Welcome to ISAserver.org

Slow logging on to the ISA server console

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> Installation and Planning >> Slow logging on to the ISA server console

Page: [1]

Message

<< Older Topic Newer Topic >>

Slow logging on to the ISA server console - 24.Apr.2007 9:18:40 AM

frankenstein897

Posts: 34
Joined: 11.Apr.2007
Status: offline

I joined my server to the domain everything worked fine, it logged in fast like normal. I installed ISA 2006 Standard and now when I logon to the ISA server console, it takes forever. DNS is setup correct because it worked fine before I installed ISA. I have the system policy setup to allow Active Directory to Internal and DNS to All networks. Am I missing anything?

OS = Windows Server 2003 R2 Standard
Service Pack = 2 (installed prior to installing ISA)
ISA = 2006 Standard
Nic1 = Internal network
Nic2 = Located in a Cisco ASA DMZ
DNS = Both Nics point to the internal DNS servers.
Default Gateway = No gateway on internal NIC (static routes for WAN sites), IP of ASA DMZ interface on external NIC

Post #: 1

Featured Links*

RE: Slow logging on to the ISA server console - 24.Apr.2007 10:52:08 AM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

You configured dns wrong from the sounds of it.

quote:

DNS = Both Nics point to the internal DNS servers.

Only the internal interface should have dns configured.

Can we see a ipconfig /all please.
Also a simple network diagram will help.

(in reply to frankenstein897)

Post #: 2

RE: Slow logging on to the ISA server console - 24.Apr.2007 11:14:53 AM

frankenstein897

Posts: 34
Joined: 11.Apr.2007
Status: offline

Well, I did have the internal DNS configured on both NICs. But, I took off the DNS configuration on the external NIC and it still does it. It was working fine before ISA was installed so I wonder if there is a configuration issue with ISA.

(in reply to Sunny.C)

Post #: 3

RE: Slow logging on to the ISA server console - 24.Apr.2007 8:53:37 PM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

Get a screen shot of your ISA rules and ipconfig /all.

(in reply to frankenstein897)

Post #: 4

RE: Slow logging on to the ISA server console - 24.Apr.2007 9:21:33 PM

frankenstein897

Posts: 34
Joined: 11.Apr.2007
Status: offline

I assume you want the system policy config? It is the default, I made no changes except I added one site to the system poluicy allowed sites. Here is my IPconfig /all. I only have the default deny rule right now. I just installed ISA 2006 Standard. Now, I am running SP2 for 2003. But it was installed prior to installing ISA.

Windows IP Configuration
Host Name . . . . . . . . . . . . : tsuisa1
Primary Dns Suffix . . . . . . . : tristate.edu
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : tristate.edu
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS
VBD Client)
Physical Address. . . . . . . . . : 00-15-C5-F2-CD-D5
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.162.100.11
Subnet Mask . . . . . . . . . . . : 255.255.252.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 10.162.6.201
10.162.6.202
Ethernet adapter DMZ:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS
VBD Client) #2
Physical Address. . . . . . . . . : 00-15-C5-F2-CD-D7
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.172.1.13
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.172.1.254
NetBIOS over Tcpip. . . . . . . . : Disabled

(in reply to Sunny.C)

Post #: 5

RE: Slow logging on to the ISA server console - 25.Apr.2007 12:34:32 AM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

I was after a screenshot of your ISA firewall rules.

(in reply to frankenstein897)

Post #: 6

RE: Slow logging on to the ISA server console - 25.Apr.2007 8:48:09 AM

frankenstein897

Posts: 34
Joined: 11.Apr.2007
Status: offline

So far everything is default after installing ISA.

(in reply to Sunny.C)

Post #: 7

RE: Slow logging on to the ISA server console - 25.Apr.2007 9:18:31 AM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

Do you have a rule allowing DNS access??
Do you any error in your ISA event logs?

< Message edited by Sunny.C -- 25.Apr.2007 9:19:32 AM >

(in reply to frankenstein897)

Post #: 8

RE: Slow logging on to the ISA server console - 25.Apr.2007 3:32:06 PM

frankenstein897

Posts: 34
Joined: 11.Apr.2007
Status: offline

Well, the default System Policy allows DNS to All Network. Yes, I am getting the event id 1053 - Userenv - Windows cannot determine the user or computer name (the RPC server is unavailable) Group Policy processing aborted. It is weird. I tlooks like everything should work. I can do an nslookup just fine, I can resolve names just fine. I can access web sites fine (although I am having an issue with Microsoft Update, the page comes up but I get an error). Weird. I will keep looking into it. Thanks for your troubles.

(in reply to Sunny.C)

Post #: 9

RE: Slow logging on to the ISA server console - 25.Apr.2007 8:24:16 PM

Sunny.C

Posts: 800
Joined: 5.Apr.2005
From: sydney
Status: offline

For Windows Update:
http://www.isaserver.org/articles/2004su1345.html

Event id 1053 is indicating that ISA is having problems contacting your DNS.
Check:
1. ISA DNS records are correct.
2. Make sure your DNS setting are correct.

Workaround:
Providing above are correct try and add a temp rule allow access from internal dns to your ISA server.

(in reply to frankenstein897)

Post #: 10

RE: Slow logging on to the ISA server console - 25.Apr.2007 8:35:38 PM