Welcome to ISAserver.org

ISA 2006 slow uploads

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> General >> ISA 2006 slow uploads

Page: [1] 2 next > >>

Message

<< Older Topic Newer Topic >>

ISA 2006 slow uploads - 19.Jul.2007 5:18:51 PM

digitlman

Posts: 12
Joined: 19.Jul.2007
Status: offline

Hello all,

Our ISA 2006 box seems to be throttling our upload bandwidth by at least 2/3. When we bypass the ISA box, our UL/DL bandwidth is fairly symmetrical. When we go through the box, the download speed is good, and the UL is not even close.

Any tips/ideas/things to check?

-Joe

Post #: 1

Featured Links*

RE: ISA 2006 slow uploads - 19.Jul.2007 6:22:53 PM

aek033

Posts: 42
Joined: 19.Sep.2006
Status: offline

As strange as it may seem, try tinkering with your speed settings on your nic cards. I had the same problem until I set my cards to 100 full rather than auto. My setting may not work for you but I would try several and see what happens.

(in reply to digitlman)

Post #: 2

RE: ISA 2006 slow uploads - 20.Jul.2007 10:01:43 AM

digitlman

Posts: 12
Joined: 19.Jul.2007
Status: offline

I changed both of my NICs from auto speed detect to 100MB full. However, since my "internal" side NIC is a gigabit card, and then I set it to 100MB, I did more harm than good. My download speed dropped to 1/4 of what it was, and the UL was unchanged. Needless to say, I put both NICs back to auto, and the DL ramped back up to normal, and the UL is still 1/3 of what it should be.

Any other suggestions? I assume that when I change the link speed, I don't need to do anything wild like reboot the ISA box to make the changes take effect? I can if I need to in order to get this to work.

(in reply to aek033)

Post #: 3

RE: ISA 2006 slow uploads - 20.Jul.2007 3:39:13 PM

ITEngineer

Posts: 270
Joined: 3.Feb.2006
Status: offline

what is your Internal & External Network Cards settings ?

(in reply to digitlman)

Post #: 4

RE: ISA 2006 slow uploads - 20.Jul.2007 4:16:09 PM

digitlman

Posts: 12
Joined: 19.Jul.2007
Status: offline

internal is 1 Gig, and ext is 100MB. Both now set to auto.

(in reply to ITEngineer)

Post #: 5

RE: ISA 2006 slow uploads - 20.Jul.2007 5:26:48 PM

elmajdal

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

quote:

ORIGINAL: digitlman

internal is 1 Gig, and ext is 100MB. Both now set to auto.

i think ITEngineer was looking for your IP , DG, DNS on both NICs

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to digitlman)

Post #: 6

RE: ISA 2006 slow uploads - 21.Jul.2007 11:01:55 AM

digitlman

Posts: 12
Joined: 19.Jul.2007
Status: offline

I'll post that info when I get back into the office on Monday.

Thanks!

(in reply to elmajdal)

Post #: 7

RE: ISA 2006 slow uploads - 23.Jul.2007 9:30:42 AM

digitlman

Posts: 12
Joined: 19.Jul.2007
Status: offline

Ethernet adapter Internal:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet #2
Physical Address. . . . . . . . . : 00-15-C5-FC-59-A9
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.200.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.200.6
Primary WINS Server . . . . . . . : 192.168.200.6

Ethernet adapter External:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-10-18-27-E2-EB
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 12.168.149.66
Subnet Mask . . . . . . . . . . . : 255.255.255.192
Default Gateway . . . . . . . . . : 12.168.149.65
DNS Servers . . . . . . . . . . . : 192.168.200.6
Primary WINS Server . . . . . . . : 192.168.200.6
NetBIOS over Tcpip. . . . . . . . : Disabled

(in reply to digitlman)

Post #: 8

RE: ISA 2006 slow uploads - 23.Jul.2007 11:10:16 AM

elmajdal

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

you have misconfigured your External NIC.

quote:

Ethernet adapter External:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-10-18-27-E2-EB
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 12.168.149.66
Subnet Mask . . . . . . . . . . . : 255.255.255.192
Default Gateway . . . . . . . . . : 12.168.149.65
DNS Servers . . . . . . . . . . . : 192.168.200.6
Primary WINS Server . . . . . . . : 192.168.200.6
NetBIOS over Tcpip. . . . . . . . : Disabled

Never put a DNS/WINS entry on the External NIC.

you need to have an Internal DNS Server, that will forward external Requests to your ISP DNS Servers, read this http://elmajdal.net/isaserver/Internal_DNS_Forwarding.aspx

HTH,
Tarek

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to digitlman)

Post #: 9

RE: ISA 2006 slow uploads - 23.Jul.2007 11:27:49 AM

digitlman

Posts: 12
Joined: 19.Jul.2007
Status: offline

Ok, we can fix this misconfiguration.

Do you think this has any effect on our slow UL speeds?

(in reply to elmajdal)

Post #: 10

RE: ISA 2006 slow uploads - 23.Jul.2007 12:29:17 PM

elmajdal

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi,

Network Cards Configuration is one of the main key configuration for ISA Server.

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to digitlman)

Post #: 11

RE: ISA 2006 slow uploads - 23.Jul.2007 12:31:39 PM

digitlman

Posts: 12
Joined: 19.Jul.2007
Status: offline

Granted, but would DNS configured on the external NIC affect outbound bandwidth?

(in reply to elmajdal)

Post #: 12

RE: ISA 2006 slow uploads - 26.Jul.2007 4:27:02 PM

digitlman

Posts: 12
Joined: 19.Jul.2007
Status: offline

Any further advice/suggestions?

(in reply to digitlman)

Post #: 13

RE: ISA 2006 slow uploads - 2.Oct.2007 12:14:05 PM

digitlman

Posts: 12
Joined: 19.Jul.2007
Status: offline

After opening a support case with Microsoft and working with an engineer, the "fix" has been to disable the web proxy filter.

I still cannot fathom why I need to turn off a (major) feature of ISA to get the damn thing to function the way it is supposed to work.

My question is: What are the ramifications of turning off the filter? I was told that the HTTP filters would still work, but each client still makes a direct connection to the target site, and all caching by ISA is nullified. What else would I be missing in this configuration?

(in reply to digitlman)

Post #: 14

RE: ISA 2006 slow uploads - 1.Apr.2009 10:40:13 AM

Sebenza

Posts: 6
Joined: 1.Apr.2009
Status: offline

Hmmm...except ISA 2006 doesn't allow you to disable the web proxy filter. In fact, as per the Help in ISA 06 "You cannot disable the PPTP Filter and Web Proxy Filter add-ins".

So how did you get it turned off? And were there any side-effects?

(in reply to digitlman)

Post #: 15

RE: ISA 2006 slow uploads - 1.Apr.2009 10:43:47 AM

Jason Jones

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

quote:

ORIGINAL: digitlman

After opening a support case with Microsoft and working with an engineer, the "fix" has been to disable the web proxy filter.

I am very surprised at this - did they explain why this needs to be done?

Cheers

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to digitlman)

Post #: 16

RE: ISA 2006 slow uploads - 1.Apr.2009 7:34:20 PM

SteveMoffat

Posts: 1130
Joined: 29.Jun.2001
From: Hamilton, Bermuda
Status: offline

Hey guys..the original post was like 2 years ago......strange how it pops up now...

_____________________________

Thanks
Steve

ISA 2006 Book! - http://tinyurl.com/2gpoo8
TMG Bible - http://tinyurl.com/ykv85hr
www.isaserver.bm

The built in ISA help is likely the most comprehensive help built into an application anywhere. USE it!!! Search it!!! RTFM

(in reply to Jason Jones)

Post #: 17

RE: ISA 2006 slow uploads - 1.Apr.2009 7:43:53 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

I doubt MS said to disable the Web proxy filter. They might have meant the HTTP Compression filter.

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to SteveMoffat)

Post #: 18

RE: ISA 2006 slow uploads - 1.Apr.2009 7:45:52 PM

SteveMoffat

Posts: 1130
Joined: 29.Jun.2001
From: Hamilton, Bermuda
Status: offline

That's what I was thinking...

_____________________________

Thanks
Steve

ISA 2006 Book! - http://tinyurl.com/2gpoo8
TMG Bible - http://tinyurl.com/ykv85hr
www.isaserver.bm

The built in ISA help is likely the most comprehensive help built into an application anywhere. USE it!!! Search it!!! RTFM

(in reply to tshinder)

Post #: 19

RE: ISA 2006 slow uploads - 1.Apr.2009 8:26:31 PM

Jim Harrison

Posts: 271
Joined: 5.May2001
From: Redmond, WA
Status: offline

I want the case #.
Any CSS engineer that tells you:
1. disable the Web proxy filter (you can't)
2. it won't affect HTTP processing

is "misinformed" and I need to have a discussion with hir.

_____________________________

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
My ISAServer.org Stuff
My Site

(in reply to SteveMoffat)

Post #: 20