Microsoft KB Archive/839510

= You experience slow Web browsing performance on internal client computers that use Internet Security and Acceleration Server to manage Web requests =

Article ID: 839510

Article Last Modified on 12/4/2007

-

APPLIES TO


 * Microsoft Internet Security and Acceleration Server 2004 Standard Edition
 * Microsoft Internet Security and Acceleration Server 2004 Enterprise Edition
 * Microsoft Internet Security and Acceleration Server 2006 Enterprise Edition
 * Microsoft Internet Security and Acceleration Server 2006 Standard Edition

-





SYMPTOMS
You may experience slow Web browsing performance on internal client computers when the following network conditions exist:
 * You have an internal Domain Name System (DNS) server that cannot resolve external DNS names.
 * You have internal client computers that connect to a server that is running Microsoft Internet Security and Acceleration Server (ISA Server). This ISA server is configured as a firewall between the internal network and the Internet.



CAUSE
This problem occurs because the internal DNS server cannot resolve external DNS names for the Web request that the ISA server is requesting.

When the ISA server receives a Web request from a client computer, the ISA server tries to resolve the name of the requested Web site to an IP address. However, because the internal DNS server cannot resolve external DNS names, the request may take longer to process.

Note This problem may occur even if you have configured a routing rule in ISA Server.



RESOLUTION
To resolve this problem, use the Microsoft Visual Basic Scripting Edition (VBScript) code in this section to disable name resolution for the ISA Server routing rules. To run this code, follow these steps.

Microsoft provides programming examples for illustration only, without warranty either expressed or implied. This includes, but is not limited to, the implied warranties of merchantability or fitness for a particular purpose. This article assumes that you are familiar with the programming language that is being demonstrated and with the tools that are used to create and to debug procedures. Microsoft support engineers can help explain the functionality of a particular procedure, but they will not modify these examples to provide added functionality or construct procedures to meet your specific requirements.   Start Notepad, and then paste the following VBScript code in Notepad: ' Create the root object.

Dim root ' The FPCLib.FPC root object Set root = CreateObject(&quot;FPC.Root&quot;)

' Declare the other objects needed.

Dim isaArray   ' An FPCArray object Dim webProxy   ' An FPCWebProxy object Dim restartMask ' A 32-bit bitmask of type FpcServices

' Get references to the array object ' and the Web proxy object.

Set isaArray = root.GetContainingArray Set webProxy = isaArray.ArrayPolicy.WebProxy

' Configure the Web proxy to skip name resolution ' while checking access and routing rules and save ' the new configuration.

webProxy.SkipNameResolutionForAccessAndRoutingRules = True restartMask = webProxy.GetServiceRestartMask webProxy.Save

' Restart the Firewall service so that ' the change will take effect.

isaArray.RestartServices restartMask WScript.Echo &quot;Done!&quot;  Click Save on the File menu, and then follow these steps in the Save As dialog box:  In the Save as type list, click All Files. In the File name box, type .vbs .  Copy the .vbs file to the ISA server, and then double-click the .vbs file to run the VBScript code.</li> Click OKwhen you are prompted.</li></ol>

<div class="status_section">

STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.

<div class="moreinformation_section">

MORE INFORMATION
For more information about Microsoft Internet Security and Acceleration Server, visit the following Microsoft Web site:

http://www.microsoft.com/isaserver

For additional information about related topics, click the following article number to view the article in the Microsoft Knowledge Base:

292018 Slow response from downstream ISA Server using Web proxy chaining

Keywords: kbprb kbisa2006swept KB839510

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.