System Center 2007 and ISA 2004
I’ve been going through a few headaches with deploying System Centre alongside ISA 2004.
All of my managed servers/computers were coming up with the following status
MODEL: unkown
Last Contacted: not contacted
Deployments and Inventory: error
After a bit of poking around I worked out it’s related to the windows update service.
One one of the workstations I inspected the WindowsUpdate.log file and came across this entry
Server URL = https://systemcentre.foo.local:8531/SimpleAuthWebService/SimpleAuth.asmx
WARNING: GetAuthorizationCookie failure, error = 0×80244021, soap client error = 10, soap error code = 0, HTTP status code = 502
Browsing from the workstation to https://systemcentre.foo.local:8531/SimpleAuthWebService/SimpleAuth.asmx gave me the error
Error Code: 502 Proxy Error. The specified Secure Sockets Layer (SSL) port is not allowed. ISA Server is not configured to allow SSL requests from this port. Most Web browsers use port 443 for SSL requests. (12204)
To get around this, I installed ISA Tunnel Port Editor and added port 8531 to the SSL tunnel range.