ISA Server 2004: Put in T1000 switches - now got problems !

Posted on 2006-03-28
Last Modified: 2011-09-20
Hello there,

We have a small single domain network - vanilla MS stuff - with an ISA 2004 gateway. Clients use IE and Firewall clients.

It was all connected via unmanaged T100 'superstack' hubs but at the weekend I replaced everything with T1000 switches.

Since then I've had problems.

The clients will very frequently (say, once at hour at least) slow right down or get the ISA webpage unreachable '404' type page.

A restart of the ISA Services sorts it. It's very quick again ... for a while.

I get this even with a client that's directly connected into the same T1000 switch as the ISA Server.

Now, i'm a notive with this stuff - and no firewall expert, so I'm a bit stuck.

As these switches have IP addresses - do you think there is some sort of routing problem? Does/should ISA rebuild the routing tables?

I really can't think what else has changed ... but it's is a REAL problem for me ... any help would be appreciated as I don't know where to start. I've checked the obvious - DNS etc and everything is resolving well. There are no errors in any event logs that I can see.

Kind of desperate ... many thanks ...

Question by:SpencerSteel
    LVL 9

    Expert Comment

    Once you had the switches in place did you happen to move your cabling around in different ports on the swithces? Do this, when you can, cut your switches off and power them back on. See if your problem goes away.
    LVL 51

    Expert Comment

    by:Keith Alabaster
    Doubt if this is a routing issue. Certainly won't be a firewall issue if you have changed nothing. The exception will be if you have used IP addresses on the switches that conflicy.

    for example, if your interanl LAN is on 192.168.0.x and the external LAN is on 10.0.0.x. If you have put a 10.0.0.x address on the inside or a 192.168.0.x address on the external side it will be unhappy.

    Check the interface settings on the switches. and compare against the network card on the ISA server. Same speed, duplex setting etc.

    Author Comment

    Just to follow up - this has turned into a M$ 'pay-per' incident.

    They are helping me work on it - so far many hours have been spent and we are not exactly sure what the issue is.

    I'll let you know when we find out.


    Author Comment

    OK...problem solved, basically it was a problem with the LAN cards driver and the 'virus throttle' service, which is something that HP put on the NIC card on these pre-built ISA Server DL320's.

    Updating all the drivers sorted the issue.

    Very simple solution but something we all (including M$) overlooked.


    Accepted Solution

    PAQed with points refunded (500)

    Community Support Moderator

    Featured Post

    Do You Know the 4 Main Threat Actor Types?

    Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

    Join & Write a Comment

    If you are like regular user of computer nowadays, a good bet that your home computer is on right now, all exposed to world of Internet to be exploited by somebody you do not know and you never will. Internet security issues has been getting worse d…
    To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now