RE: SSL page takes 20 seconds to display.
- From: "Mike Malter" <mike@xxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 25 Feb 2004 14:35:38 -0800
Tom,
I am running Server 2000 as my AD Controller and the tabs are a little
different. However is the concept the same? I did web publish my CA
and am getting ready to edit my CA and just want to double check with
you.
Thanks.
Mike Malter
(415) 479-1968 Office
(415) 309-4637 Mobile
(415) 462-2941 FAX
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Wednesday, February 25, 2004 2:05 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SSL page takes 20 seconds to display.
http://www.ISAserver.org
Hi Mike,
My bad! Its not in the ISA/Exchange kit, its in the VPN kit. Too many of
them even for me to keep track of :)
Check out:
http://www.isaserver.org/articles/isa2000vpndeploymentkit.html
It's doc #25.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA 2004 Beta - Get it now!
http://www.microsoft.com/isaserver/beta/default.asp
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Mike Malter [mailto:mike@xxxxxxxxxxxxxx]
Sent: Wednesday, February 25, 2004 3:54 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SSL page takes 20 seconds to display.
http://www.ISAserver.org
Jim,
Thanks for the tips.
It's easy for me to create an mmant3 record for the external DNS.
However, web publishing my CA, that I have actually never heard of. Tom
said I should check his ISA Server 2000 Exchange 2000/2003 kit to find
out how to publish my CA. I downloaded the kit and am looking through
his articles now. Is there any particular one that explains how to do
it?
Thanks again, I can't tell you how much I appreciate the help that
everyone has been giving me here.
Mike Malter
(415) 479-1968 Office
(415) 309-4637 Mobile
(415) 462-2941 FAX
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Wednesday, February 25, 2004 1:03 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SSL page takes 20 seconds to display.
http://www.ISAserver.org
You'll have to :
1. web-publish your CA through ISA
2. coordinate with your external DNS owner to create a "mmant3" host (or
alias) record in your "joyousliving" zone and point it to
the ISA external IP.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "Mike Malter" <mike@xxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, February 25, 2004 07:11
Subject: [isalist] RE: SSL page takes 20 seconds to display.
http://www.ISAserver.org
Jim,
Thanks for you reply.
Our CA is on our AD controller as is one of our DNS servers (we have a
redundant AD controller and our other DNS is on that box).
I am not sure how to go about troubleshooting this. Is there anything
out there that I can read to help? Other than this problem, our DNS
seems to be working fine - meaning the network is fast.
One thing - I did have an ftp site that was the same address as the www.
Do you think that because I have two records that point to the same IP
this could be the problem?
Thanks.
Mike Malter
(415) 479-1968 Office
(415) 309-4637 Mobile
(415) 462-2941 FAX
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Wednesday, February 25, 2004 6:30 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SSL page takes 20 seconds to display.
http://www.ISAserver.org
Here's your problem:
10.9.8.19 - CryptRetrieveObjectByUrl::InetSchemeProvider
2004-02-25 14:20:18 HEARTOFGOLD -
mmant3.joyousliving.com - 80 20 501 - http
GET
http://mmant3.joyousliving.com/CertEnroll/mmant3.joyousliving.com_Joyous
%20Living%20CA.crt Inet 11001 0x5
The CA cert machine isn't resolving (11001 = can't resolve the host name
to an IP). This response will take anywhere from 2 - 30 seconds,
depending on the the DNS cache state and your DNS structure.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
On Wed, 25 Feb 2004 08:21:14 -0500
"Chris H" <ntpro@xxxxxxxxxx> wrote:
http://www.ISAserver.org
Messageabout 16 seconds here :)
----- Original Message -----
From: Mike Malter
To: [ISAserver.org Discussion List]
Sent: Tuesday, February 24, 2004 8:16 PM
Subject: [isalist] RE: SSL page takes 20 seconds to display.
http://www.ISAserver.org
Hi Tom,
Thanks for taking the time to answer. So https://www.joyousliving.com
only took about 2 seconds? Sure it was https and not http. Please do
not take offence for me asking as everybody I have had try this reported
at least 20 seconds for the page to load.
Thanks.
Mike Malter
(415) 479-1968 Office
(415) 309-4637 Mobile
(415) 462-2941 FAX
------------------------------------------------------------------------
------
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Tuesday, February 24, 2004 4:50 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SSL page takes 20 seconds to display.
http://www.ISAserver.org
Hi Mike,
Comes up in about two seconds for me.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA 2004 Beta - Get it now!
http://www.microsoft.com/isaserver/beta/default.asp
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Mike Malter [mailto:mike@xxxxxxxxxxxxxx]
Sent: Tuesday, February 24, 2004 6:29 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] SSL page takes 20 seconds to display.
http://www.ISAserver.org
I'm setting up SSL for the first time and there is something
happening that I cannot quite figure out. My SSL pages take 20 seconds
to display over the internet (they take virtually no time at all on our
internal network) and I am not sure if I am doing something wrong. Here
is a synopsis of what I did.
a.. Established an enterprise CA.
b.. Issued certificate to www.joyousliving.com by request for
certificate on IIS server (5).
c.. Transferred certificate to ISA Server (Integrated).
d.. In ISA Server:
a.. Listening in on three IP's
b.. Pointed one IP - 64.175.22.129 to certificate.
c.. Web published www.joyousliving.com
a.. Bridged SSL to SSL
a.. Server published SSL on 64.175.22.129.
I am just stumped as to why it takes so long to open the page. Any
assistance or perspective on what I have done would be greatly
appreciated.
The certificate issued by our domain CA is for testing purposes
only, we are going to get a Thawte certificate for our production site.
Thanks.
Mike Malter
(415) 479-1968 Office
(415) 309-4637 Mobile
(415) 462-2941 FAX
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List
as: tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mike@xxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ntpro@xxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mike@xxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mike@xxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mike@xxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
