Hi Thomas, I did not know that my monitor could be published! <grin> Joseph ----- Original Message ----- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Wednesday, February 25, 2004 7:03 AM Subject: [isalist] RE: SSL page takes 20 seconds to display. http://www.ISAserver.org Hi Mike, You need to publish your CRT. There's an article in the ISA Server 2000 Exchange 2000/2003 kit that'll help you with that. Make sure you Web Publishing Rule to allow access to the site, and that you have a split DNS, otherwise the remote hosts will get the internal address of the mmant3.joyousliving.com server. HTH, Tom Thomas W Shinder www.isaserver.org/shinder ISA 2004 Beta - Get it now! http://www.microsoft.com/isaserver/beta/default.asp ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Mike Malter [mailto:mike@xxxxxxxxxxxxxx] Sent: Wednesday, February 25, 2004 9:12 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: SSL page takes 20 seconds to display. http://www.ISAserver.org Jim, Thanks for you reply. Our CA is on our AD controller as is one of our DNS servers (we have a redundant AD controller and our other DNS is on that box). I am not sure how to go about troubleshooting this. Is there anything out there that I can read to help? Other than this problem, our DNS seems to be working fine - meaning the network is fast. One thing - I did have an ftp site that was the same address as the www. Do you think that because I have two records that point to the same IP this could be the problem? Thanks. Mike Malter (415) 479-1968 Office (415) 309-4637 Mobile (415) 462-2941 FAX -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Wednesday, February 25, 2004 6:30 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: SSL page takes 20 seconds to display. http://www.ISAserver.org Here's your problem: 10.9.8.19 - CryptRetrieveObjectByUrl::InetSchemeProvider 2004-02-25 14:20:18 HEARTOFGOLD - mmant3.joyousliving.com - 80 20 501 - http GET http://mmant3.joyousliving.com/CertEnroll/mmant3.joyousliving.com_Joyous %20Living%20CA.crt Inet 11001 0x5 The CA cert machine isn't resolving (11001 = can't resolve the host name to an IP). This response will take anywhere from 2 - 30 seconds, depending on the the DNS cache state and your DNS structure. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! On Wed, 25 Feb 2004 08:21:14 -0500 "Chris H" <ntpro@xxxxxxxxxx> wrote: http://www.ISAserver.org Messageabout 16 seconds here :) ----- Original Message ----- From: Mike Malter To: [ISAserver.org Discussion List] Sent: Tuesday, February 24, 2004 8:16 PM Subject: [isalist] RE: SSL page takes 20 seconds to display. http://www.ISAserver.org Hi Tom, Thanks for taking the time to answer. So https://www.joyousliving.com only took about 2 seconds? Sure it was https and not http. Please do not take offence for me asking as everybody I have had try this reported at least 20 seconds for the page to load. Thanks. Mike Malter (415) 479-1968 Office (415) 309-4637 Mobile (415) 462-2941 FAX ------------------------------------------------------------------------ ------ From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Tuesday, February 24, 2004 4:50 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: SSL page takes 20 seconds to display. http://www.ISAserver.org Hi Mike, Comes up in about two seconds for me. HTH, Tom Thomas W Shinder www.isaserver.org/shinder ISA 2004 Beta - Get it now! http://www.microsoft.com/isaserver/beta/default.asp ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Mike Malter [mailto:mike@xxxxxxxxxxxxxx] Sent: Tuesday, February 24, 2004 6:29 PM To: [ISAserver.org Discussion List] Subject: [isalist] SSL page takes 20 seconds to display. http://www.ISAserver.org I'm setting up SSL for the first time and there is something happening that I cannot quite figure out. My SSL pages take 20 seconds to display over the internet (they take virtually no time at all on our internal network) and I am not sure if I am doing something wrong. Here is a synopsis of what I did. a.. Established an enterprise CA. b.. Issued certificate to www.joyousliving.com by request for certificate on IIS server (5). c.. Transferred certificate to ISA Server (Integrated). d.. In ISA Server: a.. Listening in on three IP's b.. Pointed one IP - 64.175.22.129 to certificate. c.. Web published www.joyousliving.com a.. Bridged SSL to SSL a.. Server published SSL on 64.175.22.129. I am just stumped as to why it takes so long to open the page. Any assistance or perspective on what I have done would be greatly appreciated. The certificate issued by our domain CA is for testing purposes only, we are going to get a Thawte certificate for our production site. Thanks. Mike Malter (415) 479-1968 Office (415) 309-4637 Mobile (415) 462-2941 FAX ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: mike@xxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: ntpro@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: mike@xxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: cismic@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')