RE: ISA 2000 - Single NIC, timeouts - HELP?!!!
- From: "Robert Koss" <isalist@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 2 May 2005 11:57:17 -0500 (CDT)
Tom - do you think I would be better with 2 NICs, one of them in our DMZ.
The DMZ is a 10.x.x.x network as well but that single class C network I
could remove from the LAT - would that yforce all outbound requests out
that card?
--
Robert
Thomas W Shinder said:
> http://www.ISAserver.org
>
> Hi Robert,
>
> If this were ISA Server 2004, I'd say the single-NIC config isn't the
> best, but for ISA Server 2000, it's a reasonable config.
>
> I don't think your problems are related to use cache only mode, but more
> likely related to client configuration.
>
> 1. How *exactly* as the clients configured as Web proxy clients?
> 2. Are the browsers configured to use HTTP 1.1 through proxy
> connections?
>
> HTH,
>
> Tom
> www.isaserver.org/shinder
> Tom and Deb Shinder's Configuring ISA Server 2004
> http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
>
>
> -----Original Message-----
> From: Robert [mailto:isalist@xxxxxxxxxxxxxxxxxx]
> Sent: Monday, May 02, 2005 10:23 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] ISA 2000 - Single NIC, timeouts - HELP?!!!
>
> http://www.ISAserver.org
>
> Hi - I'm having some problems using ISA2000 for proxy services only.
>
>
> 1. Windows 2000 / SP4 / Fully patched
> 2. ISA Server 2000 / SP2
> 3. Pentium 4 / 2Ghz / 1Gb RAM
> 4. Mirrored ATA drives (software mirroring within the OS)
> 5. Single network interface (10.x.x.x)
> 6. Server sits on the same networks as the proxy clients (10.x.x.x)
>
> I'm experiencing timeouts from the clients. Everything appears to work
> fine but you'll pull up a web site, then drill further into it and
> usually
> within a few page levels down it will just hang and timeout. Remove
> the
> proxy settings from the client and immediately the pages appears.
>
> I tried adding an additional interface, disabling netbios on the new
> interface and had the idea that it woudl send out all requests on this
> new
> interface. Withouth getting the firewall guys involved I ended up
> having
> the second interface sit on the same network (different VLAN) but still
> a
> 10.x.x.x address here internally. No better luck and actually more
> problems than with a single NIC.
>
> I'm looking for advice (your experience, URLs, wherever you can point
> me)
> on configuring a single NIC proxy ISA server (if it's even recommended).
>
> Shoudl I use the auto-construction of the LAT? Woudl 2 NICs be better?
>
> Can I force outgoing requests from the proxy server to go out one
> connection (maybe I'll have to put the second NIC int he DMZ and define
> that as a non-local network?)
>
> Pointers, tips, directions, web sites - I appreciate any help you can
> offer.
>
> Thanks,
>
> Robert
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> isalist@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
Other related posts:
