Welcome to ISAserver.org

Slow response from HTTPS

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Web Publishing >> Slow response from HTTPS

Page: [1]

Message

<< Older Topic Newer Topic >>

Slow response from HTTPS - 16.Oct.2006 3:46:07 PM

PCC

Posts: 199
Joined: 13.Nov.2001
From: Michigan
Status: offline

I have OWA and SharePoint Services published using the same HTTPS web listener. Both of them take 10-15 seconds to respond when an external client trys to access them. Any idea what would cause this?

Post #: 1

Featured Links*

RE: Slow response from HTTPS - 20.Oct.2006 11:05:20 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi PCC,

Have you published your CRL?

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to PCC)

Post #: 2

RE: Slow response from HTTPS - 20.Oct.2006 11:16:47 AM

PCC

Posts: 199
Joined: 13.Nov.2001
From: Michigan
Status: offline

Thanks for the reply Tom.

No I haven't published the CRL. But my CA sits in a domain with an invalid top level domain name (ie: .internal). So the URL listed in the certificate is not a valid URL. Any suggestions on how to resolve this?

Thanks

(in reply to tshinder)

Post #: 3

RE: Slow response from HTTPS - 21.Oct.2006 12:51:55 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi PCC,

Another reason for not using illegal TLDs for the internal domain name.

You'll have to monkey around with the AIAs, but I'm not sure what the issues might be, as I always bow out of setups where illegal TLDs are used for the internal network

http://support.microsoft.com/kb/318707

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to PCC)

Post #: 4

RE: Slow response from HTTPS - 23.Oct.2006 8:40:38 AM

PCC

Posts: 199
Joined: 13.Nov.2001
From: Michigan
Status: offline

For some reason I knew you were going to say that! lol....

Unfortinately using the illegal TLD was not my decision. Sometimes you have to do what the higher ups want even if you know it's not the right thing to do.

Thanks for the link....I'll check it out.

(in reply to tshinder)

Post #: 5

RE: Slow response from HTTPS - 24.Oct.2006 9:54:59 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi PCC,

I know what you mean. Often the ISA Firewall admin is the one-eyed man where the kings are all blind!

Let us know how that works out for you.

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to PCC)

Post #: 6

RE: Slow response from HTTPS - 24.Oct.2006 10:00:08 AM

PCC

Posts: 199
Joined: 13.Nov.2001
From: Michigan
Status: offline

I think I've got everything in place. I'll let you know what happens after I test from the outside.

On a side note, I have convinced them that at some point we need to ditch the illegal TLD and change to .com. I bet that will be fun!

(in reply to tshinder)

Post #: 7

RE: Slow response from HTTPS - 25.Oct.2006 8:33:19 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi PCC,

When you finally get around to doing it, they'll wonder why they ever waited!

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to PCC)

Post #: 8

RE: Slow response from HTTPS - 27.Oct.2006 11:13:34 AM

PCC

Posts: 199
Joined: 13.Nov.2001
From: Michigan
Status: offline

Just thought I would update.

I added a public URL for the AIA and CRL, published it and everything is right in the world. The responce time is improved and I can now install the CA certificate on any external client.

(in reply to tshinder)

Post #: 9

RE: Slow response from HTTPS - 28.Oct.2006 11:03:00 AM