RE: Automated Client config
- From: "Andy Haigh" <ahaigh@xxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 22 Nov 2005 13:53:38 +1100
Seems to be when browsing the web. Comes up with "Opening page 'URL' "
at bottom right of IE, the banner then changes to the website in
questions and then finally the website slowly displays after a
looooooong wait.
If I manually enter the proxy detail everything runs fine, the same
website appears instantly.
Andy
________________________________
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Tuesday, 22 November 2005 12:52 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Automated Client config
http://www.ISAserver.org
Hi Andy,
When you say that DHCP is slow, are you referring to discovering the
proxy service or after autodiscovery takes place and browsing the Web is
slow?
Thanks!
Tom
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/>
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
MVP -- ISA Firewalls
**Who is John Galt?**
________________________________
From: Andy Haigh [mailto:ahaigh@xxxxxxxxxxxxxxxx]
Sent: Monday, November 21, 2005 7:44 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Automated Client config
http://www.ISAserver.org
Hi Tom,
The DNS and DHCP structure is as follows:
Site 1 SBS2003 SP1 sbs1.domain1.local
dns.domain1.local DHCP
Site 2 SBS2003 SP1 sbs2.domain2.local
dns.domain2.local DHCP
Site 3 W2K3 ISA2004 isa1.domain.local
dns1.domain.local DHCP
Site 4 W2K3 ISA2004 isa2.domian.local
dns2.domain.local DHCP
Site's 1 and 2 have seperate DNS and domains.
Site's 3 and 4 are in the same domain and hence share the same
DNS, there is a DC in each site with DNS replicated via AD.
Want we want to get to is having a user be able to move between
sites and their laptops are configured for the required ISA server.
I started using the DHCP method as there is a DHCP server at
each site and it seemed the easiest way to provide the wpad.dat location
at the different sites.
This though is proving to be extremely slow when trying to
browse the internet, any thoughts why this is happening?
If there is a better way I am happy to try that as well.
Thanks
Andy
________________________________
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Tuesday, 22 November 2005 12:24 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Automated Client config
http://www.ISAserver.org
Hi Andy,
Do not fear the firewall client. Instead, learn to love and
embrace the firewall the client. Its the Firewall client that enables
you to run rings around Sonicwall "open a port" type NAT devices (nee
firewalls).
DHCP wpad shouldn't be hanging up IE, but that's another issue.
I'm not clear on the details of your DNS deployment, but you can
configure each DNS server, on its own network, with its own wpad entry.
Since DHCP assigns a different DHCP server for each site, this will
work. Again, this is dependent on your DNS infrastructure.
HTH,
Tom
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/>
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
MVP -- ISA Firewalls
________________________________
From: Andy Haigh [mailto:ahaigh@xxxxxxxxxxxxxxxx]
Sent: Monday, November 21, 2005 7:03 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Automated Client config
http://www.ISAserver.org
Hi all,
I have been trying to work out how to setup ISA 2004 to
allow users to move between four separate sites and have their proxy
conifgs in the IE change automatically.
The sites are a little different in that two of them are
SBS2003 systems and the other two are native Windows 2003 which are in
one domain setup as sites. So the details are:
Site 1 SBS2003 SP1
sbs1.domain1.local
Site 2 SBS2003 SP1
sbs2.domain2.local
Site 3 W2K3 ISA2004
isa1.domain.local
Site 4 W2K3 ISA2004
isa2.domian.local
I have been trying to use wpad configured in DHCP as
thought this would be the easiest way, due to having two ISA servers in
the same domain. This does seem to work but is very slow and has a
tendancy to hang Internet Explorer.
Here is the setup of the wpad.dat file
function FindProxyForURL(url, host)
{
if (isPlainHostName(host) ||
dnsDomainIs(host, ".domain.local") ||
isInNet(host, "172.22.11.0", "255.255.255.0"))
return "DIRECT";
else
return "PROXY isa1.domain.local:8080; DIRECT";
}
They currently have the proxy settings manually
configured in IE.
Please could I get suggestions on the best way to
achieve this, the preference is not to install the Firewall Client but
this can be done if it's the best way to go.
Thanks
Andy
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other
sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org
Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion
List as: ahaigh@xxxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion
List as: tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ahaigh@xxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
