Had the joy of getting a bunch of old ISA servers to SP3. Seems a pretty simple task until I looked in to it a bit closer. The server had over 90 rules and a lot of custom tweaks made with registry hacks. Anyhow, did my normal roll back tricks of backups, cloning and breaking [...]
Downloaded the public beta and popped it on to a test 2008 domain a few weeks ago. So far, it’s making me look forward to Forefront v2 and what ISA 2008 or Threat Management Gateway as it’s been called, offers.
Got stuck with a bunch of remote support work to do over the weekend, which gave me the time to read through some Ms papers and get the lab working. This is it so far. One happy Domain fully patched with Forefront happily sitting on all the machines and MOM agents all reporting in the [...]
While playing with a lab, I noticed the the ISA servers weren’t get the Patching goodness from the WSUS server. A quick check of the logs and I saw the some protocols being denied from the WSUS machine to the ISA’s themselves. Hmm. Too lazy to do the leg work myself, a quick bit of [...]
When you’re managing ISA servers with a large number of rules, it’s good to stop and review the rule set order. Have the simple allow All User rules and Publishing rules at the top moving down the more complex protocols and User authenticating at the bottom. This keeps everything humming along and avoid odd deny [...]
