RE: Slow connections to java based web pages
- From: "Eric Poole" <EPoole@xxxxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 4 Dec 2003 13:58:53 -0800
Pete, your ISA setup (behind PIX with surf control installed) sounds just like
ours. We have had similar problems but still had issues when we went around
ISA directly through the PIX. We narrowed it down to some sort of blocking
being placed on our external IP's. If we route traffic to these specific sites
to our DSL line, problem goes away and site works fine. We've tried working
with our ISP to track it down more, but they are unable/unwilling to do more.
_______________________________________________
Eric Poole
IS Security Analyst
Community Medical Centers
1140 "T" Street, Fresno, California 93721
559-459-6784 (phone) 559-459-2045 (fax)
-----Original Message-----
From: Carstensen, Pete [mailto:PCARSTE@xxxxxxxxxxx]
Sent: Thursday, December 04, 2003 1:33 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Slow connections to java based web pages
http://www.ISAserver.org
We are experiencing numerous problems connecting to certain web pages,
including very slow responses or sometimes fully timing out. It appears that
what these have in common are java code (JSP) authentication or SSL encryption.
Sorry to not have much to go on but it is rather random but very persistent.
In talking to Microsoft PSS, we were told that it is "bad java web page
coding". Ok, but on many different sites? A bit hard to believe that it is
"everyone else's fault".
It helps to put in destination sets for the sites, but that doesn't fix it all
the time either.
Doesn't seem to matter if the user has the firewall client loaded or not, the
slowness is still apparent either way.
Environment: ISA with FP1 loaded on W2000 Server, SP3. Server is behind PIX
and then connected with (4) T1 lines bundled.
The ISA server does have web filtering software from Surfcontrol on it. I have
disabled that to see if it contributed to the problem. It doesn't appear to
but I would not rule that possibility out.
Where is a good place to start looking for answers?
*****************************
Pete Carstensen, MCSE
Senior LAN Engineer
CSK Auto, Inc.
645 E. Missouri Ave.
Phoenix, AZ 85012
(602) 631-7176
pcarste@xxxxxxxxxxx
Computers are not intelligent. They only think they are.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
epoole@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
