You experience slow Web browsing performance on internal client computers that use Internet Security and Acceleration Server to manage Web requests (839510)
The information in this article applies to:
- Microsoft Internet Security and Acceleration Server 2004, Standard Edition
Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base: 256986 Description of the Microsoft Windows Registry SYMPTOMSYou may experience slow Web browsing performance on internal client computers when the following network conditions exist: - You have an internal Domain Name System (DNS) server that cannot resolve external DNS names.
- You have internal client computers that connect to a server that is running Microsoft Internet Security and Acceleration Server (ISA Server). This ISA server is configured as a firewall between the internal network and the Internet.
CAUSEThis problem occurs because the internal DNS server cannot resolve external DNS names for the Web request that the ISA server is requesting.
When the ISA server receives a Web request from a client computer, the ISA server tries to resolve the name of the requested Web site to an IP address. However, because the internal DNS server cannot resolve external DNS names, the request may take longer to process.
Note This problem may occur even if you have configured a routing rule in ISA Server.RESOLUTIONTo resolve this problem, use the Microsoft Visual Basic Scripting Edition (VBScript) code in this section to disable name resolution for the ISA Server routing rules. To run this code, follow these steps: Microsoft provides programming examples for illustration only, without warranty either expressed or implied. This includes, but is not limited to, the implied warranties of merchantability or fitness for a particular purpose. This article assumes that you are familiar with the programming language that is being demonstrated and with the tools that are used to create and to debug procedures. Microsoft support engineers can help explain the functionality of a particular procedure, but they will not modify these examples to provide added functionality or construct procedures to meet your specific requirements. - Start Notepad, and then paste the following VBScript code in Notepad:
' Create the root object.
Dim root ' The FPCLib.FPC root object
Set root = CreateObject("FPC.Root")
' Declare the other objects needed.
Dim isaArray ' An FPCArray object
Dim webProxy ' An FPCWebProxy object
Dim restartMask ' A 32-bit bitmask of type FpcServices
' Get references to the array object
' and the Web proxy object.
Set isaArray = root.GetContainingArray()
Set webProxy = isaArray.ArrayPolicy.WebProxy
' Configure the Web proxy to skip name resolution
' while checking access and routing rules and save
' the new configuration.
webProxy.SkipNameResolutionForAccessAndRoutingRules = True
restartMask = webProxy.GetServiceRestartMask
webProxy.Save
' Restart the Firewall service so that
' the change will take effect.
isaArray.RestartServices restartMask
WScript.Echo "Done!"
- Click Save on the File menu, and then follow these steps in the Save As dialog box:
- In the Save as type list, click All Files.
- In the File name box, type FileName.vbs.
- Copy the .vbs file to the ISA server, and then double-click the .vbs file to run the VBScript code.
- Click OKwhen you are prompted.
You can also create a DWORD value in the registry to resolve this problem. To manually create the DWORD value, follow these steps: Warning If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk. - Click Start, click Run, type regedit, and then click OK.
- Locate and then click the following key in the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Fpc\Storage\Array-Root\Arrays\{D6380CBF-B892-4EC8-B30D-4361DABEBE9D}\ArrayPolicy\WebProxy Note The value {D6380CBF-B892-4EC8-B30D-4361DABEBE9D} represents an ID that is specific to your installation. This ID may be different on your computer. - Right-click WebProxy, point to New, and then click DWORD Value.
- In the right pane, type the following name for the new value, and then press ENTER:
msFPCSkipNameResolutionForAccessAndRoutingRules - Right-click the DWORD value, and then click Modify.
- In the Value data box, type 1, and then click OK.
- Exit the registry.
STATUSMicrosoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Modification Type: | Major | Last Reviewed: | 7/5/2005 |
---|
Keywords: | kbprb KB839510 kbAudEndUser kbAudITPRO |
---|
|