Slow Web aft SP1 & ISA2004 Upgrd

Discussion in 'Windows Small Business Server' started by Bitbob, Sep 24, 2005.

  1. Bitbob

    Bitbob Guest

    After upgrading to SP1 and installing ISA 2004 as new install (not upgrade
    from 2000) My web access has slowed down. Client can get 3-4 pages of info
    and then browser just stops responding or firewall returns message that it
    has timed out and can't reach server that it was just downloading pages from.
    They are working through a Hrdware firewall with correct ports open. Firewall
    clients are all installed on workstations and proper rules are in place on
    the ISA2004 install. It acts like its filling up a buffer and then stalling.
    Any Ideas? I'm thinking of uninstalling ISA2004 and reinstalling- any
    problems with doing this? Thanks
     
    Bitbob, Sep 24, 2005
    #1
    1. Advertisements

  2. Bitbob

    Edward Tian Guest

    Hi:
    Thank you for posting here.

    From the description, I understand that after you applied SBS 2003 SP1 and
    installed ISA 2004, the performance of web access was decreased. If I have
    misunderstood your concern, please do let me know.

    First I would like to confirm with you if the internal clients have been
    configured as Web Proxy client.
    To be a Web Proxy client, please open IE, click Tools->Internet Options,
    and click Connections->LAN Settings, configure ISA server as your Proxy
    server (you can enter either the computer name or the internal IP of the
    ISA server, port 8080 by default.)

    Then re-run the CEICW Wizard, the wizard can help us configure the
    networking settings for a SBS server. It automatically creates the ISA
    rules for internet access and site publishing. It's strongly recommended to
    use the wizard to configure the SBS server. More info:
    825763 How to configure Internet access in Windows Small Business Server
    2003
    http://support.microsoft.com/?id=825763

    Generally speaking, when the internal clients attempt to access the
    internet web site, the packages will be sent to the ISA Server and ISA will
    check the user credential first. If the user is allowed to access, the ISA
    Server itself will retrieve the specific web page from the internet instead
    of the clients. After that, the ISA will send this page to the internal
    client. In this way, little performance decrease is expectable. However, if
    the access speed is incredible slow or even the web page can't be
    displayed, we may need to troubleshoot the problem.

    Before we go any further, I would like to suggest you clear the ISA cache,
    To do so:

    1. On the ISA Server computer, stop the Microsoft Firewall service.
    1). Click Start, click Run, type services.msc in the Open box, and then
    click OK.
    2). Right-click Microsoft Firewall, and then click Stop.

    2. Start Windows Explorer.

    3. Locate the Urlcache folder.

    4. In the Urlcache folder, locate the file that has the .cdat file name
    extension.

    5. Right-click the .cdat file, and then click Delete.

    6. When you are prompted to confirm the removal of the .cdat file, click
    Yes.
    If you are prompted to delete the .cdat file because it is too big for the
    recycle bin, click Yes.

    7. Restart the Microsoft Firewall service.

    More information:
    How to delete the Web cache in Internet Security and Acceleration Server
    2004
    http://support.microsoft.com/default.aspx?scid=kb;en-us;838248

    Please also double check the DNS setting on the SBS box:
    a. Leave the Default Gateway of the internal NIC blank on the SBS.
    b. Configure both the internal NIC and the external NIC to use the internal
    DNS Service as the DNS Server.
    c. On the DNS Server, create the DNS Forwarder to forward the external DNS
    resolution requests to the ISP's DNS

    Then try accessing the internet web site from the clients again, does the
    problem persist?

    If the problem persists, please help me gather the following information to
    narrow down the issue:
    1. Does this performance issue occur on all internet websites?

    2. Does the problem occur on all internal clients? What about accessing the
    website from the SBS Server itself?

    3. Are there any corresponding event logs in the Event Viewer? If any,
    please post them to me in the reply.

    4. Please help to gather the ISA Info:

    1) Download the file from the following URL:

    http://www.isatools.org/isainfo/ISAInfo.zip

    2) Extract all files to a folder on ISA server.
    3) Double click Isainfo.js. This will generate 2 files
    ISAInfo2004-<computer-name>.log and ISAInfo2004-<computer-name>.xml in the
    current folder.
    4) Please send these files to me.

    5. Please also help to gather the ISA logs:

    1) Schedule a down time.

    2) Open ISA 2004 management console.

    3) Expand the server node and highlight 'Monitoring'.

    4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
    Pane' is showed there.

    5) In the 'Task Pane', click 'Configure Firewall Logging' under 'Logging
    Tasks', and then switch the 'log storage format' from 'MSDE database'
    (default) to 'File'.

    6) Switch to the 'Fields' tab, click 'Select All', and then click OK.

    7) In the 'Task Pane', click 'Configure Web Proxy Logging' under 'Logging
    Tasks', and then switch the 'log storage format' from 'MSDE database'
    (default) to 'File'.

    8) Switch to the 'Fields' tab, click 'Select All', and then click OK.

    9) Click 'Apply' to save changes and update the configuration.

    10) Temporarily disable the Firewall service. To do that, please click
    Monitoring | Services tab, and then right click 'Microsoft Firewall' to
    choose 'Stop'.

    11) Clear the current existing W3C logs. To do that, go to the log saving
    directory and clean any existing .W3C logs. By default, the logs will be
    saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may not
    be able to deleted, that's normal.) You may backup them first and then
    delete them.

    12) Go back to the ISA 2004 management console, and then Start the stopped
    'Microsoft Firewall' service.

    13) Reproduce the problem (Try accessing the particular web site such as
    www.microsoft.com and www.google.com from the internal clients), stop the
    service, and then gather the resulting W3C files to me for analysis.

    14) Please also let me know the IP address of the testing clients/server so
    that I can filter the data.

    Hope the above information helps.
    I appreciate you taking time to perform the test and gather the
    corresponding information. Please feel free to let me know if you have any
    questions or concerns.

    Have a nice day! :)

    Best Regards
    Edward Tian(MSFT)
    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security
    ======================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    ======================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    | Thread-Topic: Slow Web aft SP1 & ISA2004 Upgrd
    | thread-index: AcXBJnpOqjpviggfQGa67tP10FEtoA==
    | X-WBNR-Posting-Host: 69.88.120.138
    | From: =?Utf-8?B?Qml0Ym9i?= <>
    | Subject: Slow Web aft SP1 & ISA2004 Upgrd
    | Date: Sat, 24 Sep 2005 09:39:05 -0700
    | Lines: 9
    | Message-ID: <>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="Utf-8"
    | Content-Transfer-Encoding: 7bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Content-Class: urn:content-classes:message
    | Importance: normal
    | Priority: normal
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | Newsgroups: microsoft.public.windows.server.sbs
    | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:156158
    | X-Tomcat-NG: microsoft.public.windows.server.sbs
    |
    | After upgrading to SP1 and installing ISA 2004 as new install (not
    upgrade
    | from 2000) My web access has slowed down. Client can get 3-4 pages of
    info
    | and then browser just stops responding or firewall returns message that
    it
    | has timed out and can't reach server that it was just downloading pages
    from.
    | They are working through a Hrdware firewall with correct ports open.
    Firewall
    | clients are all installed on workstations and proper rules are in place
    on
    | the ISA2004 install. It acts like its filling up a buffer and then
    stalling.
    | Any Ideas? I'm thinking of uninstalling ISA2004 and reinstalling- any
    | problems with doing this? Thanks
    |
     
    Edward Tian, Sep 26, 2005
    #2
    1. Advertisements

  3. Bitbob

    Bitbob Guest

    Edward how do I attach these files to a reply?? I have answered your text in
    the copied reply- Not using ISA cache and all ISA client software and proxy
    settings correct!

    Yes all are set up with the firewall client application!!! All have been set
    to treat the SBSserver as a proxy server.
    I have used the wizard several times trying different settings and all seem
    to have the same problem
    I am not running the isa cache so there is not file to clear!
     
    Bitbob, Sep 27, 2005
    #3
  4. Bitbob

    Edward Tian Guest

    Hi:
    Thanks for your update.

    You can send all the related files directly to my mailbox:
    .

    Have a nice day!

    Best Regards
    Edward Tian(MSFT)
    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security
    ======================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    ======================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    | Thread-Topic: Slow Web aft SP1 & ISA2004 Upgrd
    | thread-index: AcXDiwz/P4OLGFvPRDCCIBG2DVLJ8g==
    | X-WBNR-Posting-Host: 69.88.120.138
    | From: =?Utf-8?B?Qml0Ym9i?= <>
    | References: <>
    <>
    | Subject: RE: Slow Web aft SP1 & ISA2004 Upgrd
    | Date: Tue, 27 Sep 2005 10:44:03 -0700
    | Lines: 232
    | Message-ID: <>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="Utf-8"
    | Content-Transfer-Encoding: 7bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Content-Class: urn:content-classes:message
    | Importance: normal
    | Priority: normal
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | Newsgroups: microsoft.public.windows.server.sbs
    | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:156864
    | X-Tomcat-NG: microsoft.public.windows.server.sbs
    |
    | Edward how do I attach these files to a reply?? I have answered your text
    in
    | the copied reply- Not using ISA cache and all ISA client software and
    proxy
    | settings correct!
    |
    | "Edward Tian" wrote:
    |
    | > Hi:
    | > Thank you for posting here.
    | >
    | > From the description, I understand that after you applied SBS 2003 SP1
    and
    | > installed ISA 2004, the performance of web access was decreased. If I
    have
    | > misunderstood your concern, please do let me know.
    | >
    | > First I would like to confirm with you if the internal clients have
    been
    | > configured as Web Proxy client.
    | > To be a Web Proxy client, please open IE, click Tools->Internet
    Options,
    | > and click Connections->LAN Settings, configure ISA server as your Proxy
    | > server (you can enter either the computer name or the internal IP of
    the
    | > ISA server, port 8080 by default.)
    |
    | Yes all are set up with the firewall client application!!! All have been
    set
    | to treat the SBSserver as a proxy server.
    | >
    | > Then re-run the CEICW Wizard, the wizard can help us configure the
    | > networking settings for a SBS server. It automatically creates the ISA
    | > rules for internet access and site publishing. It's strongly
    recommended to
    | > use the wizard to configure the SBS server. More info:
    | > 825763 How to configure Internet access in Windows Small Business
    Server
    | > 2003
    | > http://support.microsoft.com/?id=825763
    |
    | I have used the wizard several times trying different settings and all
    seem
    | to have the same problem
    | >
    | > Generally speaking, when the internal clients attempt to access the
    | > internet web site, the packages will be sent to the ISA Server and ISA
    will
    | > check the user credential first. If the user is allowed to access, the
    ISA
    | > Server itself will retrieve the specific web page from the internet
    instead
    | > of the clients. After that, the ISA will send this page to the internal
    | > client. In this way, little performance decrease is expectable.
    However, if
    | > the access speed is incredible slow or even the web page can't be
    | > displayed, we may need to troubleshoot the problem.
    | >
    | > Before we go any further, I would like to suggest you clear the ISA
    cache,
    |
    | I am not running the isa cache so there is not file to clear!
    |
    | > To do so:
    | >
    | > 1. On the ISA Server computer, stop the Microsoft Firewall service.
    | > 1). Click Start, click Run, type services.msc in the Open box, and then
    | > click OK.
    | > 2). Right-click Microsoft Firewall, and then click Stop.
    | >
    | > 2. Start Windows Explorer.
    | >
    | > 3. Locate the Urlcache folder.
    | >
    | > 4. In the Urlcache folder, locate the file that has the .cdat file name
    | > extension.
    | >
    | > 5. Right-click the .cdat file, and then click Delete.
    | >
    | > 6. When you are prompted to confirm the removal of the .cdat file,
    click
    | > Yes.
    | > If you are prompted to delete the .cdat file because it is too big for
    the
    | > recycle bin, click Yes.
    | >
    | > 7. Restart the Microsoft Firewall service.
    | >
    | > More information:
    | > How to delete the Web cache in Internet Security and Acceleration
    Server
    | > 2004
    | > http://support.microsoft.com/default.aspx?scid=kb;en-us;838248
    | >
    | > Please also double check the DNS setting on the SBS box:
    | > a. Leave the Default Gateway of the internal NIC blank on the SBS.
    | > b. Configure both the internal NIC and the external NIC to use the
    internal
    | > DNS Service as the DNS Server.
    | > c. On the DNS Server, create the DNS Forwarder to forward the external
    DNS
    | > resolution requests to the ISP's DNS
    | >
    | > Then try accessing the internet web site from the clients again, does
    the
    | > problem persist? The problem is persisting???? getting worse acctually!
    | >
    | > If the problem persists, please help me gather the following
    information to
    | > narrow down the issue:
    | > 1. Does this performance issue occur on all internet websites?
    | >
    | > 2. Does the problem occur on all internal clients? What about accessing
    the
    | > website from the SBS Server itself?
    | >
    | > 3. Are there any corresponding event logs in the Event Viewer? If any,
    | > please post them to me in the reply.
    | >
    | > 4. Please help to gather the ISA Info:
    | >
    | > 1) Download the file from the following URL:
    | >
    | > http://www.isatools.org/isainfo/ISAInfo.zip
    | >
    | > 2) Extract all files to a folder on ISA server.
    | > 3) Double click Isainfo.js. This will generate 2 files
    | > ISAInfo2004-<computer-name>.log and ISAInfo2004-<computer-name>.xml in
    the
    | > current folder.
    | > 4) Please send these files to me.
    | >
    | > 5. Please also help to gather the ISA logs:
    | >
    | > 1) Schedule a down time.
    | >
    | > 2) Open ISA 2004 management console.
    | >
    | > 3) Expand the server node and highlight 'Monitoring'.
    | >
    | > 4) In the right pane, switch to the 'Logging' tab, make sure the 'Task
    | > Pane' is showed there.
    | >
    | > 5) In the 'Task Pane', click 'Configure Firewall Logging' under
    'Logging
    | > Tasks', and then switch the 'log storage format' from 'MSDE database'
    | > (default) to 'File'.
    | >
    | > 6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
    | >
    | > 7) In the 'Task Pane', click 'Configure Web Proxy Logging' under
    'Logging
    | > Tasks', and then switch the 'log storage format' from 'MSDE database'
    | > (default) to 'File'.
    | >
    | > 8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
    | >
    | > 9) Click 'Apply' to save changes and update the configuration.
    | >
    | > 10) Temporarily disable the Firewall service. To do that, please click
    | > Monitoring | Services tab, and then right click 'Microsoft Firewall' to
    | > choose 'Stop'.
    | >
    | > 11) Clear the current existing W3C logs. To do that, go to the log
    saving
    | > directory and clean any existing .W3C logs. By default, the logs will
    be
    | > saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF may
    not
    | > be able to deleted, that's normal.) You may backup them first and
    then
    | > delete them.
    | >
    | > 12) Go back to the ISA 2004 management console, and then Start the
    stopped
    | > 'Microsoft Firewall' service.
    | >
    | > 13) Reproduce the problem (Try accessing the particular web site such
    as
    | > www.microsoft.com and www.google.com from the internal clients), stop
    the
    | > service, and then gather the resulting W3C files to me for analysis.
    | >
    | > 14) Please also let me know the IP address of the testing
    clients/server so
    | > that I can filter the data.
    | >
    | > Hope the above information helps.
    | > I appreciate you taking time to perform the test and gather the
    | > corresponding information. Please feel free to let me know if you have
    any
    | > questions or concerns.
    | >
    | > Have a nice day! :)
    | >
    | > Best Regards
    | > Edward Tian(MSFT)
    | > Microsoft CSS Online Newsgroup Support
    | >
    | > Get Secure! - www.microsoft.com/security
    | > ======================================================
    | > This newsgroup only focuses on SBS technical issues. If you have issues
    | > regarding other Microsoft products, you'd better post in the
    corresponding
    | > newsgroups so that they can be resolved in an efficient and timely
    manner.
    | > You can locate the newsgroup here:
    | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
    | >
    | > When opening a new thread via the web interface, we recommend you check
    the
    | > "Notify me of replies" box to receive e-mail notifications when there
    are
    | > any updates in your thread. When responding to posts via your
    newsreader,
    | > please "Reply to Group" so that others may learn and benefit from your
    | > issue.
    | >
    | > Microsoft engineers can only focus on one issue per thread. Although we
    | > provide other information for your reference, we recommend you post
    | > different incidents in different threads to keep the thread clean. In
    doing
    | > so, it will ensure your issues are resolved in a timely manner.
    | >
    | > For urgent issues, you may want to contact Microsoft CSS directly.
    Please
    | > check http://support.microsoft.com for regional support phone numbers.
    | >
    | > Any input or comments in this thread are highly appreciated.
    | > ======================================================
    | > This posting is provided "AS IS" with no warranties, and confers no
    rights.
    | >
    | > --------------------
    | > | Thread-Topic: Slow Web aft SP1 & ISA2004 Upgrd
    | > | thread-index: AcXBJnpOqjpviggfQGa67tP10FEtoA==
    | > | X-WBNR-Posting-Host: 69.88.120.138
    | > | From: =?Utf-8?B?Qml0Ym9i?= <>
    | > | Subject: Slow Web aft SP1 & ISA2004 Upgrd
    | > | Date: Sat, 24 Sep 2005 09:39:05 -0700
    | > | Lines: 9
    | > | Message-ID: <>
    | > | MIME-Version: 1.0
    | > | Content-Type: text/plain;
    | > | charset="Utf-8"
    | > | Content-Transfer-Encoding: 7bit
    | > | X-Newsreader: Microsoft CDO for Windows 2000
    | > | Content-Class: urn:content-classes:message
    | > | Importance: normal
    | > | Priority: normal
    | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | > | Newsgroups: microsoft.public.windows.server.sbs
    | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | > | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:156158
    | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
    | > |
    | > | After upgrading to SP1 and installing ISA 2004 as new install (not
    | > upgrade
    | > | from 2000) My web access has slowed down. Client can get 3-4 pages of
    | > info
    | > | and then browser just stops responding or firewall returns message
    that
    | > it
    | > | has timed out and can't reach server that it was just downloading
    pages
    | > from.
    | > | They are working through a Hrdware firewall with correct ports open.
    | > Firewall
    | > | clients are all installed on workstations and proper rules are in
    place
    | > on
    | > | the ISA2004 install. It acts like its filling up a buffer and then
    | > stalling.
    | > | Any Ideas? I'm thinking of uninstalling ISA2004 and reinstalling- any
    | > | problems with doing this? Thanks
    | > |
    | >
    | >
    |
     
