• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

slow browsing

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> General >> slow browsing Page: [1]
Login
Message << Older Topic   Newer Topic >>
slow browsing - 13.Apr.2009 6:06:45 AM   
Ejukated

 

Posts: 8
Joined: 26.Feb.2004
From: Australia
Status: offline
Hi all,

Hope someone here can help me. I have ISA 2006 on a windows server 2003 thats the domain controller. ISA has been working perfectly since january, in the last few weeks the internet browsing has been slow (think dialup speeds). Its not the ISP, ive plugged a computer back into the modem and the internet is normal, i uninstalled ISA 2006 and the internet is normal on the server. After reinstalling the speed was good for a few hours then went back to being slow again.

In the logging there are a few "Failed Connection" logs from my unrestricted internet rule that I cant seem to resolve.

Does anyone have any suggestions?
Post #: 1
RE: slow browsing - 13.Apr.2009 6:18:59 AM   
SteveMoffat

 

Posts: 1130
Joined: 29.Jun.2001
From: Hamilton, Bermuda
Status: offline
Remove ISA from your DC. Very stupid way to apply ISA & not supported.

You have opened up your domain to attack. Swiss cheese firewall.

_____________________________

Thanks
Steve

ISA 2006 Book! - http://tinyurl.com/2gpoo8
TMG Bible - http://tinyurl.com/ykv85hr
www.isaserver.bm

The built in ISA help is likely the most comprehensive help built into an application anywhere. USE it!!! Search it!!! RTFM

(in reply to Ejukated)
Post #: 2
RE: slow browsing - 13.Apr.2009 9:49:52 AM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

totally agree with Steve. Make sure to install ISA firewall on a separate machine and properly configure ISA NICs.

Check this article: http://blog.msfirewall.org.uk/2008/06/isa-servers-recommeded-network-card.html

Regards,
Paulo Oliveira.

(in reply to SteveMoffat)
Post #: 3
RE: slow browsing - 14.Apr.2009 4:49:11 AM   
Ejukated

 

Posts: 8
Joined: 26.Feb.2004
From: Australia
Status: offline
ok, ive moved isa off the DC. However the performance is still super slow. The two NIC's in are configured as per Paulo link.

I've run ISA2000, ISA2004 and recently ISA 2006 all without problems untill a few weeks ago, and nothing has changed on the systems apart from regular windows updates.


Could this be a routing issue as when I uninstalled both NIC and installed them everything was fine for a few hours (I understand this recreates the routing tables?)

(in reply to paulo.oliveira)
Post #: 4
RE: slow browsing - 14.Apr.2009 1:55:15 PM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

is your internal DNS server configured to forward DNS requests to ISP DNS server?

Regards,
Paulo Oliveira.

(in reply to Ejukated)
Post #: 5
RE: slow browsing - 15.Apr.2009 8:50:43 AM   
Ejukated

 

Posts: 8
Joined: 26.Feb.2004
From: Australia
Status: offline
Yes, I've configured DNS settings as per "Drawing 3" from this site: http://www.isaserver.org/tutorials/DNS_for_ISA_Server.html

(in reply to paulo.oliveira)
Post #: 6
RE: slow browsing - 15.Apr.2009 2:50:13 PM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

do you have a AV software or backup client software installed on ISA?

Regards,
Paulo Oliveira.

(in reply to Ejukated)
Post #: 7
RE: slow browsing - 15.Apr.2009 8:19:30 PM   
Ejukated

 

Posts: 8
Joined: 26.Feb.2004
From: Australia
Status: offline
Symantec Antivirus V10

No thirdparty backup software.

(in reply to paulo.oliveira)
Post #: 8
RE: slow browsing - 16.Apr.2009 8:27:11 AM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

is this host-based AV or HTTP filtering? If itīs host-based, disable it and see if your browsing itīs still slow.

Regards,
Paulo Oliveira.

(in reply to Ejukated)
Post #: 9
RE: slow browsing - 18.Apr.2009 3:54:40 AM   
Ejukated

 

Posts: 8
Joined: 26.Feb.2004
From: Australia
Status: offline
Hi Paulo,

thanks for the suggestion. Its not host based. I disabled the auto protects anyway with no change in performance :(

(in reply to paulo.oliveira)
Post #: 10
RE: slow browsing - 18.Apr.2009 7:56:03 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Hi,

Enable the option Use HTTP 1.1 through proxy connections




Have you enabled cache ?



_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to Ejukated)
Post #: 11
RE: slow browsing - 18.Apr.2009 10:56:31 AM   
Ejukated

 

Posts: 8
Joined: 26.Feb.2004
From: Australia
Status: offline
Thanks for the suggestions Tarek. The "HTTP 1.1 through proxy connections" is already set as is cache.

I think it may be a DNS or routing misconfiguration. Can anyone suggest how I should go about testing this conclusively?

(in reply to elmajdal)
Post #: 12
RE: slow browsing - 18.Apr.2009 2:02:39 PM   
SteveMoffat

 

Posts: 1130
Joined: 29.Jun.2001
From: Hamilton, Bermuda
Status: offline
Are you allowing access out for DNS requests from your DNS server?

_____________________________

Thanks
Steve

ISA 2006 Book! - http://tinyurl.com/2gpoo8
TMG Bible - http://tinyurl.com/ykv85hr
www.isaserver.bm

The built in ISA help is likely the most comprehensive help built into an application anywhere. USE it!!! Search it!!! RTFM

(in reply to Ejukated)
Post #: 13
RE: slow browsing - 18.Apr.2009 5:01:48 PM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Hi,

For configuring ISA Server Network Cards, check this article : Configuring ISA Server Interface Settings.

As for the Internal DNS Server, check this article : Internal DNS Forwarding Through ISA Server 2004/2006

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to Ejukated)
Post #: 14
RE: slow browsing - 18.Apr.2009 7:34:05 PM   
Ejukated

 

Posts: 8
Joined: 26.Feb.2004
From: Australia
Status: offline
Hi Steve, yes my there is already a rule to allowing traffic from my internal DNS. It's configured exactly like the links in Tareks post.

Tarek, its been configured exactly like those links (found them on google a while ago)

(in reply to elmajdal)
Post #: 15

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> General >> slow browsing Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts