Welcome to ISAserver.org

Slow Browsing Back to Back Perimeter configuration

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Network Infrastructure >> Slow Browsing Back to Back Perimeter configuration

Page: [1]

Message

<< Older Topic Newer Topic >>

Slow Browsing Back to Back Perimeter configuration - 13.Aug.2007 4:59:19 PM

sharpe12

Posts: 34
Joined: 29.Aug.2001
From: Monterrey, NL, Mexico
Status: offline

I have two ISA Server 2006 computers on a back to back perimeter configuration. Recently, in the alert section, ISA01 (front) detects that ISA02 (back) makes many connections (TCP/UDP and HTTP) over limit configured. For this reasons, the same alert shows me the next connections will be restricted. Both ISA Server computers were modified to accept more connections. However, I don't know how many connections would be accepted securely. Could be this parameter the cause that Internet browsing is slow?

Do you have any recommendation about this infrastructure? Any parameters that I need to configure?

Thank you!

Post #: 1

Featured Links*

RE: Slow Browsing Back to Back Perimeter configuration - 14.Aug.2007 11:30:41 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Configure the front end ISA Firewall with exceptions to connection limits for the back end ISA Firewall

Also, make sure the upstream ISA Firewall allow access to all sites for the back end ISA Firewall.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to sharpe12)

Post #: 2

RE: Slow Browsing Back to Back Perimeter configuration - 14.Aug.2007 12:02:12 PM

sharpe12

Posts: 34
Joined: 29.Aug.2001
From: Monterrey, NL, Mexico
Status: offline

Thank you, Tom!

In fact, yesterday I modified the first point that you suggest me, thinking it could be a solution. And the upstream ISA (ISA01) is configured to allow all trafic from ISA02. Is it correct? Or do I need to configure a Web chaining?

Thank you again!

(in reply to tshinder)

Post #: 3

RE: Slow Browsing Back to Back Perimeter configuration - 15.Aug.2007 11:37:36 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Web chaining might improve performance. I've tried it both ways and it was a toss up. You might want to give it a try and see how it works for your environment.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to sharpe12)

Post #: 4