    Edward Tian, Sep 28, 2005
    #4
  5. Bitbob

    Edward Tian Guest

    Hi:
    Meanwhile, please take your time to gather the remaining information within
    my initial reply:
    ----------------
    Please also double check the DNS setting on the SBS box:
    a. Leave the Default Gateway of the internal NIC blank on the SBS.
    b. Configure both the internal NIC and the external NIC to use the internal
    DNS Service as the DNS Server.
    c. On the DNS Server, create the DNS Forwarder to forward the external DNS
    resolution requests to the ISP's DNS

    Then try accessing the internet web site from the clients again, does the
    problem persist?

    If the problem persists, please help me gather the following information to
    narrow down the issue:
    1. Does this performance issue occur on all internet websites?

    2. Does the problem occur on all internal clients? What about accessing the
    website from the SBS Server itself?

    3. Are there any corresponding event logs in the Event Viewer? If any,
    please post them to me in the reply.
    -------------------

    In addition, please also type "ipconfig/all > d:\server1.txt" and "route
    print > d:\server2.txt" on the server side and "ipconfig/all >
    d:\client1.txt" and "route print > d:\client2.txt" on the client side
    (without the quotation mark), then send these .txt files to my mailbox:


    Please understand that we could not provide you a solid solution in the
    initial response becuase such kind of performance issue may be caused by
    various factors and is always hard to find the root cause. We may gather
    more information for deep invenstigation. I appreciate your understanding
    on it.

    Please feel free to let me know if you have any questions or concerns.

    Have a nice day! :)

    Best Regards
    Edward Tian(MSFT)
    Microsoft CSS Online Newsgroup Support

    Get Secure! - www.microsoft.com/security
    ======================================================
    This newsgroup only focuses on SBS technical issues. If you have issues
    regarding other Microsoft products, you'd better post in the corresponding
    newsgroups so that they can be resolved in an efficient and timely manner.
    You can locate the newsgroup here:
    http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

    When opening a new thread via the web interface, we recommend you check the
    "Notify me of replies" box to receive e-mail notifications when there are
    any updates in your thread. When responding to posts via your newsreader,
    please "Reply to Group" so that others may learn and benefit from your
    issue.

    Microsoft engineers can only focus on one issue per thread. Although we
    provide other information for your reference, we recommend you post
    different incidents in different threads to keep the thread clean. In doing
    so, it will ensure your issues are resolved in a timely manner.

    For urgent issues, you may want to contact Microsoft CSS directly. Please
    check http://support.microsoft.com for regional support phone numbers.

