RE: Neoteris SSL VPN Slowness

Dante -


We have ~2000 customer deployments today with the majority of them using
OWA, Citrix, or both.  As it stands, we do not have any known
performance issues with regards to OWA and/or Citrix (ICA, NFuse, Web
Interface) slowness.  As a matter of fact, we have a couple of customers
using Secure Access 5000 clusters with GZIP hardware compression enabled
that has actually provided a better overall end-user response time for
dial-up users to OWA specifically.


That being said, here's a quick tip for Citrix - be sure you have "web
caching" enabled on the IVE for .ica files?


Under Admin Console, Resource Policies -> Web -> Caching -> [New Policy]
Example - Action: Cache, Resource: *:*/*.ica, Applies to role: All roles
This is not a requirement but could potentially improve end-user
response time. This policy will allow the IVE to download and save the
.ICA file on the IVE's local storage (AES encrypted) for transformation
before sending to the end-user.


As for OWA, I have no quick suggestions/recommendations because OWA
generally works well out of the box unless you have a configuration
issue or a problem with the backend system/network.


Feel free to contact me directly via email and CC: 
[email protected] <mailto:[email protected]>  
We'll get you running as soon as possible.


Doug Dooley <[email protected]> 
Security Products Group
Juniper Networks




[VPN] Neoteris SSL VPN Slowness


Dante Mercurio Dante at webcti.com
<mailto:vpn%40lists.shmoo.com?Subject=%5BVPN%5D%20Neoteris%20SSL%20VPN%2
0Slowness&In-Reply-To=> 
Thu May 20 10:41:39 MDT 2004 

*	Previous message: [VPN] SAP support through VPN
<http://sisyphus.iocaine.com/pipermail/vpn/2004-May/004717.html> 
*	Next message: [VPN] Question
<http://sisyphus.iocaine.com/pipermail/vpn/2004-May/004715.html> 
*	Messages sorted by: [ date ]
<http://sisyphus.iocaine.com/pipermail/vpn/2004-May/date.html#4714>  [
thread ]
<http://sisyphus.iocaine.com/pipermail/vpn/2004-May/thread.html#4714>  [
subject ]
<http://sisyphus.iocaine.com/pipermail/vpn/2004-May/subject.html#4714>  
[ author ]
<http://sisyphus.iocaine.com/pipermail/vpn/2004-May/author.html#4714>  

________________________________

Does anyone have any suggestions or experience regarding slowness issues
with a Neoteris SSL VPN connection?
 
Connections to OWA and Citrix are noticeably slower through the Neoteris
device, almost to an unacceptable rate, and this is before an in
production roll-out. The original Neoteris connection was through a
firewall to a single port on the Neoteris. It has since been adjusted to
placing one port on the DMZ and one internal to no effect.
 
Internet is provided by two T1's with outbound traffic on one and
inbound on the other. I-net does not appear to be an issue, as direct
connections to either app function fine. Firewall is a Netscreen-50,
thus there should not be a latency issue with it.
 
Any ideas or real world experience with this product is welcome.
 
Thanks,
 
--Dante

 

 

Doug Dooley
Security Products Group
Technical Marketing
office:408-962-8257
cell:408-221-9684
 
  <callto://dougdooley/>

_______________________________________________
VPN mailing list
[email protected]
http://lists.shmoo.com/mailman/listinfo/vpn