ISA 2004 SP3

 

I have a problem whereby my browsing the INternet is very very slow from PC's on the (192.168.16.x) Internal network. I can only assume that ISA is slowing things up. If I place a PC on the external network (10.0.0.2) so the PC is browing directly through the Firewall I get the responses that I would expect.

 

The connection is a 3 month old ADSL Max service.  The odd thing is that the Downoad speeds are around 400<->800kbs which is what is about right, (our ADSL Router is reporting 8Mbs).

 

The Network is

(Internet)  

 !

(ADSL Router)

  !

(Hardware Firewall)

   !               !

   !              (Test PC)

(SBS 2003)

   !

  (Internal Network)

                                                                            !-----

If I use 'TEST PC' and browse a website I get almost instantaneous results, if I use 'Work PC' to browse the same website the delay is almost 10 seconds.

 

I am frustrated as to what the problem should be. Before we moved it was fine, it seems that ISA (?) if trying to sort something out, but I cant figure what it might be. ISA BPA does not show me anything much exciting.

 

we are not prevented from browsing, it just takes a long time.

 

We recently moved site and ISP the ADSL service has not been running correctly since the move.

 

Any ideas please? Thanks

 

Paul

Here attached are the 2 configs.

Paul,

 

Did you set forwarders to your ISP's DNS servers when you ran the CEICW?

To be honest I dont recall. The basic network definitions have not changed in some 3 years. Is this some thing I can change by modifying the NIC definitions, or shoudl I re-run the CEICW again?

 

I have never defined the DNS addresses to SBS, instead they are set in the hardware firewall (our GNATBOX), I have made the assumption that as the gateway/firewall address is known to SBS that this is sufficient.

 

Paul

DNS forwarders should always be set. Pls, rerun the CEICW and set those:

 

I am working remotely so its difficult to be objective as I am using a RWW station in side the office to test this. However.... it does seem to have sorted out the problem.

 

You were right, the CEICW when it was run showed up the old DNS entries for our prevous ISP. This is the only place where they were visible as far as I can see.

 

Thanks,

 

Paul

Thanks

You can also see the forwarders in the DNS server properties.