site/images loading problems

[vsam]

Wingate support
I installed Wingate on a server running windows xp sp 2 (3 other clients are also running windowx xp with service pack2)
applied the tcp_ip patch on server and the clients which open up limit of open tcp/ip connections from 10 to 50
server has got 2 lan cards, 1st lan card used for internal networking (192.168.0.1) and second is for external ISP
wingate is able to automatically configure internal and external network cards , everything is running smoothly

www proxy server > sessions > transparent proxy is ticked > port 80 and 8080 is added to intercept connections made with ENS

but i have some problems
(1)
Problem 1

All websites on client machines loads extremely fast, but the ads and images on them takes a LONG time
for eg: sites like www.rediff.com site would load in zero seconds while ads placed on them like imads.rediff.com/***** will take about 30 to 60 seconds to load completely. This really annoy the user, because in the Firefox browser it will continues display "page loading" and person will usuall wait until message is changed to "Page loaded"
also ads. like
www.googlesyndication.com/_utm.gif
http://pageads.googlesyndication.com/pagead/ads
placed on MANY websites often take 20 to 40 seconds to load completely, unlike the main site which typically loads within <1 second on client machine

I tried to do the following to remove this problem but i cannot
(a)
Disabled Caching alltogether, still problem continues
Enabled Caching, still problem remains
(b)
disabled Puresight filter,still problem continues

also, images (gif or jpg) often takes much time to load after the main page is already displayed.
My internet connection is very fast, as soon as i dont use wingate, ads and images begin to load instataneosly along with the webpage


(2)
Problem 2
say i have blocked www.paypal.com (from www proxy server > policies > enable ban list > URL contains "paypal"
this works file and www.paypal.com is blocked
but as soon as someone types https://www.paypal.com the site is not blocked - it opens, filter doesnt work
i also added Paypal.com in Puresight filter, but https would destroy the filter and site will appear
I figure out that in https , its using Wingate NAT and proxy server is getting bypassed
i even try to add port 443 in www proxy server >sessions>transparent proxy ticked? add 443 port along with port 80 and 8080
but then none of the https site would open, so i remove 443 binding from the proxy server

(3)
Question
Is it advisable to enable ICS when wingate is running
on the wingate server, i enabled ICS on the ISP LAN CARD (right click > share this connection)
when i disable that i figured that DNS querries are taking long time to resolve
still i disable ICS in lan settings

no firewall/av program is running on the wingate server machine, all wingate services are binded correctly to appropriate lan card and services working smoothly

please help
Vivek

[vsam]

forgot to add this:
wingate is also active like a DHCP server, and successfully allocating IP to 4 other client pc'
and all the client are getting successfully authenticated
(Assumed users when username matches method)

[Nev]

Hi,

What you could do for this layout error in 1. try disabling the T/r // Transparent Redirection.

In 2. if you create a filter in the WWW proxy for example to ban a server which contains 'paypal' it will deny access in secure and non secure access, also check that port 443 is enabled in this service as well.

For 3. No ICS or Windows Firewall, Wingate has a an excellent firewall to protect your network.

[vsam]

disabling the Transparent Proxy means no control of the WWW server right? so all the site restrictions/keywords have to be conducted through the Puresight filter?

If i disable the ICS, then DNS resolve process takes a LOT of time on client machines

[Nev]

disabling the Transparent Proxy means no control of the WWW server right? so all the site restrictions/keywords have to be conducted through the Puresight filter?

If i disable the ICS, then DNS resolve process takes a LOT of time on client machines

Ah ok, in Wingate's DNS Resolver add the IP address of the DNS your Internet relies on then turn the ICS off.

Ipconfig /all on the Wingate server should reveal the Name Servers you need.

Also just check the adaptor usage in Wingate's Network tab.

This may well cure the other problem too.