Welcome to ISAserver.org

Slow Internet Access on all client PC's (ISA2004)

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> ISA 2004 SBS >> Slow Internet Access on all client PC's (ISA2004)

Page: [1]

Message

<< Older Topic Newer Topic >>

Slow Internet Access on all client PC's (ISA2004) - 10.Feb.2006 11:10:19 AM

gazza

Posts: 3
Joined: 10.Feb.2006
Status: offline

Hi - My first posting !

We have deployed a number of SBS2003 servers running ISA2004 (SBS 2003 Premium) and all seem to experience quite slow Internet access. If browsing the Internet direct from the server logged on as Administrator, the speed is substantially quicker. We have tried setting the clients as both secure NAT and FWC. Many of the problems seem to be when trying to reach certain online brokerage sites that are secure sites, although not limited to this. Many of these fail, although I think the actual failure is due to timing out because it is so slow. The server conencts to these with no problem. I have read through some old posts here and made some tweaks, but no change. Any ideas?

The config is currently - 2 NICS. One on local LAN using 192.168.1.0 network, the other on a public IP which connects to an ADSL router on the corresponding subnet. The SMTP email MX points to the 2nd NIC. The 1st NIC has no gateway, and the DNS is set to itself. DNS is configured to forward requests to the ADSL router address. The 2nd NIC has it IP address and subnet. DNS is currently set to the local LAN IP. I did try this as blank, but no change.

I would also appreciate some advice on IE settings such as local Cache size settings, whether automatically, never, etc.

It seems like ISA is seriously throttling Internet access to a virtually unuseable speed.

Cheers

Gary

_____________________________

Gary Webb
MCSA:S MCSE:S
CompTIA Security +

Post #: 1

Featured Links*

RE: Slow Internet Access on all client PC's (ISA2004) - 10.Feb.2006 2:21:26 PM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

I have the same problem... I think it's filter related.

(in reply to gazza)

Post #: 2

RE: Slow Internet Access on all client PC's (ISA2004) - 13.Feb.2006 12:49:32 AM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

I have fix the problem....

I just haven't confirmed on what it is exactly because it is busy hours at the moment at work.
It's either bad port on router or switch or bad cable, all that hard work for a stupid little problem

Oh well glad it's over.
CHeck your cabling and ports.

(in reply to Sunny.C)

Post #: 3

RE: Slow Internet Access on all client PC's (ISA2004) - 13.Feb.2006 1:53:29 AM

gazza

Posts: 3
Joined: 10.Feb.2006
Status: offline

Hi. Thanks for the reply. Glad you sorted your problem. Mine is not cable / router related. I am seeing the same issue on many different sites all with different servers and different types of routers. I am convinced that this is something in ISA that needs tweaking.

C'mon - where are all the ISA gurus. Need some help here. Maybe I should use Linux/Squid !?

_____________________________

Gary Webb
MCSA:S MCSE:S
CompTIA Security +

(in reply to Sunny.C)

Post #: 4

RE: Slow Internet Access on all client PC's (ISA2004) - 13.Feb.2006 6:12:14 AM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

Have you check your port on your switch?????
You can try Linux/Squid if you like by you will not be able to do much with it besides a proxy server.

(in reply to gazza)

Post #: 5

RE: Slow Internet Access on all client PC's (ISA2004) - 13.Feb.2006 2:30:14 PM

gazza

Posts: 3
Joined: 10.Feb.2006
Status: offline

Nothing on the switch to check. These are on different sites, using different switches (unmanaged). only the LAN segment is connected to a switch. The only common thing between these sites is the configuration (which is clearly wrong!)

(in reply to Sunny.C)

Post #: 6

RE: Slow Internet Access on all client PC's (ISA2004) - 13.Feb.2006 11:09:07 PM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

Can you send me a diagram of your layout with dns configiration.

(in reply to gazza)

Post #: 7

RE: Slow Internet Access on all client PC's (ISA2004) - 17.Mar.2006 1:11:52 PM

mdnationwide

Posts: 8
Joined: 7.Apr.2005
From: Hampshire, UK
Status: offline

hi all, I've also got the same problem with slow access from client PC's. I have, however, found a work round and possibly the cause!

I've disabled the ISA Firewall Client on the PC, but kept the ISA gateway address in the network configuration and am also still using the proxy server on the ISA and it's considerably quicker.

What I don't know is why!?

Any suggestions?

Thanks

(in reply to Sunny.C)

Post #: 8

RE: Slow Internet Access on all client PC's (ISA2004) - 18.Mar.2006 12:04:13 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hey guys,

some suggestions:

check out the cabling.
check out the 10/100 and half/full duplex setting on the adapters and switches. Tip: avoid as much as possible auto-negotiation unless you like problems.
enable PMTU Discovery: check out http://support.microsoft.com/default.aspx?scid=kb;en-us;902347 for more info.
optimize your DNS infrastucture. Check out the relevant articles on this site.
...

HTH,
Stefaan

(in reply to mdnationwide)

Post #: 9

RE: Slow Internet Access on all client PC's (ISA2004) - 6.Apr.2006 3:31:03 AM

mekaneky

Posts: 95
Joined: 15.Feb.2006
Status: offline

hi everyone ,

to solve slow browsing try that , go to client internet explorer properties and from advanced point to HTTP 1.1 settings and check mark in ( Use HTTP 1.1 through proxy connection )

other thing i think it is important , if you don't have your own DNS server in your network and you use ISP DNS always use internal ISA IP as DNS server for your clients.

(in reply to gazza)

Post #: 10

RE: Slow Internet Access on all client PC's (ISA2004) - 10.Apr.2006 4:46:28 AM

Devy

Posts: 1
Joined: 10.Apr.2006
Status: offline

Hi I have encountered that problem recently also running SBS2003 SP1 with the ISA 2004 installed as part of the service pack.Windows XP Pro SP2 clients.

I resolved it initially by configuring the ISA 2004 Firewall client not to configure proxy settings in the Web Browser.
This restored the expected reponse time for a web site to load from 5 mins to 5 seconds. However every morning when users logon the setting has magically been set back again.

Is this a ISA server configuration for the firewall client like an automatic configuration script?
I still don't understand why the problem arose in the first place. Before the upgrade with SP1 for SBS they used the older Firewall client without experiencing this issue. Any light you can shed on these issues is appreciated.

TIA

Jason

(in reply to mekaneky)

Post #: 11

RE: Slow Internet Access on all client PC's (ISA2004) - 20.Apr.2006 9:44:52 AM

sebjoh

Posts: 1
Joined: 20.Apr.2006
Status: offline

I have discovered that some configuration changes that is made on clients are resetted by a setup and update program, runned by the default login script. It can be disabled, simply by putting "REM" in front of the comman line in the login script.

Ex:
REM \\TTSAB-SERVER\Clients\Setup\setup.exe /s TTSAB-SERVER

_____________________________

Mr Sebastian Johansson
sebastian@tjornstradgardar.se

(in reply to Devy)

Post #: 12

RE: Slow Internet Access on all client PC's (ISA2004) - 17.May2006 4:54:37 PM

colobikeguy

Posts: 1
Joined: 17.May2006
Status: offline

I was running into the same problem then changed the HTTP Redirecting Filer on the ISA server 2000 settings from 'redirect to local webproxy service' to 'send to requested web server'. Ran great after that.

(in reply to sebjoh)

Post #: 13

RE: Slow Internet Access on all client PC's (ISA2004) - 18.May2006 9:46:01 AM

jrack

Posts: 3
Joined: 2.May2006
Status: offline

Also check the proxy port is not conflicting with anything else.

I have had a similar experiance where the proxy was set to the same port as something esle and It slowed it down to.

After making some changes to the server config like enabling caching and so on it's much faster and the monitoring is picking up the users via IP better using web-proxy.

Thanks

_____________________________

Joshua Rack
Senior Systems Engineer
MCSE, MCSA

(in reply to colobikeguy)

Post #: 14