Alert symptom: a remote user requests a page. The request is denied, and the following message is displayed in the browser window: "You have attempted to access a restricted URL. The URL you are trying to access contains an illegal path."
The path of the requested URL was rejected by the URL Inspection engine.
Take the following steps in the Forefront UAG Management console:
1. Open the Advanced Trunk Configuration dialog box and click the URL Set tab.
2. Do one of the following, depending on the rule that caused the failure, as specified in the "Description" filed of the message:
If the rule that caused the failure is "Default rule", use the URL List to add a new rule, or edit one of the existing rules, so that the requested URL is allowed.
If the failure was caused by an existing rule, and the name of the rule is specified in the message’s "Description" field, access the rule in the URL List. In the "URL" column, edit the path of the URL.
Target | Microsoft.Forefront.UAG.Server |
Category | EventCollection |
Enabled | True |
Event_ID | 67 |
Event Source | Microsoft Forefront UAG |
Alert Generate | False |
Remotable | True |
Event Log | Application |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
DS | DataSource | Microsoft.Windows.EventProvider | Default |
WriteToDW | WriteAction | Microsoft.SystemCenter.DataWarehouse.PublishEventData | Default |
<Rule ID="Microsoft.Forefront.UAG.Server.Collection.RuleSetUnauthorizedURL" Enabled="true" Target="Microsoft.Forefront.UAG.Server" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">67</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Microsoft Forefront UAG</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
</WriteActions>
</Rule>