Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
Why is HTTP Internet Browsing so slow?
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login | |
|
Why is HTTP Internet Browsing so slow? - 29.Apr.2005 2:58:00 PM
|
|
|
kncowans
Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
|
Hello all
I have got ISA 2004 Std working, finally, however.
There always seems to be a 'However'
Browsing by HTTP is dreadfully slow, i.e it takes approximately 10 seconds to make the initial connection to a website.
DNS is working quick and is able to resolve Internet Domain Names almost instantaniously.
I am able to use NSLookup from any machine on the Network (all XP Pro Sp 2) and lookup any Internet based Domain.
Downloading of files is very quick, i.e. 1.9MB/s so I know the actual connection is working at full speed.
This problem just seems to affect HTTP Internet Browsing.
ISA 2004 Std is the Trial version until my CD is delivered.
And finally, I have just purchased the 'Configuring ISA Server 2004' and have checked my Install according to the book and everything is setup as it should be.
Any help is appreciated.
Thanks in advance
Kevin
P.S
Excellent book Tom.
|
|
|
|
RE: Why is HTTP Internet Browsing so slow? - 29.Apr.2005 3:11:00 PM
|
|
|
LLigetfa
Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
|
You don't say what client you are using. DNS queries run at the client are meaningless if you are using web proxy. Web proxy client actually proxies the DNS as well so you need to make sure your ISA server is optimally configured for resolving DNS.
Also, have you configured the ISA cache?
|
|
|
|
RE: Why is HTTP Internet Browsing so slow? - 29.Apr.2005 3:32:00 PM
|
|
|
kncowans
Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
|
Hello LLigetfa
Thanks for the reply.
I have configured all our Client machines as Firewall Clients and there is no cache configured as yet.
Thanks in advance
Kevin
|
|
|
|
RE: Why is HTTP Internet Browsing so slow? - 29.Apr.2005 4:06:00 PM
|
|
|
kncowans
Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
|
Hello
I forgot to mention something.
At the moment I have the default 'Allow All' rule in effect until I get everything working as needed.
Also, if I browse from the ISA machine then HTTP Browsing is instant.
Thanks in advance
Kevin
|
|
|
|
RE: Why is HTTP Internet Browsing so slow? - 29.Apr.2005 7:37:00 PM
|
|
|
LLigetfa
Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
|
How is the ISA server registered in DNS? You need to be careful about setting DNS to not register itself on more than one NIC or on the wrong NIC.
|
|
|
|
RE: Why is HTTP Internet Browsing so slow? - 29.Apr.2005 9:57:00 PM
|
|
|
kncowans
Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
|
Hello again
Both Nics on the ISA Server machine have the automatic registration of DNS disabled and the DNS record for the Internal Nic entered manually on the internal DNS Server.
One other thing that I have just been told is that when ISA was installed a dialog appeared stating that the file fltrsnk1.dll failed to register.
I am unable to find this file anywhere on the ISA Server machine.
Thanks in advance
Kevin
|
|
|
|
RE: Why is HTTP Internet Browsing so slow? - 29.Apr.2005 11:04:00 PM
|
|
|
LLigetfa
Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
|
That DLL is on the install CD but what if any bearing it may have on your problem, I don't know.
What OS is this on? What SP on the OS? Do you have ISA SP1 installed?
|
|
|
|
RE: Why is HTTP Internet Browsing so slow? - 30.Apr.2005 10:58:00 AM
|
|
|
kncowans
Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
|
Hello
The ISA machine is running Server 2000 Sp 4 and ISA has SP 1 installed.
Thanks in advance
Kevin
|
|
|
|
RE: Why is HTTP Internet Browsing so slow? - 30.Apr.2005 2:30:00 PM
|
|
|
LLigetfa
Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
|
Try sniffing the network and watch the ISA log for some clues.
When did you apply SP1? Before or after the client installs? Did the clients get SP1 as well? How well does web proxy work?
|
|
|
|
RE: Why is HTTP Internet Browsing so slow? - 30.Apr.2005 2:51:00 PM
|
|
|
kncowans
Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
|
Hello
ISA Sp 1 was installed right after the install of ISA.
The clients were installed after the server had Sp 1 installed.
Web Proxy is just as bad.
Thanks in advance
Kevin
|
|
|
|
RE: Why is HTTP Internet Browsing so slow? - 30.Apr.2005 4:50:00 PM
|
|
|
LLigetfa
Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
|
Sorry, I am running out of ideas. Why not turn on the caching and see what that does.
What does the server have for CPU and RAM? Is MSDE intalled? Do you curb MSDE's appetite for RAM?
My ISA server is still in pilot. When I first installed it on W2K3SP1 I had some performance issues that were attributed to several factors. My routes and GW were wrong, I had the NICs ordered incorrectly, bound protocols to the external I should not have, and had to turn on EnablePMTUDiscovery as per http://support.microsoft.com/default.aspx?scid=kb;en-us;324270 to name a few.
I am not sure what you mean by "the default 'Allow All' rule". I wonder if the initial delay may be with authentication. Does your rule require authentication? There may be delays with the ISA server contacting your DC.
|
|
|
|
RE: Why is HTTP Internet Browsing so slow? - 4.May2005 5:48:00 PM
|
|
|
kncowans
Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
|
Hello
Thanks for the reply.
The default 'Allow All' rule I referred to is the rule that is created when ISA 2004 Std is installed.
Just curious but what entries should be on the Internal DNS Server for ISA?
I have just the Host Name record pointing to the IP Address of the ISA machine and the WPAD entry which also points to the ISA machine.
Is this correct?
It has to be something that the clients do before accessing the ISA machine as the actual ISA machine is very fast when accessing the Internet through ISA.
Thanks in advance
Kevin
|
|
|
|
RE: Why is HTTP Internet Browsing so slow? - 6.May2005 4:46:00 PM
|
|
|
kncowans
Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
|
Hello all
Any ideas anyone?
Thanks in advance
Kevin
|
|
|
|
RE: Why is HTTP Internet Browsing so slow? - 9.May2005 9:44:00 PM
|
|
|
erickufrin
Posts: 58
Joined: 15.Apr.2003
From: Milwaukee, WI
Status: offline
|
External NIC: Static IP Static Netmask Default Gateway NO DNS IPs NO Register in DNS NO WINS Netbios DISABLED Only bound protocol should be TCP/IP Uncheck Client for MS Networks Uncheck File and Print
Internal NIC: Static IP - Should be listed in Internal DNS Static Netmask NO Default Gateway DNS - Should point to either itself if Cacheing DNS server or Internal DNS server
Network Interface Order should have "Internal" listed first, then "External" listed second
http://www.isaserver.org/tutorials/Configuring_ISA_Server_Interface_Settings.html
Eric Kufrin
|
|
|
|
RE: Why is HTTP Internet Browsing so slow? - 10.May2005 11:12:00 AM
|
|
|
kncowans
Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
|
Hello Eric
Thanks for the reply.
I have checked all the settings you provided and they are all correct.
I just do not know what is wrong.
Browsing from the actual ISA machine going through ISA (Proxy setting) is very fast but browsing from another machine is dead slow.
If I run tracert from a client machine then there is a delay of almost 10 seconds.
If I Ping the same address as I used for tracert the response is immediate.
Anyone have any ideas?
Thanks in advance
Kevin
|
|
|
|
New Messages |
No New Messages |
Hot Topic w/ New Messages |
Hot Topic w/o New Messages |
Locked w/ New Messages |
Locked w/o New Messages |
|
Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|