ACL on SG300-52 Manageable Switch

[it]

I need someone's advise regarding in configuration of ACL(Access List) in
SG300-52 smb switch.

The switch was configured to Layer 3 and has multiple vlans accessing the
internet and the server group. Also I made an interface vlan ip address so
that by dafault all vlan groups are routebale. And the internet connection is
comming from firewall by means of default route created from default vlan 1.

The problem is the Access List binding, wherein it is making the network slow
and for sometime it blocks the internet comming from the firewall.

My Access List is configured to Permit only Internet Access, Only one Website
access and Server VLAN while the rest are denied all.

ACL Sample:

192.168.0.254 -Interface VLAN IP of Default Route to Firewall(Internet
Connection)

192.168.10.0 - Network Address of intended users

192.168.20.0 - Network Address of Server

213.42.20.20 - ISP DNS Server

194.170.213.1 - Only Allowed Website Access

Deny ALL.

[Philip D'Ath]

To be clear, you enter the URL intot he web browser and hit return, and it takes a long time before the web site starts loading?

Or the web site starts loading in a reasonable amount of time, but loads very slowly.

[it]

P.dath,  thank you for your reply.

Yes, the website starts loading for reasonable time but it loads very slowly. Also the route to the erp server vlan is sometimes disconnecting.

The users route to server is through interface vlan and DNS ip address users TCP\IP. 

Thanks.

[Philip D'Ath · Accepted solution]

What is the web site?

I'm going to guess it loads components off other web sites, and you are having to wait for it to time out.

[it]

Yes that is true. Also I want to immediately to show the connection error in the webpage if users wants to browse in other websites. Becuase it keeps on loading the page even though it is denied already in ACL.

Is my ACL configuration is correct? What is the best priority arrangement do you suggest. Is it permit to interface vlan first or otherways?