Ok, I had a client complaining about slow internet access.  In the process of trying to isolate the problem I ran a monitoring of the ISA traffic.  It found a TON of activity hitting the RPC (all interfaces) protocol.  And I mean a TON.  Like 20-25 TIMES the HTTP requests.

 

Then I looked at the Result Codes from these requests and I see the a lot of FWX_E_GRACEFUL_SHUTDOWN and FWX_E_CONNECTION_KILLED.

 

I did some looking and found that I may need to disable Enforce Stricit RPC Compliance under both the access rule that is being hit and the system configuration.  I did this and I don't see any change.

 

I have since looked at three other SBS 2003 Premium boxes with ISA and I see the same activity on those as well.

 

Any ideas what is going on and where to look?  Thanks!

 

Benjamin Hill