browser troubleshooting gui dev 5

=

Browser Troubleshooting Guide w/IE8 v5

Last updated: 05/05/2010

You may experience web browser issues/problems/questions when you are working in Domino Web Access-iNotes (DWA webmail), Sametime Online Meetings, or the eCenter. To minimize potential issues, please update your web browser settings, as applicable, described below.

FAA Policy Statement (1/26/2007): The FAA CIO and the Vice President for Acquisition and Business Services require that all Lines of Business (LOBs) and Staff Offices (SOs) to refrain from acquiring Microsoft's "Vista" operating system, Office 2007, and Internet Explorer 7. These three products are currently not supported by NexGen. The current FAA standards are the Microsoft XP operating system, Office 2003, and Internet Explorer 6.

DWA-iNotes Requirements

Client RequirementRecommended for better performance:

Windows - Pentium IV 1.5 GHz machine with 512 MB of memory

Macintosh - G4 1.5 GHz machine with 512 MB of memory

Supported Operating Systems/BrowsersDWA version 6.X.X is supported by Windows 2000 or Windows 2000 Professional

Windows XP or Windows XP Professional or Vista

DWA version 8.0.x and higher is supported/compatible with Windows XP and Vista

Internet Explorer 6, 7, and 8 (Win32) for DWA802 and DWA7

Mozilla 1.7.x (Linux clients only)

Mozilla Firefox 2.0.0.13 or later, 3.0.x and 3.5 on Win32, Linux Desktop 5.0 and

Macintosh 10.4 and 10.5 (supported by the DWA802 mail template only; not supported by iNotes6 templates and does not support Lotus Sametime awareness)IE version 6.0.2900.2180 with Sun Java version 1.6.0(Build 1.6.0_02-B06) for iNotes6

IE version 7.0.5730.11 with Sun Java version 1.6.0. To access all DWA features:

1. Uninstall IE7 then restart your computer2. After your computer has restarted, login and install Java version 1.6.03. Restart your computer again then login and install IE version 7

Adobe Acrobat Reader, Version 4.0 or higher to print calendars. Adobe Acrobat Reader, Version 6.0 is not supported.

Domino Web Access will not work if JavaScript or if session cookies have been disabled.

General - Windows Configuration Settings for DWA-iNotes

The table below describes DWA-iNotes issues that have occurred and the resolution (if any).Issue Resolution Add'l

InfoData Retrieval Error Resolved: Typically this is because the user has the "Do not save

encrypted pages to disk" property enabled in Internet Explorer. This setting can be disabled by going to Tools, Internet Options, Advanced tab. Scroll through the properties. This setting should be under heading of Security.

Domino Web Access Warning Error

Resolved: This warning occurs for various reasons and is specific to the user's mail file. Follow these steps to resolve the problem.

Modify HTTP 1.1 SettingValidate that the user's Internet Explorer browser is configured to use 1."HTTP 1.1" (persistent connections). Domino does not support persistent connections. To disable the persistent connection setting in Internet Explorer, select 2.Tools ->Internet Options -> Advanced. Scroll to the HTTP 1.1 settings and disable (de-select) the "Use HTTP 1.1" and "Use HTTP 1.1 through proxy connections" options.If the error still displays, please refer to the Add'l Info Link.3.

Windows XP SP2 Pop-up Blocker prevents proper Domino Web Access operation

Resolution: This XP SP automatically loads a popup blocker. Here is how to allow for them in the FAA environment.

Launch Internet Explorer (IE) browser and go to 'Tools, Pop-up 1.Blocker, Pop-up Blocker Settings'From the 'Pop-up Blocker Settings' dialog, type http://*.faa.gov in 2.the "Address of Web site to allow" field. Click the Add button.In the 'Allowed sites' section, *.faa.gov will now be listed. The 3.pop-up blocker will now permit pop-ups from all host names accessed via IE with .faa.gov address. Click the Close button and restart IE.

Chat in DWA does not show the text with some users that are using Internet Explorer 8. The IE8 user cannot send or receive chats as well as not see the text sent.

Resolution: In this particular case, installing the following security update for Internet Explorer resolved the issue:

"Cumulative Security Update for Internet Explorer 8 for Windows XP (KB978207)" http://support.microsoft.com/kb/978207. This issue is also resolved if you upgrade to Windows XP Professional SP3 or Windows Vista SP1, when using Internet Explorer 8.

While attempting to run Java based applet or application, a "Warning - Security: Java has discovered application components that could indicate a security concern" dialog displays for users when in DWA Full mode or when attending Sametime Meetings.

Resolution: Signed Java Web Start applications and applets that contain signed and unsigned components could potentially be unsafe unless the mixed code was intended by the application vendor. As of the Java SE 6 Update 19 release, when a program contains both signed and unsigned components, a warning dialog is raised. This is similar behavior experienced with the new IE8 browser with mixed content. However, this prompt appears with both IE6 and IE8 when the java version is 1.6.0.19 and above.

If the user clicks the No button in the Warning - Secuirty dialog, the application or applet continues execution. In our environment, users should click "No"

403 Forbidden Error Message when using the AxxMailclsx.faa.gov URL

Resolution: This is caused by the RPS not finding a proxy rule to accomodate capital letters in the mail file location field in Person documents in the FAA's Address Book, as a result the mail file is not found.

The Person document should be edited and the capital letters in the Mail file field replaced with lower case letters. After that the mail file opens without error. NOS is aware of this problem and is working on a solution to this issue. In the meantime, when a user has this problem, edit the Mail file field in their Person document and ensure that it appears in all lowercase letters.

Error: "Domino Web Access Warning. Sorry, we are unable to process your request at this time. If you are unable to continue working in your mail file, please dismiss this warning and select View, Refresh from your browser's menu."

Resolution: This error may be caused by pop-up blockers (Windows or Third Party Blocking Tools) installed on the machine or configuration settings.

Ensure that *.faa.gov is added to the exception list. If this issue continues please reference the browser configuration settings later in this document .

Internet Explorer 8 Security Warning

Internet Explorer 8 (IE8) displays a Certificate Error message stating that there is a problem with the website’s security certificate each time a direct URL, the NexGen eCenter, DWA-iNotes or Sametime Meeting is accessed from inside or outside of the FAA firewall/network.

The IE8 Security Alert displays. This is the same Security Alert received in IE6 (see below).

IE8 Security Alert

IE 6 Security Alert

In IE8, if you click Continue to this website (not recommended), the certificate will be accepted and trusted for your browser session. If you choose to exit IE8 and start a new session, the next time the message appears, choose Continue to this website (not recommended).

The new security alert for IE8 is no longer a pop-up for un-trusted CA’s as in IE6. It is displayed as a page. This behavior exhibits because the CA is not a trusted source. For example Verisign is a popular SSL CA. IE will not prompt to validate them as a CA because they are already stored as a trusted CA authority by default. Since the FAA is in itself, a CA authority IE8 looks at it with caution. This is done because it is easy for phishers to also mimic and become their own CA authority. Where as a CA such as Verisign is a global CA and costly to purchase and validate.

Resolution:

Follow the steps below to import the FAA certificate into IE8 as a trusted CA source.

1. Click Continue to this website (not recommended).

2. Click Certificate Error; then click View certificates.

3. Click the Certification Path tab and select the FAA Lotus Certificate Authority. Next, click View Certificate.

4. Click Install Certificate

5. When the Certificate Import Wizard appears, click Next.

6. Choose Place all certificates in the following store then click Browse to specify a certificate store location. From the Select Certificate Store list, select Trusted Root Certification Authorities and click OK. Click Next to proceed.

7. Click Finish to complete the Certificate Import Wizard.

8. When the Security Warning displays, click Yes to proceed with the installation of the certificate.

9. Click OK when prompted then click OK again to close all open browser windows.

10. Re-launch IE8 and open the FAA URL again.

The FAA is now a trusted CA authority. The only caveat to this method is that the certificate date will eventually expire or the CA may change. If either of these happen this procedure will be need to be repeated.

Internet Explorer 7 Security Alert

Internet Explorer 7 (IE7) displays a Certificate Error message stating that there is a problem with the website’s security certificate each time a direct URL, the NexGen eCenter, DWA or Sametime Meeting is accessed from inside or outside of the FAA firewall/network.

The IE7 Security Alert displays. This is the same Security Alert received in IE6 (see below).

IE7 Security Alert

IE 6 Security Alert

In IE7, if you choose to click Continue to this website (not recommended), the certificate will be accepted and trusted for your browser session. If you choose to exit IE7 and start a new session, when the message appears again choose Continue to this website (not recommended).

The new security alert for IE7 is no longer a pop-up for un-trusted CA’s as in IE6. It is displayed as a page. This behavior exhibits because the CA is not a trusted source. For example Verisign is a popular SSL CA. IE will not prompt to validate them as a CA because they are already stored as a trusted CA authority by default. Since the FAA is in itself, a CA authority IE7 looks at it with caution. This is done because it is easy for phishers to also mimic and become their own CA authority. Where as a CA such as Verisign is a global CA and costly to purchase and validate.

Resolution:

Follow the steps below to import the FAA certificate into IE7 as a trusted CA source.

1. Click Continue to this website (not recommended).

2. Click Certificate Error; then click View certificates.

3. Click the Certification Path tab and select the FAA Lotus Certificate Authority. Next, click View Certificate.

4. Click Install Certificate

5. When the Certificate Import Wizard appears, click Next.

6. Choose Place all certificates in the following store then click Browse to specify a certificate store location. From the Select Certificate Store list, select Trusted Root Certification Authorities and click OK. Click Next to proceed.

7. Click Finish to complete the Certificate Import Wizard.

8. When the Security Warning displays, click Yes to proceed with the installation of the certificate.

9. Click OK when prompted then click OK again to close all open browser windows.

10. Re-launch IE7 and open the FAA URL again.

The FAA is now a trusted CA authority. The only caveat to this method is that the certificate date will eventually expire or the CA may change. If either of these happen this procedure will be need to be repeated.

Internet Explorer Configuration Settings for DWA 6..5.x

Recommended Internet Explorer 5.5 - 6.0.x (IE) Settings:

1. Choose Tools, Internet Options from the IE menu.

2. If you connect to a proxy server, select the Connections tab to configure proxy exceptions. Click the LAN Settings button. Note: This step only applies to users inside of the FAA firewall.

3. Select the Advanced tab and scroll down to the find the settings to be verified/changed.

Disable "Do not save encrypted pages to disk" property in the advanced settings.

Disable the "Use HTTP 1.1" and "HTTP 1.1 through proxy connections" options under

advanced settings.

4. Select the Security tab and then click the Custom Level button. Navigate to the the ActiveX controls and plug-ins settings. Click Enable below "Automatic prompting for ActiveX controls" and "Download signed ActiveX controls". Click Prompt below "Download unsigned ActiveX controls".

Click OK to accept your changes.

Accessing DWA from Netscape 4.x

If you are using Netscape 4.x, you may see hangs and/or crashes when the Domino Web Access unsupported browser page displays. If you are a Netscape 4.x user and you encounter these problems, follow the instructions provided below.

You can switch from Domino Web Access to WebMail using a URL parameter setting. Use the &ui=argument setting to switch between Domino Access and WebMail.

To open your mail with the WebMail user interface add the text bolded below to the URL address, for example: http://awamail3.faa.gov/mail0/jsmith.nsf?OpenDatabase&ui=webmail

Netscape 7.1 Configuration Settings for DWA

Netscape version 7.1 comes with a built-in utility, which will help block unwanted pop-up windows.

Open the Netscape browser. 1.At the top menu bar, Click Edit and select Preferences, a new window will open. 2.Click the Privacy & Security category.3.Select Popup Window....4.

5. On the right side of the window you will see "Popup Window Controls". 6. Click the "Block unrequested popup windows" checkbox. 7. Click the Allowed sites button.

9. Type the domain name or full address of the sites you wish to allow pop-ups from, example: *.faa.gov/ .10. Click Add.

Mozilla Firefox Configuration for DWA

The Mozilla Firefox browser by default allows all pop-ups. Verify the settings and add the "*.faa.gov" web site as an unblocked site.

Select the Tools menu. 1.Select Options. 2.Select Web Features. 3.Click "Block Popup Windows" so that a checkmark appears in the checkbox. 4.Click Add Site. 5.Verify our web site in your browser address bar, example *.faa.gov/.6.Type in the web address from your browser and click OK. 7.Click OK to when prompted to save the changes. 8.

MSN Pop-up Guard Configuration for DWA

MSN Pop-up Guard is part of the MSN Tool bar for Internet Explorer. By default it blocks all pop-ups.

Click on the black down arrow on the pop-up blocker. 1.Click Allow Pop-ups for this Site.2.

Google Tool Bar Configuration for DWA

The Google tool bar is an add-on that integrates into your Browser. When the pop-up blocker

intercepts an incoming ad, your cursor changes briefly to look like this: .

The pop-up blocker button displays this icon along with a count of the number of pop-ups 1.blocked since the last Toolbar installation. To let a pop-up through on a one-time basis, press and hold the CTRL key as you click on a 2.link to navigate to a new page. The pop-up blocker can be told to remember these sites so pop-up windows are allowed to 3.launch. This information is stored on your computer in what's known as a "whitelist". While connected to the *.FAA.gov site, click the pop-up blocker button to add that site to 4.your whitelist. (Note: The whitelist is never actually displayed.)

Yahoo Tool Bar Configuration for DWA

The Yahoo toolbar for Internet Explorer is included within the Macromedia downloads. You may not know that you have downloaded it when installing the Shockwave or the Flash Player. By default the Yahoo toolbar blocks all pop-ups. If the pop-up blocker is enabled, this will prevent DWA and Sametime from running. The toolbar keeps a list of sites of blocked pop-ups and allows you to choose sites that you want to allow pop-ups.

Click the button .1.Select from Always Allow Pop-ups From... 2.Select the site "FAA.gov" from the sources of Recently Blocked Pop-Ups list and click Allow. 3.

Zone Alarm Configuration for DWA

Zone Alarm Pro includes Ad Blocking.

To disable Zone Alarm Ad Blocking, navigate to Privacy/Main.1.Under Ad Blocking section click Custom.2.Add "FAA.gov" to the Allow List.3.

Norton Internet Security Configuration for DWA

Norton Internet Security 2003 will automatically configure itself upon installation to block pop-ups. Use the Security Assistant to configure Norton Internet Security software to allow our DWA & Sametime to run properly.

Double click the Norton Internet Security icon in your system tray. 1.In the "Settings for" area, check to see if Ad Blocking is turned on. In order for the DWA & 2.Sametime to run, you will need to configure this feature. To configure Ad Blocking select Ad Blocking, and in the right pane click Configure. 3.

4. Add "FAA.gov" to the Allowed List.5. Close the Norton Internet Security options window.

browser troubleshooting gui dev 5

Documents