ISA Server 2004

[krb548]

I have install ISA Server 2004 onto a Windows 2003 server.
I have been following Microsoft's help guides but I have failed to make the server talk with the LEA's proxy server.

Does anyone have any suggestions as to what I am doing wrong?

Any help would be appreciated, the old ISA server 2000 was eaiser to set up!

[Ric_]

May me doing this today or tomorrow so will post any oddities that I notice

[mrtechsystems]

I have you enter the proxy.core address in the upstream proxy

[krb548]

I have now managed to get it to go on the web, not sure what I did but at the moment it is working.

I have not applied any restrictions yet, I have that fun still to come.

[mrtechsystems]

Briilant nice to see you are up and runing

[krb548]

I spoke too soon.

I installed the service pack and now it won't see the upstream server.

Back to square one!

[mozzy]

ISA Server 2004 and Windows Server 2003 SP1 do not go well together. So ironically you should run ISA on a standard Windows 2003 box.

In terms of how to make the ISA use the county proxy, you need to go to Configuration | Networks. Select the web chaining tab and create a new web chaining rule. Give it a name; set the destination as External (under networks); Next choose to redirect requests to a specified upstream server (delegate credentials if you want - I do); fill in the server details and a logon if you need to; and then set to Retrieve requests directly from the specified destination when the primary route is unavailable.

I've not had any success when "Automatically polling the upstream server" as ISA appears to flood the server with requests, which sometimes means ISA turns itself off from the web so I don't use that one.

Another issue you may have regarding ISA not always connecting is that the External network connection must be connected before the ISA service (Microsoft Firewall) starts. If it becomes disconnected I have found the ISA service can disallow traffic to that card and a service restart is required.

[tarquel]

Small point but if you have a problem with a MS Service Pack, you can call for free support on the situation.

I dont know whether this is only relevent for OS SP's - XP, 2003, etc... and not Application Server SP's - but as you're on about Server 2003 SP1, you should call MS, explain the situation, and ask for support on it. They should give u it for free

Cheers guys
Nath

[mozzy]

Yeah true but the trouble is it's a known issue, as in MS know about it - just can't/won't fix it yet - so the advice is to keep the firewall patched but not service packed.

[tarquel]

gotcha - cool

[u never said MS knew about it or i wouldn't have mentioned it ]

Welcome to the forum

Nath

[mozzy]

noted, and thanks.

Just reading through the lists now I have some spare time ... a rare commodity in the IT world of Education as i'm sure we all know.

That said, if anyone has any ISA 2004 questions shout out, i've spent a little while digging through it and have a pretty tight ship going now.

[krb548]

I managed to get the ISA Server talking to the web last night before I went home. Came back in this morning and it had stopped talking to the upstream server again.

So I got totally pigged off with it and uninstalled it and started again.

I now have ISA up and running without service pack 1.
I am now in 2 minds whether to re-apply the service pack or not.

Not sure what to do, may just do it and see what happens, if it fails again I can re-install it again. This time I have also told ISA to create backups of the configuration files so I could re-load them at a later date if needed.

[mrtechsystems]

Sounds a daft question but has your LEA ISP been down in the last couple of days

[Ric_]

Keith, tell CLEO that you are having problems and they may open up the ICMP on your router - thus allowing you to ping the upstream proxy for testing purposes.

It may be that your connection has been dropping out.

[Ric_]

@Keith

Just finished the install of ISA 2004 with SP1 on a Windows Server 2003 Std box with SP1 installed.

At the moment I have only 2 rules, one for allow all web access (HTTP & HTTPS) plus one for deny all.

Since I am posting from one of my clients, it seems to be working OK :P

If you are still having probs, PM me your number and I will give you a bell!