Over the weekend we installed a new ISA 2004 SP2 server, and HP DL320 ISA/VPN/Cache device.
Web browsing is extremly slow via SecureNAT, Web Proxy and/or the Firewall Client. Download speeds via FTP transfer are the same as before (old firewall was a PIX 515e).
The outbound access rule is top of the list, and allows HTTP, HTTPS and DNS (Allow limited web access and ISP services). I also changed the binding order so that the internal NIC is top of the list and verfied the NIC configuration agains teh ISAServer.org article on ISA binding and IP configuration.
Not sure where to look next, I have set up a few ISA servers before, although not this particular HP device, and never encountered this before. I would expect a server with 3.2GHz/1GB RAM and only 100 users to perform much better than it is.
From: United Kingdom
No, there is a specific setting somewhere in the cache settings that states how much free RAM to use for RAM caching, the deafult being 10%. The MSDE limit is also worth changing anyhow...but I guess you know about this
As for virus throttle, I am not sure I don't use the HP kit, but just remember reading that this helped a few people out with browsing performance...
I have made some progress with this and have further narrowed it down. It is not so much a throughput issue as it is a response time issue. Getting the a webpage to connect is still slow, but once the data transfer begins the page loads quickly.
I started logging to flatfile, dropped the cache to 5GB, dropped cache memory to 5% and dropped SQL memory limit to 128MB.
All in all it seems to have fixed things but I am monitoring it closely. I wish I could disable the MSDE services as I am no longer using it, but the MS Firewall Serivce depends on it. If all goes well, I may re-enable logging to MSDE and see what happens!
I posted this question in a similar thread, but does anyone have documentation for turning off Virus Throttle on an HP DL320? I'm not even sure if it is installed on my machine, as this wasn't the packaged DL320 with ISA 04 installed and windows 2003 SP1 secured. I've been through the entire HP Network Configuration Utility, the Device Driver properties, and NIC properties and see nothing referencing virus throttle. Thanks,
I have the same issue with my ISA server. Server settings: HP DL320 G4 Windows 2003 SP2 ISA 2006 Trend Micro AV GFI Web Monitor Using MSDE This server is setup as a proxy only single NIC.
The issue that Iím having is that web pages take twice as long to load then if I just go via the firewall. As this is the first ISA server that I have installed I reloaded it thinking it may have been something I did but I still get the same issue. I have looked for this HP Virus Throttle and I canít fine it. I have changed the following settings EnableTCPA dword:00000000, EnableRSS dword:00000000, EnableTCPChimney dword:00000000 and DisableTaksoffload dword:00000001.
This has not fixed the issue and Iím stuck and I just need some help.