RE: Policy takes so long to take effect

Hi Edward,

But you don't have to restart when:

You create a Web Publishing Rule
You create a Server Publishing Rule
You create a Site and Content Rule
You create a Protocol Rule
You create a packet filter
You create a Web Routing Rule
You create a Bandwidth Rule
You create Report Job
...and lots more :-)

HTH,
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 
 


-----Original Message-----
From: Edward Sullivan [mailto:esullivan@xxxxxxx] 
Sent: Thursday, March 06, 2003 11:24 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Policy takes so long to take effect


http://www.ISAserver.org


Guardian by ANR, that was the other software firewall we ran on NT 4.0 server. 
Great product, very secure and policy-based enterprise firewall product that 
did not require a restart, ever. An ex-coworker at my former company states 
that they like it so much they still use it today!

I am not bashing ISA, like Virgil I just want to know the reason why ISA 
requires a restart everytime a policy change is made.

Ed Sullivan
IT Director
esullivan@xxxxxxx <mailto:esullivan@xxxxxxx> 
KMA Direct Communications
Confidential and Proprietary 




-----Original Message-----
From: Virgil Marcelo [mailto:vmarcelo@xxxxxxxxxxxxxxx]
Sent: Thursday, March 06, 2003 11:04 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Policy takes so long to take effect


Edward,

Well said, so any idea how to fix this

Pls. let me know

Take Care

Virgil Marcelo
IT Director
Arcadian Management Services



-----Original Message-----
From: Edward Sullivan [mailto:esullivan@xxxxxxx]
Sent: Wednesday, March 05, 2003 5:50 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Policy takes so long to take effect


http://www.ISAserver.org


Which is interesting when you consider that Raptor, one of the first firewall 
products ported to NT from Unix didn't require a restart for policy changes. 
Neither did another popular enterprise firewall from 1997 that the name escapes 
me...(I only implemented 5 of them , give me a bit I will remember the name....)

I think the real question is: Since many other software firewall products which 
run on Windows NT/2000 do not require a restart when policy changes are made, 
why does ISA require a restart when policy changes are made? If it is by 
design, then what was the thought process behind the design?

Ed Sullivan
IT Director
esullivan@xxxxxxx <mailto:esullivan@xxxxxxx> 
KMA Direct Communications
Confidential and Proprietary 



-----Original Message-----
From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx]
Sent: Tuesday, March 04, 2003 3:47 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Policy takes so long to take effect


http://www.ISAserver.org


That's by design, most changes require the restarting of services.

Steve

-----Original Message-----
From: Virgil Marcelo [mailto:vmarcelo@xxxxxxxxxxxxxxx] 
Sent: Tuesday, March 04, 2003 4:55 PM
To: Isa List
Subject: [isalist] Policy takes so long to take effect


http://www.ISAserver.org


Why is it that it takes ISA server so long to activate its access policy once a 
change is made. There were instances that we have to restart the services.

Pls. help

Thanks

Virgil Marcelo
IT Director
Arcadian Management Services



-----Original Message-----
From: Mennan ÖZTÜRK [mailto:mennanozturk@xxxxxxxxxxxxxxx]
Sent: Tuesday, March 04, 2003 12:39 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: sbs isa server


http://www.ISAserver.org


this problems occurs when your internet connection wizard (icw) isn't complete. 
first of all disable oyur ip packet filtering on your ISA. then try to connect 
internet on your server. you will connect at that time. but your packet 
filtering option is disable. so run 'start/run/icw ' to configure your ISA .


----- Original Message -----
From: "Amy Babinchak" <amy@xxxxxxxxxxxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, March 04, 2003 4:27 PM
Subject: [isalist] RE: sbs isa server


> http://www.ISAserver.org
>
>
> If you have installed the firewall client on the server, disable it. 
> The server does not need the firewall client.
>
> Amy Babinchak
>
>
> -----Original Message-----
> From: klymaxis@xxxxxxxxxxx [mailto:klymaxis@xxxxxxxxxxx]
> Sent: Tuesday, March 04, 2003 7:44 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] sbs isa server
>
> http://www.ISAserver.org
>
>
> I have install a SBS packet which includes Isa Server. In my SBS 
> server there is a modem which provides internet access to all the 
> clients, My problem is that although all the clients have internet 
> access through this modem and a program caled firewall client, the 
> server itself can not access.
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/ Windows 
> Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT 
> Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as: 
> amy@xxxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
> $subst('Email.Unsub')
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/ Windows 
> Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT 
> Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
mennanozturk@xxxxxxxxxxxxxxx
> To unsubscribe send a blank email to 
> $subst('Email.Unsub')
>


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/ Windows Security 
Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: 
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
vmarcelo@xxxxxxxxxxxxxxx To unsubscribe send a blank email to 
$subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/ Windows Security 
Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: 
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
esullivan@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
vmarcelo@xxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

Other related posts: