I have two sites in which I'm managing & monitoring my CSIDS appliances with VMS 2.1 IDM & Security Monitor (W2K SP3). When I connect to the Cisco Works servers (either one) via the web interface (port 1741) I am experiencing extremely slow response. It take approximately 5-10 minutes before I am given the opportunity to log on. I don't know what the problem is, but I have eliminated several possibilities:
Not a hardware resource problem. Ran performance monitoring utilities on both servers (dual Xeons with 2GB RAM each)... not even getting close to maxing out the resources.
Not a network issue. Even attempting to open the web console on the local machine takes just as long.
For the most part, Cisco Works and VMS 2.1 were installed with the default settings. Once I do successfully log on, the performance isn't too bad. Each server is monitoring only 5 sensor appliances (one 4230 and four 4210s).
I thought that VMS 2.1 was only tested with Win2kSp2 not Service Pack 3. When you try to install common services it gives you that warning message. I do not know if this is related to your problem but it might.
How about running a sniffer or ethereal trace to see if its related to some type of name resolution issue?
Also is this a dedicated machine? I discovered an issue with SQL trying to install the new Cisco Threat Response on the VMS 2.1 server that hosts the IDS MC. Apparently CTR requires a dedicated machine.
Only other areas I could point you to is antivirus or other software running on the box?
That point made about the SP3 is worth looking into. We have had a few surprise in this area before
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...