[isalist] Re: Cache Mode ISA faster than Integrated Mode ISA...
- From: "William Robertson" <robertson.william@xxxxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Wed, 17 May 2006 07:31:59 +0200
http://www.ISAserver.org
-------------------------------------------------------
Hi Dan
Both ISA Servers (Integrated & Proxy Mode) are authenticating outgoing WEB
requests based on Basic & Integrated authentication methods.
Naturally my test ISA Proxy mode server only has 2 or 3 requests, whereas my
Integrated ISA has ~100.
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Ball, Dan
Sent: 16 May 2006 02:30 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Cache Mode ISA faster than Integrated Mode ISA...
http://www.ISAserver.org
-------------------------------------------------------
Which server is doing the authentication? I've seen here where masses
of authentication requests can bring the ISA server down to a crawl at
times.
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of William Robertson
Sent: Tuesday, May 16, 2006 4:49 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Cache Mode ISA faster than Integrated Mode ISA...
http://www.ISAserver.org
-------------------------------------------------------
Hi Greg/John
Network wise there is definitely no difference between response times as
they are both sitting on 1Gb connections. I am 100% sure that the slower
response is as a result of my actual/primary ISA2000 firewall.
As mentioned, it is running with a lot more users and a WEB Filter. My
logic
tells me that the congestion is not on my 512k Diginet external/internet
connection, as while I am surfing at higher speeds through the
test/temporary ISA Proxy server, my users are surfing slower through the
actual/primary ISA Firewall server. So the slower response is definitely
as
a result of the Integrated ISA server.
I just wouldn't have expected so much noticeable comparison between the
2
though... Are there perhaps any performance counters that one can
measure
when looking at a problem like this?
Thanks
William R.
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On
Behalf Of Greg Mulholland
Sent: 16 May 2006 10:35 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Cache Mode ISA faster than Integrated Mode ISA...
http://www.ISAserver.org
-------------------------------------------------------
Are the network response times to both boxes similar? Ie. Its definitely
the integrated isa box that's causing the slowness and not network
structure?
Greg Mulholland
'Security was not considered in the design of this protocol'
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of William Robertson
Sent: Tuesday, May 16, 2006 3:27 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Cache Mode ISA faster than Integrated Mode ISA...
http://www.ISAserver.org
-------------------------------------------------------
Hi there
I have an ISA Server 2000 firewall set up in Integrated Mode, and she
has been chugging along happily for quite a few years now.
We are currently investigating a problem (not specifically with ISA) and
have had a reason to thus install ISA in Cache Mode Only, on a test
server.
What I have since found interesting is that when I change my WEB Proxy
settings to make use of the test ISA, my surfing is a *LOT* faster than
when through my current Integrated Mode ISA.
I can appreciate that my Integrated Mode ISA has more work to do, being
an actual firewall 'n all, and it also has much more users running
through it, and it also has the SurfControl WEB Filter installed... but
does this all account for a *MUCH* faster WEB surfing experience?
Thanks
William R.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
