Welcome to ISAserver.org

Slow accessing internal resources via VPN

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> Slow accessing internal resources via VPN

Page: [1]

Message

<< Older Topic Newer Topic >>

Slow accessing internal resources via VPN - 3.Aug.2006 3:26:18 AM

Xuser

Posts: 205
Joined: 29.Jan.2002
From: Canada
Status: offline

Hi, we have an ISA server 2004 w/SP2 on a Win2003 Server R2. ISA server is a member of our domain. VPN is fine and VPN users accessing the Internet is quick. However, when I tried to map a network drive, or access our OWA, it takes a long time. Can someone point me to the right direction pls?

Post #: 1

Featured Links*

RE: Slow accessing internal resources via VPN - 4.Aug.2006 5:35:57 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi X,

Most likely a name resolution problem. Are clients able to use DNS to resolve names? Make sure to test from a VPN client.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Xuser)

Post #: 2

RE: Slow accessing internal resources via VPN - 5.Aug.2006 4:06:05 AM

Xuser

Posts: 205
Joined: 29.Jan.2002
From: Canada
Status: offline

Yes Tom, client can resolve DNS. I used ping -a switch and it worked. My Outlook 2003 also can't see my Exchange 2000 server. Whenever I opened Outllook 2003, it "hangs" and then gave me the error msg Not able to locate the Exchange server.
Our ISA Server 2004 is newly setup. However, I've migrated all my settings from ISA Server 2000. That means there are firewall policies that blocked certain ports and protocols like the Blaster worm etc. Is this necessary in ISA Server 2004? If not, then I guess I can setup this ISA server 2004 new without any policies from before and go from there. I assume ISA Server2K does't open any ports and protocols unless explicitly indicated, am I correct? Kinda like the Linux world?

(in reply to tshinder)

Post #: 3

RE: Slow accessing internal resources via VPN - 5.Aug.2006 6:36:10 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi X,

That's right -- the ISA firewall is a network brick until you enable access.

Create access rules for the required protocols and confirm your name resolution services and all will be well. However, remember that name resolution for VPN connections works quite differently than for non-VPN clients.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Xuser)

Post #: 4