View Single Post
Old 05-28-2006   #3 (permalink)
wmcmillen


 
 

RE: Exteamly slow internet access (not LAN access)...SPI on router

VERY GOOD Info!!!

I have just started with Vista Beta 2 - this problem is alive and well and
was killing me. Amazingly I had thrown every logical combination that in one
way or another is discussed through out these postings...

1) Thought IE7 issue... lowered security, etc - not it.
2) User Account Protection - no avail.
3) Windows Firewall - disabled from the start - I use a SonicWALL with
Enhanced OS so I always scratch the Windows Firewall.
3) Put in an another NIC - no change.
4) Upgraded my memory from 512 to 2GB - no help
5) Scratch and reload - hoping for a driver.
6) Started searching my SonicWALL logs to see if it would show me any
reports of blocking or thinking Vista was some sort of "internal port scan"

All of this being done over the last 2 days before I found this post....
Putting alot more information then necessary here in hopes it will help
others with key words, etc.

I am running an AMD 3000+, Soltek MB, NVIDIA Chipset, SonicWALL TZ170 with
Enhanced OS. Base point here is that there is some sort of HUGE FLAW with
Vista's TCP/IP stack for Internet Bound traffic, Windows update, Websites,
etc - just like some have said - I let a 5.3MB update try to load for over 15
hours and it had only made it 19% of the way (I should note these types of
speed from a person & same machine that can download 220MB files in 14
minutes from Microsoft). Websites for simple browsing were taking upwards of
30 minutes to load.

SOLUTION - Kill your Hardware Firewall, SonicWALL, DLINK, Cisco/Linksys, etc
- you either have to be able to turn off SPI (By the way the newer generation
of SonicWALL's go way beyond SPI doing a Deep Packet Inspection). Just for
the record I could not find a real easy way to turn this off in my SonicWALL
so my solution as I type this was to go get an old Linksys - put it in place
and turn off the firewall on the BEFSX41.

Basically I have turned my computer into a sitting duck out on the
internet... but at least now I have a starting place.

Tomorrow is the holiday, but on Tuesday I will be in a Vista class held by
Microsoft in Central IL - I will talk to the folks there about it as well as
get digging through our MSDN & Gold partnership channels. If I find anything
about a "REAL SOLLUTION" I will pass the info along -

Thank you folks so much for posting the previous informaiton... I was about
to loose my mind over this one.


"Doting Daddy" wrote:

> I have a Linksys RV016. I had to shutdown the firewall functionality
> completely in order to overcome the problem. Shutting down SPI wasn't nearly
> enough.
>
> "Sterck" wrote:
>
> > in reference to this thread:
> > http://windowshelp.microsoft.com/com...g=en&cr=US&p=1
> >
> > I too am having extreamly bad internet performance. This has been common
> > across many builds, such as beta one. Feb CTP and now Beta 2. First the
> > background..
> >
> > I run a pretty decent LAN at my house. I have a cable modem running 450/5mb
> > roughly. I have that going into a Cisco 831 router, gigabit managed switch.
> > I am runnin a win 2k3 server with AD. My network works well. I have 4-5
> > computers on the network (with random laptops), 2 networked ReplayTV, an Xbox
> > and PS2.
> >
> > On my living room machinge:
> > AMD 2600+, 1gb ram, GeForce 5900
> >
> > I am using this box as my Vista testing site. Vista is slow. It pretty
> > much idles at 500+mb RAM utilization. But with Beta 2, things (aside from
> > memory) things are running really decent. I can copy ISO files from my
> > domain controller to the Vista client in 15 or so seconds.
> >
> > My main concern is when I go to request a web server outside of my network,
> > performance is terrible. Go to Nvidia.com to get the latest Vista graphics
> > driver, and 1/3 of the page loads and then just keeps trying with no luck.
> > Wait 30 mins, and come back, still waiting.
> >
> > Gettin a critical update from windows update is at 19% after 3-4 hours
> > (trying to pull down 2.7mb)
> >
> > I read the threat that posted above, and it looks like the SPI part is the
> > cuplrit. This sucks. Its not like Im running a low quality router, my Cisco
> > 831 is a decent guy and Im running the advanced IOS on it that can do crazy
> > things like HSRP.
> >
> > Does anyone have any work arounds besides dumbing down the router? I cant
> > imagine what will happen when IT companies around the world try to put Vista
> > on their corporate lans to find out that web surfing is essentially disabled.
> >
> >
> > MS, any help on this? Its existed on at least the last two major public
> > builds.
> >
> > Jeff
> >
> >

My System SpecsSystem Spec