When I see that is my pipe is getting full, I check my TrafMeter. Thanks for the link Tom ! It's a great deal for monitoring your link's usage. Also a great help for configuring ISA's bandwidth policies. It's definitely worth its 50 bucks. www.trafmeter.com <http://www.trafmeter.com/> But why Tom, why disable the HTTP redirector? Can you say that in public? ;) Tiago de Aviz SoftSell (41) 340-2363 www.softsell.com.br _____ From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: sábado, 6 de dezembro de 2003 18:52 To: [ISAserver.org Discussion List] Subject: [isalist] Re: Bandwidth Policies http://www.ISAserver.org Hi Glenn, You might want to run NetMon on the external interface and check the packet filter logs to see if you're being attacked. It could be that the T1 is just pegged. Make sure your Web Proxy clients are configured to use the autoconfiguration script and that DNS server settings on the ISA firewall are correct. And while not required, I highly recommend disabling the HTTP redirector (for perfomance and security reasons). HTH, Tom _____ From: Glenn Maks [mailto:gmaks@xxxxxxxxx] Sent: Friday, December 05, 2003 2:47 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: Bandwidth Policies http://www.ISAserver.org Thanks Tom for the valued input, I am working out a performance issue I am having with my ISA server right now, My CEO is complaining loudly about poor performance I have monitored the ISA server using Performance Monitor, selecting just about everything one could monitor, including the Physical Interfaces, as far as I can see, the ISA server is NOT over loaded, but the External Interface seems to be peeked out all the time, it is a 100 MB PCI interface plugged into a 3COM 3300 Switch, The computer is a Dell Power Edge 2300, I know, rather old but it does have DUAL PII 400 Processors and 512 MB RAM ... From what I can see using Performance Monitor, the ISA Services, Firewall and Web Proxy are idling but the External Interface seems to be pegged ?? Any suggestions ? It is worth noting that my ISA server also has 4 RRAS L2TP VPN Tunnels connecting my 4 Branch offices, I did add and monitor all my VPN connections and they don't seem to be over loaded, it just seems to be my External Interface? I still have my OLD Raptor firewall, so I decided to route some users through it for performance comparison and the sites come up lightening quick, through ISA, they take forever?