• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

slow OWA-- isapi filter message, https failed in logs

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> slow OWA-- isapi filter message, https failed in logs Page: [1]
Login
Message << Older Topic   Newer Topic >>
slow OWA-- isapi filter message, https failed in logs - 17.Jan.2006 10:54:11 PM   
glhs

 

Posts: 17
Joined: 17.Jan.2006
Status: offline
Hi all,

I'm in the process of implementing ISA Enterprise 2004 running in parallel to our existing 2004 Std installation and am setting  up our OWA rules which are functioning but the OWA response is extremely slow.   Both installations are running on Windows 2003 Server on very capable new hardware with 2 teamed nics.

Upon watching the logs while trying to access the site I recieve a mix of success and failure messages.

The one I am suspecting to be at fault has the following text:

Action
Failed Connection Attempt
 
Http Status Code:
12210 An Internet Server API (ISAPI) filter has finished handling the request. Contact your system administrator.
 
User:
anonymous
 
URL:
http://webmailna.whatever.org/CookieAuth.dll?GetPic?image=logon_IE_bot.gif
 
Log Record Type:
Web Proxy Filter

Like I mentioned, the site works correctly, although is quite slow.  Our other ISA Standard site is configured the same and works quite quickly.  Caching is disabled on both.   The only two rules in place on the ISA are a HTTP rule to direct the user first to a non-SSL disclaimer page then a HTTPS rule for the actual OWA forms based login.    

Does anyone know what causes this ISAPI filter message or how else to troubleshoot why it is slowing things down?
Any help would be much appreciated.

Thanks,

Seth
Post #: 1
RE: slow OWA-- isapi filter message, https failed in logs - 19.Jan.2006 8:05:46 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Seth,

Never seen that before, but its interesting.

Slow performance might be related to CRL checking or maybe a 3rd party app installed on the ISA firewall.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to glhs)
Post #: 2
RE: slow OWA-- isapi filter message, https failed in logs - 19.Jan.2006 11:18:36 PM   
glhs

 

Posts: 17
Joined: 17.Jan.2006
Status: offline
Hi Tom,

Thanks for the reply.   I googled for a bit before posting, found somebody else with a big brother type Add-in that was causing the problem so I checked mine but as its a fresh install I don't have any addins.

What is CRL checking?  It might be a direction to head at least.

If I don't get anywhere further I'll probably end up doing an install on a dev machine to see if these errors are repeatable with the same setup procedures.

Seth

(in reply to tshinder)
Post #: 3
RE: slow OWA-- isapi filter message, https failed in logs - 20.Jan.2006 5:20:48 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Seth,

You can speed things up quite a bit by publishing your CRL. I create a Web Publishing Rule that publishes just the path to the file, including the file name.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to glhs)
Post #: 4
RE: slow OWA-- isapi filter message, https failed in logs - 20.Jan.2006 7:23:31 PM   
glhs

 

Posts: 17
Joined: 17.Jan.2006
Status: offline
Ok, I've found out that my functional/fast std ISA setup is also getting this same error with no adverse effects,  and have narrowed down the speed issue to a set of test computers and not to others so I think I'm having a network issue with the test clients rather than an actual ISA issue.  The error message must be a red herring.   Thanks for your help though.

What does CRL stand for anyway?


(in reply to tshinder)
Post #: 5
RE: slow OWA-- isapi filter message, https failed in logs - 20.Jan.2006 8:35:26 PM   
ClintD

 

Posts: 1848
Joined: 26.Jan.2001
From: Keller, TX
Status: offline
Certificate Revocation List

Your Certificate Authority generates this list automatically and it contains all of the certiicates that have been revoked by the CA. This list is accessible via LDAP or HTTP. You can look in the certificate details and on the Details tab, there is a CDP attribute - Certificate Distribution Point - that specifies the LDAP or HTTP path where the CRL is located.

< Message edited by ClintD -- 20.Jan.2006 8:37:38 PM >

(in reply to glhs)
Post #: 6
RE: slow OWA-- isapi filter message, https failed in logs - 20.Jan.2006 8:44:41 PM   
glhs

 

Posts: 17
Joined: 17.Jan.2006
Status: offline
thx

(in reply to ClintD)
Post #: 7
RE: slow OWA-- isapi filter message, https failed in logs - 25.May2009 10:43:36 AM   
wolf judge

 

Posts: 2
Joined: 30.Apr.2009
Status: offline
Hello people,

I have the same issue on the SBS server.
When I try OWA I'm getting "12210 An Internet Server API (ISAPI) filter has finished handling the request. Contact your system administrator. 12210 An Internet Server API (ISAPI) filter has finished handling the request. Contact your system administrator. " I published OWA many times on standard or enterprise isa servers but this is the first time I dont know whats the problem.

If you have any ideas...

Tnx

(in reply to glhs)
Post #: 8
RE: slow OWA-- isapi filter message, https failed in logs - 27.May2009 9:56:43 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Is the ISA firewall in front of the SBS box?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to wolf judge)
Post #: 9
RE: slow OWA-- isapi filter message, https failed in logs - 15.Jun.2009 10:29:33 AM   
davei0594

 

Posts: 21
Joined: 9.Feb.2008
Status: offline
The only times i see "An Internet Server API (ISAPI) filter has finished handling the request. Contact your system administrator." is when i have a filter like websense loaded...

do you have any 3rd party filters running?

if so, in the case of websense you can tell the policy server which addresses to ignore - i'm sure other filter products will allow the same.

good luck.

D

(in reply to tshinder)
Post #: 10

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> HTTP Filtering >> slow OWA-- isapi filter message, https failed in logs Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts