Welcome to ISAserver.org

Firewall Client and XP SP2 issues

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Firewall Client >> Firewall Client and XP SP2 issues

Page: [1]

Message

<< Older Topic Newer Topic >>

Firewall Client and XP SP2 issues - 12.Jan.2005 4:13:00 PM

Guest

I have had my ISA 2004 firewall up and running for about four months with great results. About two weeks ago I finally broke down and installed Windows XP service pack 2. Now I am having nothing but trouble with the ISA firewall client. It is very very slow returning WebPages. I am assuming it is an issue with IE6 because I have no problems when I either disable the ISA firewall client and remove the "Auto Detect proxy" setting in IE6 and set the proxy setting by hand or use a different browser like Firefox. I have seen this post several times on this site and other sites and no one seems to have an answer to this issue. I have seen enough people with the same issue after applying XP SP2 that if it is a configuration problem on my end that it must be a common configuration mistake many others are making. Again, I know the problem goes away if I turn off the firewall client and manually configure the Proxy settings with no Auto-Detect, access the internet with a pre-SP2 machine (XP running SP1), or use different browser such as firefox. None of these solutions are a acceptable solution to getting the ISA firewall client to work with a IE6 SP2 XP Machine the way it is supposed to work. If anyone has any suggestions to where I might start to fix this issue I would really appriate your advice. I have tried monitoring traffic when this issue occurs and I don�t see anything out of the ordinary. Thanks in advance for any help. William

Post #: 1

Featured Links*

RE: Firewall Client and XP SP2 issues - 14.Jan.2005 12:09:00 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi William,

This is an interesting problem, as I've never seen it, and I see a LOT of Firewall client/Web Proxy clients (I always use them for hightened security and performance).

I have a lot of issues with XP SP2, but not this one. Do you see the same problem when you manually configure the Firewall client to use the IP address of the ISA firewall?

Thanks!
Tom

(in reply to Guest)

Post #: 2

RE: Firewall Client and XP SP2 issues - 20.Jan.2005 8:17:00 PM

spigot66

Posts: 8
Joined: 20.Dec.2004
From: Connecticut
Status: offline

I am experiencing the exact same problem. Opening any web page begins with a 5-10 second delay, followed by a successful loading of the page.

Configuring the computer as a Web Proxy Client results in immediate page loads. This is not a solution though, just a workaround.

(in reply to Guest)

Post #: 3

RE: Firewall Client and XP SP2 issues - 20.Jan.2005 8:47:00 PM

Guest

Thanks for the reply Tom. If I configure the proxy setting manually and disable the ISA firewall client the pages will load right away without delay. Thanks. William

(in reply to Guest)

Post #: 4

RE: Firewall Client and XP SP2 issues - 20.Jan.2005 8:56:00 PM

Guest

Sorry Tom I didn't answer the question in my post. The answer is no. If I manually type in the ISA server ip address in the firewall client it doesn't make a difference. Thanks. William

(in reply to Guest)

Post #: 5

RE: Firewall Client and XP SP2 issues - 20.Jan.2005 9:15:00 PM

penrose.l@2college.nl

Posts: 474
Joined: 29.Jan.2004
From: Netherlands
Status: offline

Hi William ,

disable the SP2 Firewall of XP.

Lex P

(in reply to Guest)

Post #: 6

RE: Firewall Client and XP SP2 issues - 20.Jan.2005 10:22:00 PM

spigot66

Posts: 8
Joined: 20.Dec.2004
From: Connecticut
Status: offline

Lex,

If SP2 is what is causing the "delay" issue with the Firewall Client, then disabling the Windows Firewall will certainly make the problem go away, but that is not a good solution. I'd like my mobile users to use the Windows Firewall and it is forced on via Group Policy.

The reason I want to use the Firewall Client and not the Proxy Client is that it is easier for the mobile users to disable/enable the Firewall Client via the taskbar than it is for them to reconfigure the IE Proxy setting whenever they are in the office, on the road or in a remote office.

This is beginning to sound like a bug in SP2 to me.

Thanks

(in reply to Guest)

Post #: 7

RE: Firewall Client and XP SP2 issues - 20.Jan.2005 10:39:00 PM

penrose.l@2college.nl

Posts: 474
Joined: 29.Jan.2004
From: Netherlands
Status: offline

have you enabled traffic to your clients ( SP2 firewall ) for the firewall client TCP port ?
Prolly something else is blocked also , view the eventlog maybe it will give any clues.

LexP.

(in reply to Guest)

Post #: 8

RE: Firewall Client and XP SP2 issues - 21.Jan.2005 3:53:00 AM

Guest

I think that spigot66 is correct that it is an issue with XP SP2 and that disabling the firewall client is not a good work around. It is a work around but not a good one. Thanks William.

(in reply to Guest)

Post #: 9

RE: Firewall Client and XP SP2 issues - 21.Jan.2005 6:53:00 AM

Guest

Could this be an issue with the ISA Web Proxy filter instead of the actual ISA firewall client?

(in reply to Guest)

Post #: 10

RE: Firewall Client and XP SP2 issues - 21.Jan.2005 3:46:00 PM

spigot66

Posts: 8
Joined: 20.Dec.2004
From: Connecticut
Status: offline

William,

What do you mean by "web proxy filter"? From what I can tell, if I set up the computer to be a Web Proxy client, browsing works as expected.

As a Firewall Client, browsing still works, there is just an annoying 5-10 second delay whenever you call up a different site. Almost as if it is having problems with name resolution, but since it does eventually call up the web page that can't be the case. Also, once inside a web site, the delay does not exist while you browse to different pages within the same site.

I've also determined that it is not an XP SP2 issue, the same problem occurs on virtual machines running XP SP1 and Win 2000 SP4. Hence it must be a problem with ISA Server 2000.

Since this problem only cropped up recently (month or two ago), it was probably introduced through one of the many Windows Updates that have been applied. I am running ISA 2000 SP2 on Windows Server 2003.

Any help from the Gurus would be much appreciated.

(in reply to Guest)

Post #: 11

RE: Firewall Client and XP SP2 issues - 25.Feb.2005 12:25:00 PM

Guest

I have just been suffering a similar problem that only seems to have affected Windows XP machines. My first port of call was to disable both options under the "Automatic Configuration" section in Internet Options.

http://ISA:8080/array.dll?Get.Routing.Script is no longer requested prior to anything happening.

I didn't have time to set up a protocol analyser on the machine suffering the problem as it needed to be fixed as soon as possible. Admittedly, as of right now I don't know what effect removing the Automatic Configuration section will have on performance or otherwise so I will have to go away and research the "point" to that section. Unless anyone wants to save me the trouble and or slap my hands for being naughty/stupid for removing it?

Settings now are as follows:

WinXP SP2
Automatic Config disabled (both boxes unchecked)
Proxy enabled (bypass for local also enabled)
Firewall client installed/enabled.

And everything works just fine. All settings are applied at domain level via Group Policy.

(in reply to Guest)

Post #: 12

RE: Firewall Client and XP SP2 issues - 25.Feb.2005 12:42:00 PM

Guest

One last thing I forgot to add was that Windows Firewall is disabled (via Group Policy) though I don't believe this would have any effect on the issue at all.

As mentioned before I couldn't install a protocol analyser on the machine affected since I am in a production environment and needed to get the PC operational ASAP, however, if the next person that finds this topic wishes to see where the problem might lie you could download:

http://winpcap.polito.it - Install this first!
http://www.ethereal.com - Install second

Might it have something to do with Data Execution Prevention (DEP) under System Properties > Advanced > Performance Settings > DEP ?

Perhaps it just takes a while to classify the array.dll as being OK to execute?

All wild assumptions but worthy of note I'm sure.

(in reply to Guest)

Post #: 13

RE: Firewall Client and XP SP2 issues - 7.Mar.2005 4:13:00 PM

Guest

Same problem whit Microsoft Proxy server 2. the pages loads slowly whit ie 6 and winsock proxy client enabled, but whit manual config no delays.

No problems whit others until i enable upnp (as i read in microsoft) now no one browser works fine.

If i dissable firewall in sp2 don't get a better performance.

(in reply to Guest)

Post #: 14

RE: Firewall Client and XP SP2 issues - 25.Mar.2005 8:34:00 AM

Guest

If you use another browser, for example Mozilla Firefox, you have not this problem.
So I think that the problem is I.E. 6.

(in reply to Guest)

Post #: 15