    Any input or comments in this thread are highly appreciated.
    ======================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    | Newsgroups: microsoft.public.windows.server.sbs
    | From: (Edward Tian)
    | Organization: Microsoft
    | Date: Wed, 28 Sep 2005 01:05:36 GMT
    | Subject: RE: Slow Web aft SP1 & ISA2004 Upgrd
    | X-Tomcat-NG: microsoft.public.windows.server.sbs
    | MIME-Version: 1.0
    | Content-Type: text/plain
    | Content-Transfer-Encoding: 7bit
    |
    | Hi:
    | Thanks for your update.
    |
    | You can send all the related files directly to my mailbox:
    | .
    |
    | Have a nice day!
    |
    | Best Regards
    | Edward Tian(MSFT)
    | Microsoft CSS Online Newsgroup Support
    |
    | Get Secure! - www.microsoft.com/security
    | ======================================================
    | This newsgroup only focuses on SBS technical issues. If you have issues
    | regarding other Microsoft products, you'd better post in the
    corresponding
    | newsgroups so that they can be resolved in an efficient and timely
    manner.
    | You can locate the newsgroup here:
    | http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
    |
    | When opening a new thread via the web interface, we recommend you check
    the
    | "Notify me of replies" box to receive e-mail notifications when there are
    | any updates in your thread. When responding to posts via your newsreader,
    | please "Reply to Group" so that others may learn and benefit from your
    | issue.
    |
    | Microsoft engineers can only focus on one issue per thread. Although we
    | provide other information for your reference, we recommend you post
    | different incidents in different threads to keep the thread clean. In
    doing
    | so, it will ensure your issues are resolved in a timely manner.
    |
    | For urgent issues, you may want to contact Microsoft CSS directly. Please
    | check http://support.microsoft.com for regional support phone numbers.
    |
    | Any input or comments in this thread are highly appreciated.
    | ======================================================
    | This posting is provided "AS IS" with no warranties, and confers no
    rights.
    |
    | --------------------
    | | Thread-Topic: Slow Web aft SP1 & ISA2004 Upgrd
    | | thread-index: AcXDiwz/P4OLGFvPRDCCIBG2DVLJ8g==
    | | X-WBNR-Posting-Host: 69.88.120.138
    | | From: =?Utf-8?B?Qml0Ym9i?= <>
    | | References: <>
    | <>
    | | Subject: RE: Slow Web aft SP1 & ISA2004 Upgrd
    | | Date: Tue, 27 Sep 2005 10:44:03 -0700
    | | Lines: 232
    | | Message-ID: <>
    | | MIME-Version: 1.0
    | | Content-Type: text/plain;
    | | charset="Utf-8"
    | | Content-Transfer-Encoding: 7bit
    | | X-Newsreader: Microsoft CDO for Windows 2000
    | | Content-Class: urn:content-classes:message
    | | Importance: normal
    | | Priority: normal
    | | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | | Newsgroups: microsoft.public.windows.server.sbs
    | | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | | Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:156864
    | | X-Tomcat-NG: microsoft.public.windows.server.sbs
    | |
    | | Edward how do I attach these files to a reply?? I have answered your
    text
    | in
    | | the copied reply- Not using ISA cache and all ISA client software and
    | proxy
    | | settings correct!
    | |
    | | "Edward Tian" wrote:
    | |
    | | > Hi:
    | | > Thank you for posting here.
    | | >
    | | > From the description, I understand that after you applied SBS 2003
    SP1
    | and
    | | > installed ISA 2004, the performance of web access was decreased. If I
    | have
    | | > misunderstood your concern, please do let me know.
    | | >
    | | > First I would like to confirm with you if the internal clients have
    | been
    | | > configured as Web Proxy client.
    | | > To be a Web Proxy client, please open IE, click Tools->Internet
    | Options,
    | | > and click Connections->LAN Settings, configure ISA server as your
    Proxy
    | | > server (you can enter either the computer name or the internal IP of
    | the
    | | > ISA server, port 8080 by default.)
    | |
    | | Yes all are set up with the firewall client application!!! All have
    been
    | set
    | | to treat the SBSserver as a proxy server.
    | | >
    | | > Then re-run the CEICW Wizard, the wizard can help us configure the
    | | > networking settings for a SBS server. It automatically creates the
    ISA
    | | > rules for internet access and site publishing. It's strongly
    | recommended to
    | | > use the wizard to configure the SBS server. More info:
    | | > 825763 How to configure Internet access in Windows Small Business
    | Server
    | | > 2003
    | | > http://support.microsoft.com/?id=825763
    | |
    | | I have used the wizard several times trying different settings and all
    | seem
    | | to have the same problem
    | | >
    | | > Generally speaking, when the internal clients attempt to access the
