You Can Retrieve Cached Content That Is Blocked by Using a Downstream Server (313419)



The information in this article applies to:

  • Microsoft Internet Security and Acceleration Server 2000

This article was previously published under Q313419

SYMPTOMS

On a downstream server that is running Internet Security and Acceleration (ISA) Server, you can retrieve any content that is cached on an upstream server. Because of this behavior, you can view content that is only available to other users or groups. The following scenario is an example of this behavior:
  • You configure the ISA Server-based downstream server to use the upstream server to fulfill Internet requests.
  • The downstream server does not do any authentication for outbound requests.
  • You configure the upstream server to only allow "User1" to access www.company_name.com.
In this scenario, after User1 has accessed www.company_name.com (and the site's content has been cached), if you request www.company_name.com from the downstream server, your request is fulfilled.

RESOLUTION

To resolve this problem, obtain latest service pack for ISA Server 2000. For additional information about the latest service pack, click the article number below to view the article in the Microsoft Knowledge Base:

313139 How to Obtain the Latest Internet Security and Acceleration Server 2000 Service Pack

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

This problem was corrected in ISA Server 2000 SP1.

Modification Type:MajorLast Reviewed:8/6/2002
Keywords:kbbug kbenv kbISAServ2000sp1fix KB313419