Internet very slow behind ISA 2006 from one week Time
-
Saturday, January 19, 2013 2:38 PM
Dear Experts,
We have ISA 2006 std. on windows 2003 with one NIC. This NIC have IP for our local office address range. The gateway is the IP of the DSL modem and DNS servers are public DNS of google 8.8.8.8 and 4.2.2.1
Every thing was working good speed was OK! From last one week we are facing this problem, internet is very slow, browsing. When I look in ISA 2006 alerts and dashboard. I found
- concurrent TCP connections from One IP Exceeded
- Denied connections per minute from One IP address limit exceeded
- http requests from one IP address limit exceeded
- TCP connections per min. from One IP address limit exceeded
The above showing different IP address sources of our network, I mean it is not like there is only single IP appearing as source. We have rules as
- Allow Rule ( for few managers to exclude their IP and have full internet access)
- Deny Rule ( it have like from internal to "blocked websites") users with IP other then managers when try to access blocked website are checked here
- InternetAccess Rule( it have from localhost & internal to external) so all other staff browse internet from this rule
Please help me to trouble shoot this problem of slow response of internet. Do you think many websites listed under "blocked websites" is creating problem?
Kind Regards,
All Replies
-
Saturday, January 19, 2013 3:13 PM
Hi,
you should not configure a DNS Server on the External Interface of the ISA Server:
http://social.technet.microsoft.com/wiki/contents/articles/recommended-network-adapter-configuration-for-forefront-tmg-standard-edition-servers.aspx (als true for ISA Server)
it is possible to add the hosts to the exceptions of the flood mitigation settings if you are sure that the hosts are not infected by viruses / worms:
http://technet.microsoft.com/en-us/library/bb838988.aspxregards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.nt-faq.de
- Proposed As Answer by Nick Gu - MSFTMicrosoft Contingent Staff, Moderator Friday, January 25, 2013 5:43 AM
- Marked As Answer by Nick Gu - MSFTMicrosoft Contingent Staff, Moderator Monday, January 28, 2013 1:44 AM
-
Saturday, January 19, 2013 3:30 PM
Dear Sir,
Thanks for reply, this setup was working fine from last 2 years. I never added any hosts to exception of flood mitigation. So, what is causing this suddenly I need to investigate.
This ISA server 2006 is a virtual machine. From your experience any other part I can check ? what about doubts that this problem is from ISP side?
Kind Regards,
-
Tuesday, January 22, 2013 8:20 AMModerator
Hi,
Thank you for the post.
I also suspect this issue may cause by some worm infected computers from your internal network. Please run antivirus software on both ISA Server and internal clients.
Regards,
Nick Gu - MSFT
- Proposed As Answer by Nick Gu - MSFTMicrosoft Contingent Staff, Moderator Friday, January 25, 2013 5:43 AM
- Marked As Answer by Nick Gu - MSFTMicrosoft Contingent Staff, Moderator Monday, January 28, 2013 1:44 AM

