When connecting to Symantec Web Security Services (WSS) through the Symantec Endpoint Protection (SEP) client's Web Traffic Redirection (WTR), Web browsing is slow. Loading several Web sites at once may take up to a minute or longer.
Some Web browsers, such as Google Chrome, may show status messages saying "Waiting for proxy server". Explicit proxy connections to WSS do not show the same delays.
This problem can happen when DNS queries to the client computer's configured DNS server are returned outside of a normal, 20-50 millisecond range. The client computer must perform a DNS query on all URLs before requesting content from WSS to prevent sending requests for Web sites hosted on internal (RFC 1918) networks.
Consider using a DNS provider with a Service Level Agreement, or proven track record of providing DNS responses within a range of no longer than 50 milliseconds.
Note: In environments leveraging Cisco's Umbrellas DNS secure DNS esrvice, see Slow web browsing through Endpoint Protection Web Traffic Redirection with Cisco Umbrella DNS service