IIS Server Security - SSL site slow

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > June 2004 > SSL site slow





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author SSL site slow
Stryder

2004-06-26, 10:16 am


When I moved my SSL web site from my internal network to my DMZ it has become very slow. The unsecured site is fine but the secured area takes forever to load up. It is on Windows 2003 with IIS 6.0 but we have noticed the same behavior with a W2K server
and IIS 5.0.

Any ideas?

Thanks.
Miha Pihler

2004-06-26, 10:16 am

Hi,

Is this server member of domain or tied to any other service (e.g. SQL) in
internal network?

Mike

"Stryder" <Stryder@discussions.microsoft.com> wrote in message
news:EA4D7E01-9807-460D-BFE7-F6C0B2F1C3ED@microsoft.com...
>
> When I moved my SSL web site from my internal network to my DMZ it has
> become very slow. The unsecured site is fine but the secured area takes
> forever to load up. It is on Windows 2003 with IIS 6.0 but we have
> noticed the same behavior with a W2K server and IIS 5.0.
>
> Any ideas?
>
> Thanks.



Stryder

2004-06-26, 10:16 am

Yes it is a member of the domain but it does not access any resources in the internal network and the CA is local on the web server.

Thanks.

"Miha Pihler" wrote:

> Hi,
>
> Is this server member of domain or tied to any other service (e.g. SQL) in
> internal network?
>
> Mike
>
> "Stryder" <Stryder@discussions.microsoft.com> wrote in message
> news:EA4D7E01-9807-460D-BFE7-F6C0B2F1C3ED@microsoft.com...
>
>
>

Miha Pihler

2004-06-26, 10:16 am

If it is a member of domain and you move it do DMZ, does is still have
access to DCs? It should! If you can't open access to DCs from DMZ, remove
the server from domain and have it as stand alone...

Mike

"Stryder" <Stryder@discussions.microsoft.com> wrote in message
news:1282D9DC-EA10-46C6-94CA-1D02320C4452@microsoft.com...[vbcol=seagreen]
> Yes it is a member of the domain but it does not access any resources in
> the internal network and the CA is local on the web server.
>
> Thanks.
>
> "Miha Pihler" wrote:
>


Paul Lynch

2004-06-26, 10:16 am

On Thu, 24 Jun 2004 06:21:01 -0700, "Stryder"
<Stryder@discussions.microsoft.com> wrote:

>
>When I moved my SSL web site from my internal network to my DMZ it has become very slow. The unsecured site is fine but the secured area takes forever to load up. It is on Windows 2003 with IIS 6.0 but we have noticed the same behavior with a W2K serve

r and IIS 5.0.
>
>Any ideas?
>
>Thanks.


Hello,

See if this KB article is relevant :

SSL (https) Connection Slow with One Certificate but Faster with
Others
http://support.microsoft.com/?id=295070


Regards,

Paul Lynch
MCSE
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com