Slow Web Browsing

[rmoss25]

Hello,
Here is an issue we are having on our network. People on our 172.20.x.x and our 172.30.x.x are expereinceing slow connectivity to certian websites. For example if someone tries to go to www.google.ca it comes up right away but if they try to go to yahoo.com for example it is extremely slow. So basically some http sites are fine and others are not.
Orginally we thought it might be something with SmartDefense but we have disabled that. The checkpoint logs show that http traffic is allowed with no error in communication.
We are Running NGX R62, with VRP.
Someone suggested that it might be a problem with clustering and that the way the certain sites are written.
Does anyone have any ideas on where I can start troubleshooting this?

[melipla]

Originally Posted by rmoss25

People on our 172.20.x.x and our 172.30.x.x are expereinceing slow connectivity to certian websites.

Do you have other networks that work normally? If so how are they different from the ones you specified?

Originally Posted by rmoss25

Someone suggested that it might be a problem with clustering and that the way the certain sites are written.
Does anyone have any ideas on where I can start troubleshooting this?

If you're active/active and one cluster member does not have routes that the other cluster member has then that may be an issue. If you're active/standby and haven't failed over at all then I don't think clustering will be the issue.

A packet capture might tell you more information. Use different DNS servers. Try using the IP instead of the hostname. Traceroute to specific website IPs that are slow, verify that routing is "normal" by comparing it to a traceroute from a host w/o the problem. Use an internet traceroute host to identify any problems routing to your "public IPs", especially if you use different public addresses for different networks / firewalls.