Exchange Server Forums

why access to owa5.5 at dmz so slow?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 5.5] >> Installation >> why access to owa5.5 at dmz so slow?

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

why access to owa5.5 at dmz so slow? - 8.Mar.2005 10:41:00 AM

seeker01

Posts: 5
Joined: 7.Mar.2005
From: australia
Status: offline

Dear all,

My OWA5.5 SP4 server runs on a Windows 2000 Server but still member server of NT4 domain.

OWA server is also the standalone CA root server but just CA server for this OWA.

My firewall is Cisco PIX. Before I moved the OWA to DMZ, I did not experience any slowness when HTTPS to it as LAN user.

Now OWA is at DMZ and is accessible from LAN & Internet user. However, both LAN & Internet users experience extreme slowness.

On PIX, I have allowed the following ports:
port 135, 137, 138 & 139 to the internal Exchange Servers & domain controller
DNS & WINS queries to the internal DNS & WINS servers.
I have got A & PTR record on public & internal DNS for OWA server.

Please dont question me about the potential risk as I am keen to deliver it to the management ASAP and they are willing to take the risk. Thanks in advanced.

Post #: 1

Featured Links*

RE: why access to owa5.5 at dmz so slow? - 8.Mar.2005 10:44:00 AM

seeker01

Posts: 5
Joined: 7.Mar.2005
From: australia
Status: offline

Hey its me again, I have forgotten to mention that I have set OWA to use "BASIC AUTHENTICATION". Thanks in advanced for your help.

(in reply to seeker01)

Post #: 2

RE: why access to owa5.5 at dmz so slow? - 8.Mar.2005 2:48:00 PM

ConnyRask

Posts: 73
Joined: 15.Dec.2004
From: Sweden
Status: offline

Hi, you need to open ports for IS and Directory also. Check this kb:
http://support.microsoft.com/?kbid=259240

(in reply to seeker01)

Post #: 3

RE: why access to owa5.5 at dmz so slow? - 9.Mar.2005 12:32:00 AM

seeker01

Posts: 5
Joined: 7.Mar.2005
From: australia
Status: offline

Thanks Con. I forgot to mention that I have also followed the steps http://support.microsoft.com/?kbid=259240 to configure static ports for Exchange IS & DS. What I noticed that after I point my OWA to the another Exchange 5.5 that also runs Windows 2000 server (also member server for NT4 domain), the authentication process seems to have improve a bit. I just this is not delusion. The other Exchange server runs on NT4 server. Does it make sense?

(in reply to seeker01)

Post #: 4

RE: why access to owa5.5 at dmz so slow? - 9.Mar.2005 12:37:00 AM

seeker01

Posts: 5
Joined: 7.Mar.2005
From: australia
Status: offline

Hi Con,
Though the speed has improved a little bit, but most mailbox users can not logon with error "http 500 - internal server error". Can you shade some lights here? thanks. I am very helpless here.

(in reply to seeker01)

Post #: 5

RE: why access to owa5.5 at dmz so slow? - 22.Mar.2005 11:05:00 PM

Paul Bendall

Posts: 126
Joined: 22.Mar.2005
From: London/England
Status: offline

Have you given the Everyone group the right to access the the computer locally on the IIS server that is running OWA.

The current thinking is to have OWA on the internal LAN and have a ISA or other Proxy in the DMZ. As such you don't have to punch holes into your firewall/DMZ for the DS/IS/TCP Port 135 for the RPC end-point mapper

(in reply to seeker01)

Post #: 6