EDT 2010

[juliomar]

Hi Ben,

Thanks for your information. The dev team is aware of issue, and is working on root causing it.  If this version of firmware is preventing you from testing certain scenarios, you can revert your firmware to version 0.4.5, which did not have this issue according to dev test.  However, the older version of firmware has some functionality limited and other unresolved issues such as SSL VPN which work on 0.4.9.

Best regards,

Julio