[isalist] Re: Curious Website Behavior

  • From: Jim Harrison <jim@xxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 13 Dec 2010 15:46:45 -0800

http://msdn.microsoft.com/en-us/library/ms812590.aspx

http://msdn.microsoft.com/en-us/library/bb794779.aspx

 

Basically, CARP can direct client requests to any of multiple array members.

This will cause some sites to reject additional connections from the same
user if that site assigns multiple names to a single IP.

Since you say there's only one outbound (egress) proxy, that can't be the
problem.

Perhaps you might try setting that site to "no-cache" and clear the TMG
cache .?

 

 

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Rob Moore
Sent: Monday, December 13, 2010 08:18
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Curious Website Behavior

 

Just the one. What's a "CARP problem?"

 

Actually, we still have an ISA 2006 server that handles all of our Exchange
traffic and nothing else. If that makes any difference.

 

Thanks,

Rob

 

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Jim Harrison
Sent: Sunday, December 12, 2010 11:22 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Curious Website Behavior

 

How many TMG do you have?

This "smells like" a potential CARP problem.

 

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Rob Moore
Sent: Thursday, December 09, 2010 10:49 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Curious Website Behavior

 

Hi List-

 

I have a curious problem. Let's see if anyone can come up with an
explanation or a way to approach the problem.

 

Our archivist has a website where he stores digitized documents. It's off
site. Accessing the server works great from his house-no errors, very fast,
digitized documents load in less than 5 seconds. Same thing from my house.
Same thing from a separate network in our building here, that uses our
router but does not use our firewall. (It uses a much simpler firewall.)
However, when we try to access the site from here, behind our TMG server
(Standard), the site starts acting quirky. We frequently get dumped out with
an odd error from the web site (I can send along a screenshot if that will
help and is allowed on this list; the text is too long to type in) and when
we finally do get through, loading a digitized document takes 30 seconds to
one minute. 

 

I've tried monitoring the connection using TMG. There are no errors. The
only thing I thought to try was to add it to the exception list for the
Network Inspection System. That didn't help. (FWIW, URL Filtering, HTTPS
Inspection, Malware Inspection are all disabled.)

 

I have not tried putting the Firewall Client on his machine yet. It only
just occurred to me that that might help.

 

Any thoughts about what might be going on or how to approach the problem?

 

Thanks,

Rob

 

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Rob Moore

Network Manager

215-241-7870

Helpdesk: 800-500-AFSC

 

Other related posts: