• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Intermittent Timeouts browsing?

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> HTTP Filtering >> Intermittent Timeouts browsing? Page: [1]
Login
Message << Older Topic   Newer Topic >>
Intermittent Timeouts browsing? - 6.Jun.2008 2:07:57 PM   
CSDAdmin

 

Posts: 25
Joined: 19.Oct.2006
Status: offline
Anyone else have issue with ISA where the page will hang loading, as soon as you hit refresh or hit enter again on url, the page will load?

It is especially bad on sites like facebook where ajax scripts try to submit information.

When i uncheck proxy, the site works fine, when i proxy through ISA it has a lot of trouble.

Anyone know how to even troubleshoot this?
Post #: 1
RE: Intermittent Timeouts browsing? - 6.Jun.2008 4:57:04 PM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

is your rule configured to allow only authenticated users? Maybe thats the "problem", because some websites, like bank sites, donīt work well when the proxy server is configured to ask for authentication. These type of applications are being processed by the webproxy but are not passing all the info webproxy expects from an IE or other compliant web browser.

It explains why works when you remove the proxy setting from the browser and access the website as secureNAT (assuming the ISA is the default gateway).

Check ISA logs to make sure if thereīs an error.

Regards,
Paulo Oliveira.

(in reply to CSDAdmin)
Post #: 2
RE: Intermittent Timeouts browsing? - 6.Jun.2008 6:37:47 PM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Make sure you are running the ISA2k6 supportability update and maybe consider installing the April 2008 hotfix package.

Run ISA Best Practice Analyser (BPA) and check for problems with MTU size (amongst others).

Make sure the IE browers are configured to use HTTP 1.1 and HTTP 1.1 via proxy.

Cheers

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to paulo.oliveira)
Post #: 3
RE: Intermittent Timeouts browsing? - 9.Jun.2008 9:57:03 AM   
CSDAdmin

 

Posts: 25
Joined: 19.Oct.2006
Status: offline
The 1.1 is allowed through proxy connections, looking at the ISA server.

The HTTP Proxy Connection keeps initiating and closing.

The log shows:
Open HTTP Proxy at 172.20.0.103:1282
Http traffic allowed
Close HTTP Proxy
Http Denied traffic (the timeout i suspect)
Open HTTP Proxy at 172.20.0.103:1283
and so on.

There seems to be gaps in the proxy connection where http traffic is denied.
ISA BPA is fine, the hotfix is being downloaded now.

As far as forced authentication, it is not set in the network section to connect to proxy, it is set in the rule allowing http out (authenticated users only).

Have an AD domain with proxy set as a domain policy, so all:
Internet Explorer - connection to proxy set, login information sent
Safari - connection to proxy is IE's so set, login is requested
Firefox - Ignores group policy, manually set to use proxy, login is requested.

All three do authenticate though.

< Message edited by CSDAdmin -- 9.Jun.2008 10:10:36 AM >

(in reply to Jason Jones)
Post #: 4
RE: Intermittent Timeouts browsing? - 9.Jun.2008 11:26:10 AM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
quote:

ORIGINAL: CSDAdmin

The 1.1 is allowed through proxy connections, looking at the ISA server.



How about your clients?

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to CSDAdmin)
Post #: 5
RE: Intermittent Timeouts browsing? - 11.Jun.2008 3:25:37 PM   
CSDAdmin

 

Posts: 25
Joined: 19.Oct.2006
Status: offline
bad spacing on my part to re-iterate from previous post:

http1.1 through proxy is enabled on client,

looking at server these logs were:
etc..

(in reply to Jason Jones)
Post #: 6

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> HTTP Filtering >> Intermittent Timeouts browsing? Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts