• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

KB Article 316356 is not very clear...

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 General] >> Server Publishing >> KB Article 316356 is not very clear... Page: [1]
Login
Message << Older Topic   Newer Topic >>
KB Article 316356 is not very clear... - 17.Sep.2003 8:02:00 PM   
piyushp

 

Posts: 10
Joined: 15.Jul.2003
From: Harrisburg
Status: offline
http://support.microsoft.com/?kbid=316356

I've Web Server in Server Publishing mode with ISA server. This means there is only one Active session ( ISA to Web server ) and all the connections from ISA to web server must be using same session. The KB article 316356 discuss issue with ISA Server limits each client to forty SecureNAT mappings. Seems like this is not true as performance log is showing 240 secure NAt mappings which is confusing whereas total connections from ISA to web servers are 451 established ( using Netstat ).
I am trying the tune the performance of ISA and needs some clarification on kb article.

Thanks
Piyush
Post #: 1
RE: KB Article 316356 is not very clear... - 18.Sep.2003 9:05:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Pi,

This issue is only for SecureNAT client connections and DMZ configs when you have configured the downstream to be a SecureNAT client of the upstream. For firewall to Web server connecitons, it not an issue.

HTH,
Tom

(in reply to piyushp)
Post #: 2
RE: KB Article 316356 is not very clear... - 20.Apr.2006 2:20:30 PM   
mthurmond

 

Posts: 5
Joined: 12.Oct.2005
Status: offline
Sorry to bring this back from the dead, but...

Dr. Schinder, do you know where I can find guidance on adjusting this value?  We have implemented an internal ISA2004 caching only proxy service where each internal proxy server is a SecureNAT client on our existing ISA2000 firewall.  Each proxy server processes approximately 150-200 Proxy Requests/second.  As such the 40 connection limit causes any transfer that takes longer than 1-10 seconds (depending on current load) to fail.

PSS has not been helpful on this issue, any guidance you can offer would be appreciated.  Especially what is the valid range for msFPCConnectionQuota?  What can I monitor to determine the correct number for my ISA 2004 proxy servers?

ISA 2000 is scheduled to be retired in 2-3 weeks, but until then I need a workaround.

(in reply to piyushp)
Post #: 3

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 General] >> Server Publishing >> KB Article 316356 is not very clear... Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts