RE: Slow Web aft SP1 & ISA2004 Upgrd
- From: Bitbob <Bitbob@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Tue, 27 Sep 2005 10:44:03 -0700
Edward how do I attach these files to a reply?? I have answered your text in
the copied reply- Not using ISA cache and all ISA client software and proxy
settings correct!
"Edward Tian" wrote:
> Hi:
> Thank you for posting here.
>
> From the description, I understand that after you applied SBS 2003 SP1 and
> installed ISA 2004, the performance of web access was decreased. If I have
> misunderstood your concern, please do let me know.
>
> First I would like to confirm with you if the internal clients have been
> configured as Web Proxy client.
> To be a Web Proxy client, please open IE, click Tools->Internet Options,
> and click Connections->LAN Settings, configure ISA server as your Proxy
> server (you can enter either the computer name or the internal IP of the
> ISA server, port 8080 by default.)
Yes all are set up with the firewall client application!!! All have been set
to treat the SBSserver as a proxy server.
>
> Then re-run the CEICW Wizard, the wizard can help us configure the
> networking settings for a SBS server. It automatically creates the ISA
> rules for internet access and site publishing. It's strongly recommended to
> use the wizard to configure the SBS server. More info:
> 825763 How to configure Internet access in Windows Small Business Server
> 2003
> http://support.microsoft.com/?id=825763
I have used the wizard several times trying different settings and all seem
to have the same problem
>
> Generally speaking, when the internal clients attempt to access the
> internet web site, the packages will be sent to the ISA Server and ISA will
> check the user credential first. If the user is allowed to access, the ISA
> Server itself will retrieve the specific web page from the internet instead
> of the clients. After that, the ISA will send this page to the internal
> client. In this way, little performance decrease is expectable. However, if
> the access speed is incredible slow or even the web page can't be
> displayed, we may need to troubleshoot the problem.
>
> Before we go any further, I would like to suggest you clear the ISA cache,
I am not running the isa cache so there is not file to clear!
> To do so:
>
> 1. On the ISA Server computer, stop the Microsoft Firewall service.
> 1). Click Start, click Run, type services.msc in the Open box, and then
> click OK.
> 2). Right-click Microsoft Firewall, and then click Stop.
>
> 2. Start Windows Explorer.
>
> 3. Locate the Urlcache folder.
>
> 4. In the Urlcache folder, locate the file that has the .cdat file name
> extension.
>
> 5. Right-click the .cdat file, and then click Delete.
>
> 6. When you are prompted to confirm the removal of the .cdat file, click
> Yes.
> If you are prompted to delete the .cdat file because it is too big for the
> recycle bin, click Yes.
>
> 7. Restart the Microsoft Firewall service.
>
> More information:
> How to delete the Web cache in Internet Security and Acceleration Server
> 2004
> http://support.microsoft.com/default.aspx?scid=kb;en-us;838248
>
> Please also double check the DNS setting on the SBS box:
> a. Leave the Default Gateway of the internal NIC blank on the SBS.
> b. Configure both the internal NIC and the external NIC to use the internal
> DNS Service as the DNS Server.
> c. On the DNS Server, create the DNS Forwarder to forward the external DNS
> resolution requests to the ISP's DNS
>
> Then try accessing the internet web site from the clients again, does the
> problem persist? The problem is persisting???? getting worse acctually!
>
> If the problem persists, please help me gather the following information to
> narrow down the issue:
> 1. Does this performance issue occur on all internet websites?
>
> 2. Does the problem occur on all internal clients? What about accessing the
> website from the SBS Server itself?
>
> 3. Are there any corresponding event logs in the Event Viewer? If any,
> please post them to me in the reply.
>
> 4. Please help to gather the ISA Info:
>
> 1) Download the file from the following URL:
>
> http://www.isatools.org/isainfo/ISAInfo.zip
>
> 2) Extract all files to a folder on ISA server.
> 3) Double click Isainfo.js. This will generate 2 files
> ISAInfo2004-<computer-name>.log and ISAInfo2004-<computer-name>.xml in the
> current folder.
