Hello everyone,
Not sure if anyone here has experinced any issues related to slow internet access using ISA 2006. I installed it about 3 months ago and soon afterwards reliased that all the users were complaining about slow internet.
I posted here as well about the problem and did eveything but the issue persisted. Only a few days ago i found out about the MS article
http://support.microsoft.c
Now after running the script the the internet access has been much faster with lots of less complaints :-) . Before my browser (both IE and Mozilla) used to time out/freeze but now that is not happening but in general the speed is not same when i use smoothwall for web proxy.
Now my question is. Does ISA generally slows down the access to the internet since it has to apply all the filters and do all th proxying or is it still something which i am missing out ?
Has anyone experinced such issues, if so have you been able to resolve the problem all together.?
Any suggestions please ?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Thanks for the explanation!!
I know it will be hard to answer but can you tell me the most common problems which i need to look into which in turn causes the slowness.?
I have already verified my DNS settings ,cache is also enabled.
Any counters which i need to monitor?
How about the hardware :- AMD Athlon 64 bit, 2 GB RAM, MS Ser 2003 SE,
Confused !!!
DNS - no offence but everyone says their DNS is correct - the majority are not once we investigate.
Service packs and support packs for ISA not being installed.
Poor configuration on the network ports - duplex, speed etc plus crap cabling.
poor implementaion of the ISA firewall policy rules and the ISA system policy rules
lack of understanding in what the organisation actually requires ISA to do for them.
incorrect nic binding sequence
The list goes on really.
Many have never even heard of the BPA, let alone run it and assessed the outputs lol
As far as my case is concerned..i am 101 % sure that my DNS is right. All SP's and support packs installed.
Changed the server ports not once but several times. Poor implementation of firewall rules (can be the reason - not sure ).
Been using BPA and it doesnt give any errors.
Well about the nic binding ,i dont know much how and what to do ? I read it at several places about setting up the NIC right. What do i need to check and how to set the binding right.
I am using 2 NIC's . A fast ethernet for the internal LAN and a gigabit for the DMZ. I have an inclination that it has to do something with the NIC's (well i assume so..lol).
provide the output from an ipconfig /all from the ISA server
The output from a route print would also be useful
the main DNS issues are that people will insist on putting ISP dns addresses either on their servers or teir workstations - an absolute no-no. The only place the ISP dns should be set is in the forwarders tab on the dns service within your internal DNS servers. The second major cock-up for DNS is putting in a DNS entry on the external nic. i am sure you haven't done this though.
for nic binding, the internal ISA NIC must be bound first - the external (and perimeter nics if you have them) must follow.
There are many issues with Gigabit connections. Not using latest NIC drivers - especially important for Broadcom cards, using a standard CAT5 cable rather than the proper CAT5E or CAT6 (needed for correct gigabit operation) or using a CAT5E cable that is longer than that supported at Gigabit speeds.
Windows IP Configuration
Host Name . . . . . . . . . . . . : ISA
Primary Dns Suffix . . . . . . . : BM.com
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : abc.com
Ethernet adapter Local Area Connection 3:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Belkin F5D5005 v2000 Gigabit Desktop PCI
Card
Physical Address. . . . . . . . . : 00-17-3F-9C-0A-A2
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 172.31.0.200
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 172.31.0.1
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated Controlle
r
Physical Address. . . . . . . . . : 00-18-8B-8E-1A-95
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.8
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 10.0.0.4
--------------------------
IPv4 Route Table
==========================
Interface List
0x1 ..........................
0x10003 ...00 17 3f 9c 0a a2 ...... Belkin F5D5005 v2000 Gigabit Desktop PCI Car
d
0x10004 ...00 18 8b 8e 1a 95 ...... Broadcom 440x 10/100 Integrated Controller
==========================
==========================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 172.31.0.1 172.31.0.200 20
10.0.0.0 255.255.255.0 10.0.0.8 10.0.0.8 20
10.0.0.8 255.255.255.255 127.0.0.1 127.0.0.1 20
10.255.255.255 255.255.255.255 10.0.0.8 10.0.0.8 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
172.31.0.0 255.255.255.0 172.31.0.200 172.31.0.200 20
172.31.0.200 255.255.255.255 127.0.0.1 127.0.0.1 20
172.31.255.255 255.255.255.255 172.31.0.200 172.31.0.200 20
224.0.0.0 240.0.0.0 10.0.0.8 10.0.0.8 20
224.0.0.0 240.0.0.0 172.31.0.200 172.31.0.200 20
255.255.255.255 255.255.255.255 10.0.0.8 10.0.0.8 1
255.255.255.255 255.255.255.255 172.31.0.200 172.31.0.200 1
Default Gateway: 172.31.0.1
==========================
Persistent Routes:
None
Well i have change the binding order as you said.
Will look into the driver's tomorrow and maybe i will change the broadcom driver as well.
Business Accounts
Answer for Membership
by: keith_alabasterPosted on 2009-01-15 at 08:08:57ID: 23384766
No, it doesn't and in most cases it can speed operations up.
However, ISA is not a 'toy' application - it needs the correct levels of hardware to be specified, the configuration needs to be 100% in its implementation, it requires analysis on the types of traffic to be allowed/denied and for whom. Unfortuantely most people do not read all of the manuals or go on the prescribed training courses to learn the art - they simply runb the setup CD and think that it will work. Often it does (but ineffectually), the most imes though it only partially delivers. No fault of ISA but, of course, it carries the can and gets known as 'hard work'.
In reality, it is no different from most other major server applications. Biztalk, Sharepoint, System Centre, IAG, ISA, they all need specialist knowledge to get the most (and best) out of them. Any other approach is guesswork and likely false economy.
The majority of my work now is not installing ISA server or IAG but going around and sorting out the absolute mess most people make of their implementations. Basic networking configuration, DNS configuration, routing protocols, gateways, proper subnetting and the like - all need to be correct before ISA even gets installed. This is the same for ANY firewall device not just ISA of course. Anyway, you get my drift.....
So no, when set up as it should be, ISA does not slow down the access. By proper setup of the environment and the caching options it will enhance the performance for Internet access and published applications.
Keith
ISA MVP