ISA 2006 slow uploads (Full Version)

All Forums >> [ISA 2006 Firewall] >> General



Message


digitlman -> ISA 2006 slow uploads (19.Jul.2007 5:18:51 PM)

Hello all,

Our ISA 2006 box seems to be throttling our upload bandwidth by at least 2/3.  When we bypass the ISA box, our UL/DL bandwidth is fairly symmetrical.  When we go through the box, the download speed is good, and the UL is not even close.

Any tips/ideas/things to check?

-Joe





aek033 -> RE: ISA 2006 slow uploads (19.Jul.2007 6:22:53 PM)

As strange as it may seem, try tinkering with your speed settings on your nic cards.  I had the same problem until I set my cards to 100 full rather than auto.  My setting may not work for you but I would try several and see what happens.




digitlman -> RE: ISA 2006 slow uploads (20.Jul.2007 10:01:43 AM)

I changed both of my NICs from auto speed detect to 100MB full. However, since my "internal" side NIC is a gigabit card, and then I set it to 100MB, I did more harm than good. My download speed dropped to 1/4 of what it was, and the UL was unchanged. Needless to say, I put both NICs back to auto, and the DL ramped back up to normal, and the UL is still 1/3 of what it should be.

Any other suggestions?  I assume that when I change the link speed, I don't need to do anything wild like reboot the ISA box to make the changes take effect?  I can if I need to in order to get this to work.




ITEngineer -> RE: ISA 2006 slow uploads (20.Jul.2007 3:39:13 PM)

what is your Internal & External Network Cards settings ?




digitlman -> RE: ISA 2006 slow uploads (20.Jul.2007 4:16:09 PM)

internal is 1 Gig, and ext is 100MB.  Both now set to auto.




elmajdal -> RE: ISA 2006 slow uploads (20.Jul.2007 5:26:48 PM)

quote:

ORIGINAL: digitlman

internal is 1 Gig, and ext is 100MB.  Both now set to auto.


i think ITEngineer was looking for your IP , DG, DNS on both NICs




digitlman -> RE: ISA 2006 slow uploads (21.Jul.2007 11:01:55 AM)

I'll post that info when I get back into the office on Monday.

Thanks!




digitlman -> RE: ISA 2006 slow uploads (23.Jul.2007 9:30:42 AM)

Ethernet adapter Internal:

  Connection-specific DNS Suffix  . :
  Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet #2
  Physical Address. . . . . . . . . : 00-15-C5-FC-59-A9
  DHCP Enabled. . . . . . . . . . . : No
  IP Address. . . . . . . . . . . . : 192.168.200.1
  Subnet Mask . . . . . . . . . . . : 255.255.255.0
  Default Gateway . . . . . . . . . :
  DNS Servers . . . . . . . . . . . : 192.168.200.6
  Primary WINS Server . . . . . . . : 192.168.200.6


Ethernet adapter External:

  Connection-specific DNS Suffix  . :
  Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
  Physical Address. . . . . . . . . : 00-10-18-27-E2-EB
  DHCP Enabled. . . . . . . . . . . : No
  IP Address. . . . . . . . . . . . : 12.168.149.66
  Subnet Mask . . . . . . . . . . . : 255.255.255.192
  Default Gateway . . . . . . . . . : 12.168.149.65
  DNS Servers . . . . . . . . . . . : 192.168.200.6
  Primary WINS Server . . . . . . . : 192.168.200.6
  NetBIOS over Tcpip. . . . . . . . : Disabled




elmajdal -> RE: ISA 2006 slow uploads (23.Jul.2007 11:10:16 AM)

Hi,

you have misconfigured your External NIC.

quote:

Ethernet adapter External:

Connection-specific DNS Suffix  . :
Description . . . . . . . . . . . : Broadcom NetXtreme Gigabit Ethernet
Physical Address. . . . . . . . . : 00-10-18-27-E2-EB
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 12.168.149.66
Subnet Mask . . . . . . . . . . . : 255.255.255.192
Default Gateway . . . . . . . . . : 12.168.149.65
  DNS Servers . . . . . . . . . . . : 192.168.200.6
Primary WINS Server . . . . . . . : 192.168.200.6
  NetBIOS over Tcpip. . . . . . . . : Disabled


Never put a DNS/WINS entry on the External NIC.


you need to have an Internal DNS Server, that will forward external Requests to your ISP DNS Servers, read this  http://elmajdal.net/isaserver/Internal_DNS_Forwarding.aspx


HTH,
Tarek




digitlman -> RE: ISA 2006 slow uploads (23.Jul.2007 11:27:49 AM)

Ok, we can fix this misconfiguration.

Do you think this has any effect on our slow UL speeds?




elmajdal -> RE: ISA 2006 slow uploads (23.Jul.2007 12:29:17 PM)

Hi,

Network Cards Configuration is one of the main key configuration for ISA Server.




digitlman -> RE: ISA 2006 slow uploads (23.Jul.2007 12:31:39 PM)

Granted, but would DNS configured on the external NIC affect outbound bandwidth?




digitlman -> RE: ISA 2006 slow uploads (26.Jul.2007 4:27:02 PM)

Any further advice/suggestions?




digitlman -> RE: ISA 2006 slow uploads (2.Oct.2007 12:14:05 PM)

After opening a support case with Microsoft and working with an engineer, the "fix" has been to disable the web proxy filter. 

I still cannot fathom why I need to turn off a (major) feature of ISA to get the damn thing to function the way it is supposed to work.

My question is:  What are the ramifications of turning off the filter?  I was told that the HTTP filters would still work, but each client still makes a direct connection to the target site, and all caching by ISA is nullified.  What else would I be missing in this configuration?




Sebenza -> RE: ISA 2006 slow uploads (1.Apr.2009 10:40:13 AM)

Hmmm...except ISA 2006 doesn't allow you to disable the web proxy filter. In fact, as per the Help in ISA 06 "You cannot disable the PPTP Filter and Web Proxy Filter add-ins".
 
So how did you get it turned off? And were there any side-effects?




Jason Jones -> RE: ISA 2006 slow uploads (1.Apr.2009 10:43:47 AM)

quote:

ORIGINAL: digitlman

After opening a support case with Microsoft and working with an engineer, the "fix" has been to disable the web proxy filter. 



I am very surprised at this - did they explain why this needs to be done?

Cheers

JJ




SteveMoffat -> RE: ISA 2006 slow uploads (1.Apr.2009 7:34:20 PM)

Hey guys..the original post was like 2 years ago......strange how it pops up now...




tshinder -> RE: ISA 2006 slow uploads (1.Apr.2009 7:43:53 PM)

I doubt MS said to disable the Web proxy filter. They might have meant the HTTP Compression filter.

Tom




SteveMoffat -> RE: ISA 2006 slow uploads (1.Apr.2009 7:45:52 PM)

That's what I was thinking...




Jim Harrison -> RE: ISA 2006 slow uploads (1.Apr.2009 8:26:31 PM)

I want the case #.
Any CSS engineer that tells you:
1. disable the Web proxy filter (you can't)
2. it won't affect HTTP processing

is "misinformed" and I need to have a discussion with hir.




Page: [1] 2   next >   >>