site-to-site VPN performance issues (Full Version)

All Forums >> [ISA 2006 Firewall] >> VPN



Message

cradford -> site-to-site VPN performance issues (12.Mar.2007 11:44:08 PM)

I have recently moved from ISA Server 2004 EE to ISA Server 2006 EE.  Both installs have been on Windows Server 2003 R2.  Ever since the move to 2006, I have had a huge decrease in performance on my site-to-site VPN connections.  What use to have an average response time of 50-70 ms is now averaging 400-600 ms.  The 2006 installs were clean and the hardware and network connections have not changed.  Has anyone else seen these types of performance impacts and if so have you been able to resolve the issue?



tshinder -> RE: site-to-site VPN performance issues (5.Apr.2007 8:33:15 PM)

Do you have path MTU discovery enabled on the ISA Firewalls?

Tom



cradford -> RE: site-to-site VPN performance issues (6.Apr.2007 2:45:14 PM)

Yes MTU discovery was enabled.

In the course of resolving an issue with the VPN connection randomly dropping the performance issues were resolved.  The hotifxes that I installed to resolve the issue were 898060, 897651, and 923336.



tshinder -> RE: site-to-site VPN performance issues (7.Apr.2007 12:39:10 PM)

Thanks!

Tom



Page: [1]