Sweet. Yeah, you should see the cluster-f#$@ that is my PAC file and ISA rule-set..... -Shawn ----- Shawn R. Quillman Robert Bosch Corporation RBNA/CIT1.1 38000 Hills Tech Drive Farmington Hills, MI 48331 (248) 553-1164 (P) (248) 848-2855 (F) shawn.quillman@xxxxxxxxxxxx -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Monday, November 17, 2003 8:29 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Troubleshooting ISA performance http://www.ISAserver.org Hi Shawn, I think you get credit for trying. Some people won't deploy a correct split DNS infrastrucutre for a variety of reasons. Two social credits for the effort ;-) Tom -----Original Message----- From: Quillman Shawn (RBNA/CIT1.1) * [mailto:Shawn.Quillman@xxxxxxxxxxxx] Sent: Monday, November 17, 2003 7:14 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Troubleshooting ISA performance http://www.ISAserver.org Well, that depends on your definition of properly. We do some proxying of Intranet sites as well (for caching, plain old T1 across the pond to handle 2 continents worth of traffic...) so we have proxies set to resolve to internal dns servers. Anything that doesn't get caught by the routing rules goes out to the firewalls. In support of your argument, though, we do have the same internal and external namespace.... I got absolutely _nowhere_ with that argument... Not enough clout I guess :) -Shawn ----- Shawn R. Quillman Robert Bosch Corporation RBNA/CIT1.1 38000 Hills Tech Drive Farmington Hills, MI 48331 (248) 553-1164 (P) (248) 848-2855 (F) shawn.quillman@xxxxxxxxxxxx -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Sunday, November 16, 2003 5:20 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Troubleshooting ISA performance http://www.ISAserver.org Hi Shawn, Another (better?) way is to configure DNS properly ;-) Thanks! Tom www.isaserver.org/shinder -----Original Message----- From: Quillman Shawn (RBNA/CIT1.1) * [mailto:Shawn.Quillman@xxxxxxxxxxxx] Sent: Friday, November 14, 2003 12:02 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Troubleshooting ISA performance http://www.ISAserver.org I saw that a lot on mine as well. The performance problems were fixed by implementing a dns-related hotfix and setting the two following reg entries in hklm\system\currentcontrolset\services\w3proxy\parameters: SkipNameResolutionForAccessAndRoutingRules - DWORD - value of 1 SkipNameResolutionForPublishingRules - DWORD - value of 1 I don't remember the hotfix number off the top of my head, but it is included in ISA SP1. I never have discovered the reason that it "loses connections" with the upstream proxy. -Shawn ----- Shawn R. Quillman Robert Bosch Corporation RBNA/CIT1.1 38000 Hills Tech Drive Farmington Hills, MI 48331 (248) 553-1164 (P) (248) 848-2855 (F) shawn.quillman@xxxxxxxxxxxx -----Original Message----- From: Barry Kelly [mailto:barry.kelly.it@xxxxxxxxxxxxxxxxxxxxxxxxx] Sent: Friday, November 14, 2003 9:07 AM To: [ISAserver.org Discussion List] Subject: [isalist] Troubleshooting ISA performance http://www.ISAserver.org I am having a performance problem with ISA 2k on a win2k server using an upstream proxy. The speed of connection to internet pages from client pcs through the ISA seems to crawl compared to using IE directly on the ISA (by-passing the ISA controls and connecting directly to the up-stream proxy). We have also noticed that the event logs regually report event ID 14130 - The Web Proxy service detected that the upstream proxy 'xx.xx.xx.xx' is not available. For more information about this event, see ISA Server Help. Any help on this would be great. If there is any other information that I need to list on this let me know. Thank-you. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: shawn.quillman@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: shawn.quillman@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: shawn.quillman@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')