This issue is with a Windows desktop that sits behind a Microsoft 2006 ISA Server. The issue we are having is our Deputy

This issue is with a Windows desktop that sits behind a Microsoft 2006 ISA Server. The issue we are having is our Deputy

Chief of Police receives an email with some embedded links to the Naylor/Nxtbook web site with pointers to certain documents.



Here is one of them:
http://tracking.naylorcampaigns.com/track?

type=click&mailingid=527413&messageid=527413&databaseid=527413&serial=1202938130&emailid=bxxxxx@xxxxx.xxxxx.sk.ca&userid=1192

04&extra=&&&2053&&&http://www.nxtbook.com/nxtbooks/naylor/CPIM0812/index.php?startid=24

When he clicks the link a screen comes up saying Naylor Print, Online and Event Solutions for Associations and it goes no

farther. If we try the link on a computer that is not behind a firewall the link works.

When we trace the network traffic using Microsoft's Network Monitor on our ISA Server firewall the last request we see is

for:
http://pages.nxtbook.com/crossdomain.xml
and after that there is no traffic. The ISA server indicates a web site time out.

While watching the traffic using network monitor we see the following:
http://www.nxtbook.com/nxtbooks/naylor/CPIM0812/assets/naylor2011_loader_as3.swf
This results in a display of the Naylor Print, Online and Event Solutions for Associations on both the computer behind the

firewall and without a firewall

The next thing we see on the ISA Server/Firewall is the request for this page:
http://pages.nxtbook.com/crossdomain.xml
which eventually results in a timeout.

On the client that is not behind a firewall we see this:
°çTpPA.!pΏ...E..î34@.?.鲬..gJ}â.ÊÓ.P¸.ê..ëÇ)P.A7Gé..GET /__utm.gif?

utmwv=5.3.4&utms=1&utmn=99717177&utmhn=www.nxtbook.com&utmcs=utf-8&utmsr=1280x800&utmvp=1276x569&utmsc=32-bit&utmul=en-

us&utmje=1&utmfl=11.3%20r300&utmdt=The%20Police%20Chief%20-%20August%202012%20-%20Insider's%20Guide&utmhid=2062711485&utmr=-

&utmp=%2Fnxtbooks%2Fnaylor%2FCPIM0812%2Findex.php%3Fstartid%3D24&utmac=UA-319622-1&utmcc=__utma%

3D32021985.474053566.1345222324.1345222324.1345478348.2%3B%2B__utmz%3D32021985.1345222324.1.1.utmcsr%3D(direct)%7Cutmccn%3D

(direct)%7Cutmcmd%3D(none)%3B&utmu=qBC~ HTTP/1.1..Accept: */*..Referer:

http://www.nxtbook.com/nxtbooks/naylor/CPIM0812/index.php?startid=24..Accept-Language: en-us..UA-CPU: x86..Accept-Encoding:

gzip, deflate..User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0;

InfoPath.1; OfficeLiveConnector.1.3; OfficeLivePatch.0.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618; .NET4.0C)..Host:

www.google-analytics.com..Connection: Keep-Alive....

and than this:

°çTpPA.!pΏ...E...36@.?.7/¬..gBë?.ÊÔ.P´??±.[ïP.A7Ú÷..GET /b/ss/nxt3afe0c70031a2aca661a636b9b7a4cdc/0/FAS-3.4.6-

AS3/s13055939641781?AQB=1&ndh=1&t=20/7/2012%209%3A59%3A13%201%20360&ce=UTF-8&ns=nxtbookmedia&pageName=CPIM0812%3A24&g=http%

3A//www.nxtbook.com/nxtbooks/naylor/CPIM0812/index.php%3Fstartid%3D24&ch=NXTbook%20Media&events=event2%2Cevent6%2Cevent4%

2Cevent4&products=%3Blogo_nxtright%3B%3B%3Bevent4%3D1%2C%3Blogo_right%3B%3B%3Bevent4%

3D1&c1=naylor&v1=naylor&c2=CPIM0812&v2=CPIM0812&c3=The%20Police%20Chief%20-%20August%202012&v3=The%20Police%20Chief%20-%

20August%202012&c4=Insider%27s%20Guide&v4=Insider%27s%20Guide&c5=magazine&v5=magazine&c6=Desktop%20Browser&v6=Desktop%

20Browser&v11=CPIM0812%3A24&v12=NXTbook%20Media&c14=24&v14=24&c19=normal&v19=normal&s=1280x800&AQE=1 HTTP/1.1..Accept:

*/*..Accept-Language: en-US..x-flash-version: 11,3,300,271..UA-CPU: x86..Accept-Encoding: gzip, deflate..User-Agent:

Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; InfoPath.1;

OfficeLiveConnector.1.3; OfficeLivePatch.0.0; .NET CLR 3.5.30729; .NET CLR 3.0.30618; .NET4.0C)..Host:

metrics.nxtbook.com..Connection: Keep-Alive..Cookie: __utma=32021985.474053566.1345222324.1345222324.1345478348.2;

__utmz=32021985.1345222324.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=

Followed by:

http://www.nxtbook.com/nxtbooks/naylor/CPIM0812/highres/ipolicechiefaugust2012_p0024.xml
which seems to result in a display.

My suspicion is that there is some kind of issue in the crossdomain.xml. Maybe it is missing a web site or something like

that.


We have had this issue before with another web site and when we talked to the web site developer about it he was able to fix

the issue.

Thanks for all your help on this matter. Don Steffenson, dsteffens@police.regina.sk.ca, 306-777-6432