I got an issue, where opening sites in internet browser takes about 20-30 secs.
I've checked all performance graphs and only this one stands to be abnormal
First byte received from client until first byte sent back - 30 000 ms average
last byte received from client until last byte sent back - 30 000 ms average
all other graphs (NTLM, DNS etc) looks fine. Whats odd that i got other proxy on same location for guests, but this one works OK. However the second proxy dony use any way of authentication etc as it's for guests. Both proxies using same ISP/firewall.
these counters cover up a lot of different actions (e.g. Rule engine, DNS, Authentication, connect to server, ..).
What do the "Connect to server" and "Used by rule engine" counters say (also present under Performance utilization)?
Is there a difference between HTTPS and HTTP websites?
Have you already created a tcpdump to look for the delay?
If not, you could check if delay is also occurring to "www.mwginternal.com", if yes then create:
tcpdump with parameter: -npi any -s 0 host 18.104.22.168 or host <client IP> or port 53 or port 445
Then you can check with wireshark where the delay is occurring (internal connection or external, ..).
If you need further help with troubleshooting these debug data at the end, then I would recommend to open a SR and attach the debug data (feedback file, rule trace, connection trace, tcpdump) and tell the IP addresses used while reproducing the issue.