> 4) Please send these files to me.
>
> 5. Please also help to gather the ISA logs:
>
> 1) Schedule a down time.
>
> 2) Open ISA 2004 management console.
>
> 3) Expand the server node and highlight 'Monitoring'.
>
> 4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
> Pane' is showed there.
>
> 5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
> Tasks', and then switch the 'log storage format' from 'MSDE database'
> (default) to 'File'.
>
> 6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
>
> 7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
> Tasks', and then switch the 'log storage format' from 'MSDE database'
> (default) to 'File'.
>
> 8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
>
> 9) Click 'Apply' to save changes and update the configuration.
>
> 10) Temporarily disable the Firewall service. To do that, please click
> Monitoring | Services tab, and then right click 'Microsoft Firewall' to
> choose 'Stop'.
>
> 11) Clear the current existing W3C logs. To do that, go to the log saving
> directory and clean any existing .W3C logs. By default, the logs will be
> saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may not
> be able to deleted, that's normal.) You may backup them first and then
> delete them.
>
> 12) Go back to the ISA 2004 management console, and then Start the stopped
> 'Microsoft Firewall' service.
>
> 13) Reproduce the problem (Try accessing the particular web site such as
> www.microsoft.com and www.google.com from the internal clients), stop the
> service, and then gather the resulting W3C files to me for analysis.
>
> 14) Please also let me know the IP address of the testing clients/server so
> that I can filter the data.
>
> Hope the above information helps.
> I appreciate you taking time to perform the test and gather the
> corresponding information. Please feel free to let me know if you have any
> questions or concerns.
>
> Have a nice day! :)
>
> Best Regards
> Edward Tian(MSFT)
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
> ======================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
> ======================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> --------------------
> | Thread-Topic: Slow Web aft SP1 & ISA2004 Upgrd
> | thread-index: AcXBJnpOqjpviggfQGa67tP10FEtoA==
> | X-WBNR-Posting-Host: 69.88.120.138
> | From: =?Utf-8?B?Qml0Ym9i?= <Bitbob@xxxxxxxxxxxxxxxxxxxxxxxxx>
> | Subject: Slow Web aft SP1 & ISA2004 Upgrd
> | Date: Sat, 24 Sep 2005 09:39:05 -0700
> | Lines: 9
> | Message-ID: <5D7652E8-B477-4836-AE52-1D861F5D6C36@xxxxxxxxxxxxx>
> | MIME-Version: 1.0
> | Content-Type: text/plain;
> | charset="Utf-8"
> | Content-Transfer-Encoding: 7bit
> | X-Newsreader: Microsoft CDO for Windows 2000
> | Content-Class: urn:content-classes:message
> | Importance: normal
> | Priority: normal
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> | Newsgroups: microsoft.public.windows.server.sbs
> | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
> | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:156158
> | X-Tomcat-NG: microsoft.public.windows.server.sbs
> |
> | After upgrading to SP1 and installing ISA 2004 as new install (not
> upgrade
> | from 2000) My web access has slowed down. Client can get 3-4 pages of
> info
> | and then browser just stops responding or firewall returns message that
> it
> | has timed out and can't reach server that it was just downloading pages
> from.
> | They are working through a Hrdware firewall with correct ports open.
> Firewall
> | clients are all installed on workstations and proper rules are in place
> on
> | the ISA2004 install. It acts like its filling up a buffer and then
> stalling.
> | Any Ideas? I'm thinking of uninstalling ISA2004 and reinstalling- any
> | problems with doing this? Thanks
> |
>
>
.
- References:
- RE: Slow Web aft SP1 & ISA2004 Upgrd
- From: Edward Tian
- RE: Slow Web aft SP1 & ISA2004 Upgrd
- Prev by Date: Re: Backup Domain Controller
- Next by Date: RE: PPC sync & exchange only going one way
- Previous by thread: RE: Slow Web aft SP1 & ISA2004 Upgrd
- Next by thread: RE: Slow Web aft SP1 & ISA2004 Upgrd
- Index(es):
Relevant Pages
|
