Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Why is HTTP Internet Browsing so slow?

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> General >> Why is HTTP Internet Browsing so slow? Page: [1]
Login
Message << Older Topic   Newer Topic >>
Why is HTTP Internet Browsing so slow? - 29.Apr.2005 2:58:00 PM   
kncowans

 

Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
Hello all

I have got ISA 2004 Std working, finally, however.

There always seems to be a 'However' "[Frown]"

Browsing by HTTP is dreadfully slow, i.e it takes approximately 10 seconds to make the initial connection to a website.

DNS is working quick and is able to resolve Internet Domain Names almost instantaniously.

I am able to use NSLookup from any machine on the Network (all XP Pro Sp 2) and lookup any Internet based Domain.

Downloading of files is very quick, i.e. 1.9MB/s so I know the actual connection is working at full speed.

This problem just seems to affect HTTP Internet Browsing.

ISA 2004 Std is the Trial version until my CD is delivered.

And finally, I have just purchased the 'Configuring ISA Server 2004' and have checked my Install according to the book and everything is setup as it should be.

Any help is appreciated.

Thanks in advance

Kevin

P.S

Excellent book Tom.
Post #: 1
RE: Why is HTTP Internet Browsing so slow? - 29.Apr.2005 3:11:00 PM   
LLigetfa

 

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
You don't say what client you are using. DNS queries run at the client are meaningless if you are using web proxy. Web proxy client actually proxies the DNS as well so you need to make sure your ISA server is optimally configured for resolving DNS.

Also, have you configured the ISA cache?

(in reply to kncowans)
Post #: 2
RE: Why is HTTP Internet Browsing so slow? - 29.Apr.2005 3:32:00 PM   
kncowans

 

Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
Hello LLigetfa

Thanks for the reply.

I have configured all our Client machines as Firewall Clients and there is no cache configured as yet.

Thanks in advance

Kevin

(in reply to kncowans)
Post #: 3
RE: Why is HTTP Internet Browsing so slow? - 29.Apr.2005 4:06:00 PM   
kncowans

 

Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
Hello

I forgot to mention something.

At the moment I have the default 'Allow All' rule in effect until I get everything working as needed.

Also, if I browse from the ISA machine then HTTP Browsing is instant.

Thanks in advance

Kevin

(in reply to kncowans)
Post #: 4
RE: Why is HTTP Internet Browsing so slow? - 29.Apr.2005 7:37:00 PM   
LLigetfa

 

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
How is the ISA server registered in DNS? You need to be careful about setting DNS to not register itself on more than one NIC or on the wrong NIC.

(in reply to kncowans)
Post #: 5
RE: Why is HTTP Internet Browsing so slow? - 29.Apr.2005 9:57:00 PM   
kncowans

 

Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
Hello again

Both Nics on the ISA Server machine have the automatic registration of DNS disabled and the DNS record for the Internal Nic entered manually on the internal DNS Server.

One other thing that I have just been told is that when ISA was installed a dialog appeared stating that the file fltrsnk1.dll failed to register.

I am unable to find this file anywhere on the ISA Server machine.

Thanks in advance

Kevin

(in reply to kncowans)
Post #: 6
RE: Why is HTTP Internet Browsing so slow? - 29.Apr.2005 11:04:00 PM   
LLigetfa

 

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
That DLL is on the install CD but what if any bearing it may have on your problem, I don't know.

What OS is this on? What SP on the OS? Do you have ISA SP1 installed?

(in reply to kncowans)
Post #: 7
RE: Why is HTTP Internet Browsing so slow? - 30.Apr.2005 10:58:00 AM   
kncowans

 

Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
Hello

The ISA machine is running Server 2000 Sp 4 and ISA has SP 1 installed.

Thanks in advance

Kevin

(in reply to kncowans)
Post #: 8
RE: Why is HTTP Internet Browsing so slow? - 30.Apr.2005 2:30:00 PM   
LLigetfa

 

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
Try sniffing the network and watch the ISA log for some clues.

When did you apply SP1? Before or after the client installs? Did the clients get SP1 as well? How well does web proxy work?

(in reply to kncowans)
Post #: 9
RE: Why is HTTP Internet Browsing so slow? - 30.Apr.2005 2:51:00 PM   
kncowans

 

Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
Hello

ISA Sp 1 was installed right after the install of ISA.

The clients were installed after the server had Sp 1 installed.

Web Proxy is just as bad.

Thanks in advance

Kevin

(in reply to kncowans)
Post #: 10
RE: Why is HTTP Internet Browsing so slow? - 30.Apr.2005 4:50:00 PM   
LLigetfa

 

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
Sorry, I am running out of ideas. Why not turn on the caching and see what that does.

What does the server have for CPU and RAM? Is MSDE intalled? Do you curb MSDE's appetite for RAM?

My ISA server is still in pilot. When I first installed it on W2K3SP1 I had some performance issues that were attributed to several factors. My routes and GW were wrong, I had the NICs ordered incorrectly, bound protocols to the external I should not have, and had to turn on EnablePMTUDiscovery as per http://support.microsoft.com/default.aspx?scid=kb;en-us;324270 to name a few.

I am not sure what you mean by "the default 'Allow All' rule". I wonder if the initial delay may be with authentication. Does your rule require authentication? There may be delays with the ISA server contacting your DC.

(in reply to kncowans)
Post #: 11
RE: Why is HTTP Internet Browsing so slow? - 4.May2005 5:48:00 PM   
kncowans

 

Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
Hello

Thanks for the reply.

The default 'Allow All' rule I referred to is the rule that is created when ISA 2004 Std is installed.

Just curious but what entries should be on the Internal DNS Server for ISA?

I have just the Host Name record pointing to the IP Address of the ISA machine and the WPAD entry which also points to the ISA machine.

Is this correct?

It has to be something that the clients do before accessing the ISA machine as the actual ISA machine is very fast when accessing the Internet through ISA.

Thanks in advance

Kevin

(in reply to kncowans)
Post #: 12
RE: Why is HTTP Internet Browsing so slow? - 6.May2005 4:46:00 PM   
kncowans

 

Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
Hello all

Any ideas anyone?

Thanks in advance

Kevin

(in reply to kncowans)
Post #: 13
RE: Why is HTTP Internet Browsing so slow? - 9.May2005 9:44:00 PM   
erickufrin

 

Posts: 58
Joined: 15.Apr.2003
From: Milwaukee, WI
Status: offline
External NIC:
Static IP
Static Netmask
Default Gateway
NO DNS IPs
NO Register in DNS
NO WINS
Netbios DISABLED
Only bound protocol should be TCP/IP
Uncheck Client for MS Networks
Uncheck File and Print

Internal NIC:
Static IP - Should be listed in Internal DNS
Static Netmask
NO Default Gateway
DNS - Should point to either itself if Cacheing DNS server or Internal DNS server

Network Interface Order should have "Internal" listed first, then "External" listed second

http://www.isaserver.org/tutorials/Configuring_ISA_Server_Interface_Settings.html

Eric Kufrin

(in reply to kncowans)
Post #: 14
RE: Why is HTTP Internet Browsing so slow? - 10.May2005 11:12:00 AM   
kncowans

 

Posts: 52
Joined: 22.Apr.2005
From: Doncaster
Status: offline
Hello Eric

Thanks for the reply.

I have checked all the settings you provided and they are all correct.

I just do not know what is wrong.

Browsing from the actual ISA machine going through ISA (Proxy setting) is very fast but browsing from another machine is dead slow.

If I run tracert from a client machine then there is a delay of almost 10 seconds.

If I Ping the same address as I used for tracert the response is immediate.

Anyone have any ideas?

Thanks in advance

Kevin

(in reply to kncowans)
Post #: 15

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> General >> Why is HTTP Internet Browsing so slow? Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts