Comments on: DNS Related Performance Problems for the ISA Firewall http://blogs.isaserver.org/shinder/2006/05/08/dns-related-performance-problems-for-the-isa-firewall/ Written by Dr Thomas W Shinder, consultant to Microsoft, HP and many Fortune 500 companies on ISA firewall and Web proxy deployments this blog is where administrators get information about ISA Server Universal Threat Management firewalls. Topics include how to manage, deploy, and troubleshoot ISA Server as a network firewall, Web proxy/Web cache, remote access VPN server and VPN gateway to provide a high level of network security for all corporate computers. Fri, 29 Aug 2008 17:21:40 +0000 http://wordpress.org/?v=MU by: Jaired Anderson http://blogs.isaserver.org/shinder/2006/05/08/dns-related-performance-problems-for-the-isa-firewall/#comment-124516 Mon, 15 Oct 2007 19:57:50 +0000 http://blogs.isaserver.org/shinder/2006/05/08/dns-related-performance-problems-for-the-isa-firewall/#comment-124516 Tom- How could one determine if DNS is the performance robbing culprit if one is configured in cache mode only? (forward proxy). Thanks. Tom-

How could one determine if DNS is the performance robbing culprit if one is configured in cache mode only? (forward proxy).

Thanks.

]]> by: Thomas Shinder http://blogs.isaserver.org/shinder/2006/05/08/dns-related-performance-problems-for-the-isa-firewall/#comment-688 Thu, 11 May 2006 12:30:47 +0000 http://blogs.isaserver.org/shinder/2006/05/08/dns-related-performance-problems-for-the-isa-firewall/#comment-688 Hi Don, You bet! Thanks! Tom Hi Don,
You bet!
Thanks!
Tom

]]> by: DonMurphy http://blogs.isaserver.org/shinder/2006/05/08/dns-related-performance-problems-for-the-isa-firewall/#comment-687 Thu, 11 May 2006 04:41:24 +0000 http://blogs.isaserver.org/shinder/2006/05/08/dns-related-performance-problems-for-the-isa-firewall/#comment-687 Thanks for the clarification Thanks for the clarification

]]> by: Thomas Shinder Blog » Blog Archive » General Approach to Solving Performance Issues with the ISA Firewall Part 1 http://blogs.isaserver.org/shinder/2006/05/08/dns-related-performance-problems-for-the-isa-firewall/#comment-684 Tue, 09 May 2006 11:47:58 +0000 http://blogs.isaserver.org/shinder/2006/05/08/dns-related-performance-problems-for-the-isa-firewall/#comment-684 [...] If PMTU and black hole routers are ruled out as a problem, then check the DNS settings on the ISA firewall’s NICs. I discussed that in my last post, which you can read at http://blogs.isaserver.org/shinder/2006/05/08/dns-...ewall/ [...] […] If PMTU and black hole routers are ruled out as a problem, then check the DNS settings on the ISA firewall’s NICs. I discussed that in my last post, which you can read at http://blogs.isaserver.org/shinder/2006/05/08/dns-...ewall/ […]

]]> by: Thomas Shinder http://blogs.isaserver.org/shinder/2006/05/08/dns-related-performance-problems-for-the-isa-firewall/#comment-683 Tue, 09 May 2006 11:06:00 +0000 http://blogs.isaserver.org/shinder/2006/05/08/dns-related-performance-problems-for-the-isa-firewall/#comment-683 Hi Don, There's really no reason to do this, and it could slow things down just a bit. If the first adapter query fails, there no reason to deal with waiting for the second adapter query to fail since its the same DNS server. Just remove DNS settings from all interfaces except the internal interface. HTH, Tom Hi Don,

There’s really no reason to do this, and it could slow things down just a bit. If the first adapter query fails, there no reason to deal with waiting for the second adapter query to fail since its the same DNS server. Just remove DNS settings from all interfaces except the internal interface.
HTH,
Tom

]]> by: DonMurphy http://blogs.isaserver.org/shinder/2006/05/08/dns-related-performance-problems-for-the-isa-firewall/#comment-682 Tue, 09 May 2006 05:00:47 +0000 http://blogs.isaserver.org/shinder/2006/05/08/dns-related-performance-problems-for-the-isa-firewall/#comment-682 Hey Tom. Great stuff as usual. In a 2 nic simple SBS premium config we usually specify the dns settings of our internal LAN to ourselve (which is in SBS lingo the DNS server). We agree so far. But what we also do is on the external interface we point the dns server to the internal lan NIC as well. Do you see anything wrong with this approach? Hey Tom. Great stuff as usual.

In a 2 nic simple SBS premium config we usually specify the dns settings of our internal LAN to ourselve (which is in SBS lingo the DNS server). We agree so far. But what we also do is on the external interface we point the dns server to the internal lan NIC as well. Do you see anything wrong with this approach?

]]>