RE: [FW1] browsing too slow

["Dickson, Peter " <Peter.Dickson@FW1-NOSPAMtheaa.com>]

Don't do it !!!

if you have rules that contain domains they NEED to do DNS lookups.

Also if you use the security servers on the firewall they also require DNS.


	regards

PD
> -----Original Message-----
> From:	Steven Schuster [SMTP:SSchuster@midwestiso.org]
> Sent:	Wednesday, February 14, 2001 2:38 PM
> To:	'Sumash Singh'; FW1-mail (E-mail)
> Subject:	RE: [FW1] browsing too slow
> 
> ***** This message originated from outside the AA *****
> 
> 
> Disable DNS on your FW gateways.  What you are most likely experiencing is
> a
> DNS timeout on your firewall, not your client.  
> 
> Steve Schuster, CCSE, CCNA
> Midwest ISO
> Security Analyst
> 
> -----Original Message-----
> From: Sumash Singh [mailto:Sumash.Singh@kentron.co.za]
> Sent: Wednesday, February 14, 2001 1:54 AM
> To: FW1-mail (E-mail)
> Subject: [FW1] browsing too slow
> 
> 
> 
> Hey all,
> 
> I have a very strange issue that I would like to run past you all. Abt 2
> weeks ago, we noticed that the internet browsing on PC's started to take
> extremely slow. I fire up my browser and type in a URL like www.sun.com
> The
> PC waits and waits and after abt 25-30 secs, just then seems to fly
> through
> the loading of the page. I initially thought that this was a DNS problem.
> But if I do a nslookup from the fw, it returns the IP address immediately.
> This only happens with http though. Any ideas or has anyone experienced
> the
> same b4
> 
> Thanx all
> 
> Sumash
> 
> 
> **********************************************************************
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager at contentadmin@kentron.co.za.
> **********************************************************************
> 
> 
> ==========================================================================
> ==
> ====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ==
> ====
> 
> 
> ==========================================================================
> ======
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ======


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================