SBS2003 Internet connection very slow

After a rebuild of the SBS 2003 server and re-connecting people on the VPN, our internet connection has slowed right down. Finding a web page other than the default home page seems to take forever now.
I noticed that one of our remote users was taking a long time to synchronise email with Exchange after re-joining him to the Exchange Server but when he works offline in Outlook the rate of data through the modem is still very high. Does it still try to synchronise?
I went on Remote Desktop to the client and noticed Outlook is always trying to retreive data from the Exchange Server? But that stopped when I took him offline in Outlook.
I am wondering if it is the set up for the DNS and forwarders etc. that could be wrong.

Any helpful ideas greatly appreciated as I have very frustrated employees trying to use the web!
DNS-1.JPG
DNS-2.JPG
DNS-3.JPG
TracyFazackerleyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Dave StringfellowIT managerCommented:
Change your DNS forwarders to 208.67.222.222 and 208.67.220.220 (www.opendns.com) and try again.

Also run the ICW and see if that helps.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Do verify if the users have Outlook in cache mode, as Online mode affects the working (performance) of the server in a big way.
0
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Is the Exchange and Clients pointing to a internal DNS ?
How many NIC's do we have on the Server ?
0
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

TracyFazackerleyAuthor Commented:
Hi

The internal DNS is the server IP address and I think they are pointing to that based on the first file I posted? The server has 1 NIC only.
I'm pretty sure all users are in cache mode for Exchange but will double check tomorrow at work and confirm.
One thing I noticed after posting this question was the VPN client I thought causing some of the problems, was still on the VPN but another had disconnected and the kbps rate through the PIX firewall dropped off dramatically.We went from 3 to 2 VPN users only but it made a big difference. One thing I do have to do for the VPN user who disconnected, is to still re-connect him to the Domain after the rebuild so the computer is listed properly under client computers and I don't have Netlogon errors for him. I didn't notice this making a difference with others but maybe?
0
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Good to know you got a lot of info .... also do verify if its a user specific or not ?
0
TracyFazackerleyAuthor Commented:
Hi
We are still having major problems with a slow internet connection . This morning it was extra slow and one of the VPN clients was complaining that his Outlook was continually trying to retreive data from the Exchange server. He couldn't send a large email. When I put that intomdrafts the synchronising was still happening.
I tried restarting the DNS on the server but don't think that helped. I did notice it had information events saying it could not signal the service "NAT" when doing this.
I have added OpenDNS IP addresses tot he forwarders and put them at the top but this seems not to be the problem. Outlook is in cached mode for everybody.

KHelp any ideas much appreciated.
0
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Is the DNS configured correctly and Exchange and other clients looking at the Internal DNS. Any specific thing that you have noted that if the VPN users log you have internet issues something you might have seen.
0
TracyFazackerleyAuthor Commented:
As my first jpg file shows the internal address for DNS is pointing to the server internal IP address and "only the following IP address" checked.
How do you check that Exchange is looking at internal DNS?
The internet improved awhile ago and the only thing I notice is the Kbps through the Cisco PIX drops off dramatically when the internet is good. I still have the full VPN users connected though so I don't think they are the problem. Could something be using us as a relay or something causing heavy through put and slowing our internet connection down?
0
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
On the NIC card we go to properties and Preffered DNS and Alternate DNS, as you have only one DNS so Preffered DNS should be the internal one and there should be nothing in the Alternate DNS.

Relay would affect the server but if you want to keep a eye on that open the ESM and the queues folder and verify if there is no abnormal usage and also see if there is some process taking high CPU at the time of issue.

Also try shutdown the CISCO if possible and see if there is still an issue with Internet. As there might be some updates done on the windows or exchange but not accordingly on the cisco.
0
TracyFazackerleyAuthor Commented:
Hi
Preferred DNS is correct with server IP on the propeties for the server NIC, with no alternate DNS. Client computers have "obtain IP address automatically."
I have been checking queues and mailbox bytes increase all along and have not noticed anything out of ordinary there. I will try to look at the PIX informational log to see if that gives a clue. Today the internet has been back to normal so weird. I changed nothing except yesterday added some more CAL licences that had been forgotten in the new server set up. We had been going over our number.

I cannot shut down the Cisco PIX as that would cut off the VPN users as it authenticates them. Updates would not run all day as mostly the internet has been slow for would they?

I'll keep an eye on PIX through put and see what's happening then to give a clue.
0
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
So has the Internet worked fine this last week or did you see any issues ?
0
TracyFazackerleyAuthor Commented:
The internet seems to be mainly ok with only a few instances of running very slow. The boss was in over the 3 day long weekend and also mentioned it had very slow periods when nobody else was at work on the internet so I'm still confused as to what could be causing all this?

Any other thoughts as to what I could check on server setup?
0
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
If the issue is IE then it has to be something with the Networking not Exchange at all ...
Check if your DNS is fine and there is no port blocking in case of firewall ...
0
TracyFazackerleyAuthor Commented:
Hi
I think we have already been over the DNS and I cannot see anything wrong there. It may be the security/firewall settings as you say that make some web sites very slow. I will just have to keep an eye on it. Thanks for your help. I will award points across the board for the helpful responses.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Web Browsers

From novice to tech pro — start learning today.