    | | > internet web site, the packages will be sent to the ISA Server and
    ISA
    | will
    | | > check the user credential first. If the user is allowed to access,
    the
    | ISA
    | | > Server itself will retrieve the specific web page from the internet
    | instead
    | | > of the clients. After that, the ISA will send this page to the
    internal
    | | > client. In this way, little performance decrease is expectable.
    | However, if
    | | > the access speed is incredible slow or even the web page can't be
    | | > displayed, we may need to troubleshoot the problem.
    | | >
    | | > Before we go any further, I would like to suggest you clear the ISA
    | cache,
    | |
    | | I am not running the isa cache so there is not file to clear!
    | |
    | | > To do so:
    | | >
    | | > 1. On the ISA Server computer, stop the Microsoft Firewall service.
    | | > 1). Click Start, click Run, type services.msc in the Open box, and
    then
    | | > click OK.
    | | > 2). Right-click Microsoft Firewall, and then click Stop.
    | | >
    | | > 2. Start Windows Explorer.
    | | >
    | | > 3. Locate the Urlcache folder.
    | | >
    | | > 4. In the Urlcache folder, locate the file that has the .cdat file
    name
    | | > extension.
    | | >
    | | > 5. Right-click the .cdat file, and then click Delete.
    | | >
    | | > 6. When you are prompted to confirm the removal of the .cdat file,
    | click
    | | > Yes.
    | | > If you are prompted to delete the .cdat file because it is too big
    for
    | the
    | | > recycle bin, click Yes.
    | | >
    | | > 7. Restart the Microsoft Firewall service.
    | | >
    | | > More information:
    | | > How to delete the Web cache in Internet Security and Acceleration
    | Server
    | | > 2004
    | | > http://support.microsoft.com/default.aspx?scid=kb;en-us;838248
    | | >
    | | > Please also double check the DNS setting on the SBS box:
    | | > a. Leave the Default Gateway of the internal NIC blank on the SBS.
    | | > b. Configure both the internal NIC and the external NIC to use the
    | internal
    | | > DNS Service as the DNS Server.
    | | > c. On the DNS Server, create the DNS Forwarder to forward the
    external
    | DNS
    | | > resolution requests to the ISP's DNS
    | | >
    | | > Then try accessing the internet web site from the clients again, does
    | the
    | | > problem persist? The problem is persisting???? getting worse
    acctually!
    | | >
    | | > If the problem persists, please help me gather the following
    | information to
    | | > narrow down the issue:
    | | > 1. Does this performance issue occur on all internet websites?
    | | >
    | | > 2. Does the problem occur on all internal clients? What about
    accessing
    | the
    | | > website from the SBS Server itself?
    | | >
    | | > 3. Are there any corresponding event logs in the Event Viewer? If
    any,
    | | > please post them to me in the reply.
    | | >
    | | > 4. Please help to gather the ISA Info:
    | | >
    | | > 1) Download the file from the following URL:
    | | >
    | | > http://www.isatools.org/isainfo/ISAInfo.zip
    | | >
    | | > 2) Extract all files to a folder on ISA server.
    | | > 3) Double click Isainfo.js. This will generate 2 files
    | | > ISAInfo2004-<computer-name>.log and ISAInfo2004-<computer-name>.xml
    in
    | the
    | | > current folder.
    | | > 4) Please send these files to me.
    | | >
    | | > 5. Please also help to gather the ISA logs:
    | | >
    | | > 1) Schedule a down time.
    | | >
    | | > 2) Open ISA 2004 management console.
    | | >
    | | > 3) Expand the server node and highlight 'Monitoring'.
    | | >
    | | > 4) In the right pane, switch to the 'Logging' tab, make sure the
    'Task
    | | > Pane' is showed there.
    | | >
    | | > 5) In the 'Task Pane', click 'Configure Firewall Logging' under
    | 'Logging
    | | > Tasks', and then switch the 'log storage format' from 'MSDE database'
    | | > (default) to 'File'.
    | | >
    | | > 6) Switch to the 'Fields' tab, click 'Select All', and then click OK.
    | | >
    | | > 7) In the 'Task Pane', click 'Configure Web Proxy Logging' under
    | 'Logging
    | | > Tasks', and then switch the 'log storage format' from 'MSDE database'
    | | > (default) to 'File'.
    | | >
    | | > 8) Switch to the 'Fields' tab, click 'Select All', and then click OK.
    | | >
    | | > 9) Click 'Apply' to save changes and update the configuration.
    | | >
    | | > 10) Temporarily disable the Firewall service. To do that, please
    click
    | | > Monitoring | Services tab, and then right click 'Microsoft Firewall'
    to
    | | > choose 'Stop'.
    | | >
    | | > 11) Clear the current existing W3C logs. To do that, go to the log
    | saving
    | | > directory and clean any existing .W3C logs. By default, the logs will
    | be
    | | > saved to 'C:\Program Files\Microsoft ISA Server\ISALogs'. (Some MDF
    may
    | not
    | | > be able to deleted, that's normal.) You may backup them first and
    | then
    | | > delete them.
    | | >
    | | > 12) Go back to the ISA 2004 management console, and then Start the
    | stopped
    | | > 'Microsoft Firewall' service.
    | | >
    | | > 13) Reproduce the problem (Try accessing the particular web site such
    | as
    | | > www.microsoft.com and www.google.com from the internal clients), stop
    | the
    | | > service, and then gather the resulting W3C files to me for analysis.
    | | >
    | | > 14) Please also let me know the IP address of the testing
    | clients/server so
    | | > that I can filter the data.
    | | >
    | | > Hope the above information helps.
    | | > I appreciate you taking time to perform the test and gather the
    | | > corresponding information. Please feel free to let me know if you
    have
    | any
    | | > questions or concerns.
    | | >
    | | > Have a nice day! :)
    | | >
    | | > Best Regards
    | | > Edward Tian(MSFT)
    | | > Microsoft CSS Online Newsgroup Support
    | | >
    | | > Get Secure! - www.microsoft.com/security
    | | > ======================================================
    | | > This newsgroup only focuses on SBS technical issues. If you have
    issues
    | | > regarding other Microsoft products, you'd better post in the
    | corresponding
    | | > newsgroups so that they can be resolved in an efficient and timely
    | manner.
    | | > You can locate the newsgroup here:
    | | > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
    | | >
    | | > When opening a new thread via the web interface, we recommend you
    check
    | the
    | | > "Notify me of replies" box to receive e-mail notifications when there
    | are
    | | > any updates in your thread. When responding to posts via your
    | newsreader,
    | | > please "Reply to Group" so that others may learn and benefit from
    your
    | | > issue.
    | | >
    | | > Microsoft engineers can only focus on one issue per thread. Although
    we
    | | > provide other information for your reference, we recommend you post
    | | > different incidents in different threads to keep the thread clean. In
    | doing
    | | > so, it will ensure your issues are resolved in a timely manner.
    | | >
    | | > For urgent issues, you may want to contact Microsoft CSS directly.
    | Please
    | | > check http://support.microsoft.com for regional support phone numbers.
    | | >
    | | > Any input or comments in this thread are highly appreciated.
    | | > ======================================================
    | | > This posting is provided "AS IS" with no warranties, and confers no
    | rights.
    | | >
    | | > --------------------
    | | > | Thread-Topic: Slow Web aft SP1 & ISA2004 Upgrd
    | | > | thread-index: AcXBJnpOqjpviggfQGa67tP10FEtoA==
    | | > | X-WBNR-Posting-Host: 69.88.120.138
    | | > | From: =?Utf-8?B?Qml0Ym9i?= <>
    | | > | Subject: Slow Web aft SP1 & ISA2004 Upgrd
    | | > | Date: Sat, 24 Sep 2005 09:39:05 -0700
    | | > | Lines: 9
    | | > | Message-ID: <>
    | | > | MIME-Version: 1.0
    | | > | Content-Type: text/plain;
    | | > | charset="Utf-8"
    | | > | Content-Transfer-Encoding: 7bit
    | | > | X-Newsreader: Microsoft CDO for Windows 2000
    | | > | Content-Class: urn:content-classes:message
    | | > | Importance: normal
    | | > | Priority: normal
    | | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | | > | Newsgroups: microsoft.public.windows.server.sbs
    | | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | | > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | | > | Xref: TK2MSFTNGXA01.phx.gbl
    microsoft.public.windows.server.sbs:156158
    | | > | X-Tomcat-NG: microsoft.public.windows.server.sbs
    | | > |
    | | > | After upgrading to SP1 and installing ISA 2004 as new install (not
    | | > upgrade
    | | > | from 2000) My web access has slowed down. Client can get 3-4 pages
    of
    | | > info
    | | > | and then browser just stops responding or firewall returns message
    | that
    | | > it
    | | > | has timed out and can't reach server that it was just downloading
    | pages
    | | > from.
    | | > | They are working through a Hrdware firewall with correct ports
    open.
    | | > Firewall
    | | > | clients are all installed on workstations and proper rules are in
    | place
    | | > on
    | | > | the ISA2004 install. It acts like its filling up a buffer and then
    | | > stalling.
    | | > | Any Ideas? I'm thinking of uninstalling ISA2004 and reinstalling-
    any
    | | > | problems with doing this? Thanks
    | | > |
    | | >
    | | >
    | |
    |
     
    Edward Tian, Sep 28, 2005
    #5
  6. Bitbob

    Bitbob Guest

    Edward: Since our last exchange things have slowly gotten worse. Now the
    system will only access about 1-2 pages before it slows down or locks up. Did
    you think of any other things that I could check? Thanks again for your help.
     
    Bitbob, Oct 5, 2005
    #6
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.