Re: ISA web proxy slowdown

Hi Williams,

Thanks for your update.

To narrow down the problem, would you please help me collect the following
information?

1. Post the ipconfig/all result on SBS and client computer.
2. Clear ISA cache following the KB article to see how thing goes:

838248 How to delete the Web cache in Internet Security and Acceleration
Server
http://support.microsoft.com/?id=838248

3. Collect ISA log:

1) Schedule a down time.
2) Open ISA 2004 management console.
3) Expand the server node and highlight 'Monitoring'.
4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
Pane' is showed there.
5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.
6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
Tasks', and then switch the 'log storage format' from 'MSDE database'
(default) to 'File'.
8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
9) Click 'Apply' to save changes and update the configuration.
10) Temporarily disable the Firewall service. To do that, please click
Monitoring | Services tab, and then right click 'Microsoft Firewall' to
choose 'Stop'.
11) Clear the current existing W3C logs. To do that, go to the log saving
directory and clean any existing .W3C logs. By default, the logs will be
saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may not
be able to deleted, that's normal.) You may backup them first and then
delete them.
12) Go back to the ISA 2004 management console, and then Start the stopped
'Microsoft Firewall' service.
13) Reproduce the problem (initiate an SQL access), stop the service, and
then gather the resulting W3C files to me for analysis.

More information:

837832 How to prevent the caching of content from certain Web sites in
Internet
http://support.microsoft.com/?id=837832

I appreciate you taking time to collect the information. Please do not
hesitate to let me know if there is anything I can do for you.

I am looking forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Reply-To: "Al Williams" <donotreplydirect@xxxxxxxxxxxxxxxx>
| From: "Al Williams" <donotreplydirect@xxxxxxxxxxxxxxxx>
| References: <eVvjrIiPGHA.1088@xxxxxxxxxxxxxxxxxxxx>
<NbdwVjoPGHA.2912@xxxxxxxxxxxxxxxxxxxxx>
| Subject: Re: ISA web proxy slowdown
| Date: Mon, 6 Mar 2006 10:01:00 -0700
| Lines: 168
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
| X-RFC2646: Format=Flowed; Original
| Message-ID: <#ZdnM#TQGHA.2692@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: s142-179-167-5.ab.hsia.telus.net 142.179.167.5
| Path: TK2MSFTNGXA03.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP14.phx.gbl
| Xref: TK2MSFTNGXA03.phx.gbl microsoft.public.windows.server.sbs:249803
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| I checked things over and:
|
| 1. Network configuration is fine.
| 2. Cache cleaning was done.
| 3. DNS was flushed - no DNS issues that I can see.
|
| Didn't really see much difference, but the problem seems to come and go
and
| some sites work better than others. One thing I noticed is the slowdown
is
| more apparent when downloading a file from a site - the XX Kb/sec value
is
| much lower when going through the ISA web proxy than it is when "Use a
proxy
| server for your LAN" is disabled and you use winsock via ISA.
|
| --
| Allan Williams
|
|
|
| ""Crina Li"" <v-crinal@xxxxxxxxxxxxxxxxxxxx> wrote in message
| news:NbdwVjoPGHA.2912@xxxxxxxxxxxxxxxxxxxxxxxx
| > Hi Allan,
| >
| > Thank you for posting in SBS newsgroup.
| >
| > From the description, I understand the issue to be: Internet access is
| > quite slow when IE is configured to use the ISA web proxy server.
However,
| > all works normally when you use firewall client. If I have misunderstood
| > your concerns, please do not hesitate to let me know.
| >
| > As I know, the problem should be caused by DNS resolution. We can check
| > the
| > following:
| >
| > 1. Check network configuration on SBS and client computer:
| >
| > On SBS server:
| >
| > External NIC:
| > IP: assigned by your ISP or your hardware router
| > Gateway: your ISP or your Hardware router IP
| > DNS: SBS INTERNAL NIC IP as the only entry
| >
| > Internal NIC:
| > IP: Fixed IP
| > Gateway: None
| > DNS: SBS INTERNAL NIC IP as the only entry
| >
| > In the DNS console (dnsmgmt.msc), right click your ServerName and click
| > properties. In the Forwarders tab, your ISP DNS server IP should be
| > inputted there.
| >
| > On workstation inside your SBS local subnet
| >
| > IP: Assigned by DHCP on SBS
| > Gateway: SBS internal NIC IP
| > DNS: SBS INTERNAL NIC IP as the only entry
| >
| > 2. Clean up the IE cache of the workstation and SBS. Clean up the IE
| > cache:
| >
| > Open Internet Explorer. Click 'Tools'->'Internet Options'. In 'General'
| > tab, click 'Delete files' and 'Delete cookies' buttons. Will the issue
be
| > resolved?
| >
| > 3. Clean up the DNS cache of the workstation and SBS. Open a command
| > prompt, input 'ipconfig /flushdns'. Reboot the workstation and then try
| > the
| > internet access again.
| > 4. Check the following KB article:
| >
| > 839510 You experience slow Web browsing performance on internal client
| > computers that use Internet Security and Acceleration Server to manage
Web
| > requests
| > http://support.microsoft.com/default.aspx?scid=kb;EN-US;839510
| >
| > More information:
| >
| > 837572 Performance tuning options for Internet Security and Acceleration
| > Server 2004
| > http://support.microsoft.com/default.aspx?scid=kb;EN-US;837572
| >
| > 816320 How to configure firewall and Web proxy client Autodiscovery in
| > Windows Server 2003
| > http://support.microsoft.com/default.aspx?scid=kb;EN-US;816320
| >
| > I appreciate your time and look forward to hearing from you.
| >
| > Best regards,
| >
| > Crina Li (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
| > the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
| > doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| >
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > --------------------
| > | Reply-To: "Al Williams" <donotreplydirect@xxxxxxxxxxxxxxxx>
| > | From: "Al Williams" <donotreplydirect@xxxxxxxxxxxxxxxx>
| > | Subject: ISA web proxy slowdown
| > | Date: Thu, 2 Mar 2006 10:53:08 -0700
| > | Lines: 20
| > | X-Priority: 3
| > | X-MSMail-Priority: Normal
| > | X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
| > | X-RFC2646: Format=Flowed; Original
| > | Message-ID: <eVvjrIiPGHA.1088@xxxxxxxxxxxxxxxxxxxx>
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | NNTP-Posting-Host: s142-179-167-5.ab.hsia.telus.net 142.179.167.5
| > | Path: TK2MSFTNGXA03.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
| > | Xref: TK2MSFTNGXA03.phx.gbl microsoft.public.windows.server.sbs:248811
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | SBS2003 Premium SP1 c/w ISA2004.
| > |
| > | I've been noticing lately that internet access is quite slow when IE
is
| > | configured to use the ISA web proxy server.
| > |
| > | If I turn off the web proxy and use winsock via the ISA firewall
client
| > (ie:
| > | "in connections, "Use a proxy server for your LAN" is disabled) all
| > works
| > OK
| > | and the speed is returned.
| > |
| > | Anyone have any pointers as to where to start diagnosing this issue?
| > |
| > | I have the ISA caching enabled but have yet to put on ISA SP2 as I
heard
| > | there were other issues with it.
| > |
| > | --
| > | Allan Williams
| > |
| > |
| > |
| > |
| > |
| >
|
|
|

.