I noticed when I put in Exchange 2010 that if the box doesn't have internet access some things take a long time whilst CRL checks time out. I've been looking at locking down our firewall to the URL's ...