Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Long delays when surfing the Internet after disabling ip_user_cache

    • Updated:
    • 30 Jul 2014
    • Product/Version:
    • InterScan Web Security Virtual Appliance 5.6
    • InterScan Web Security Virtual Appliance 6.0
    • InterScan Web Security Virtual Appliance 6.5
    • Platform:
    • Virtual Appliance 5.1
Summary
On a terminal server or NAT environment, you have to disable ip_user_cache. However, after disabling it, you encountered performance issues such as very long delays when browsing the Internet via InterScan Web Security Virtual Appliance (IWSVA) as proxy.
The performance issues stop only when you enable ip_user_cache again.
Details
Public
The issue occurs because IWSVA authenticates every request when ip_user_cache is disabled. To do this, an IWSVA feature called transparent authentication connects to the client to query the user’s identity. This process requires extra time and resource, thus affecting IWSVA performance.
To resolve the issue, disable transparent authentication. This has no negative impact, and authentication will still be transparent if the end user logs in using a domain account and automatic authentication is enabled in IE. For more details, refer to these documentations:
To disable transparent authentication and ip_user_cache:
  1. Log in to the IWSVA shell.
  2. Run the following commands:
    su enable
    configure module ldap ipuser_cache disable
    configure module ldap trans_auth disable
  3. Restart all IWSVA services using this command: /etc/iscan/rcIwss restart.
Premium
Internal
Rating:
Category:
Configure
Solution Id:
1099611
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.