RE: ISA Disaster Recovery design
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 8 Oct 2003 18:37:00 -0500
Hi Steve,
You can use NLB, but you're not going to find a solution to make up for
restarting the browser. However, given the fact that the Internet is
inherently unreliable, I never thought of this as a major problem.
Note that NLB and Web Proxy are not really two great tastes that taste
great together. NLB is useful for SecureNAT clients and I've got to work
well with Firewall clients, but if you want to fully utilize the CARP
mechanism, you gain nothing from NLB.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Gerzabek, S (Steve) [mailto:Steve.Gerzabek@xxxxxxxxxxxx]
Sent: Wednesday, October 08, 2003 5:43 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] ISA Disaster Recovery design
http://www.ISAserver.org
Hi all,
I'm hoping someone can assist me.
I am currently trying to design ISA to include a Disaster Recovery (DR)
server but am not sure what the best approach is. There are no books on
books24x7 that cover detailed ISA design nor can I find sufficient
information on the Internet.
My initial design has both servers in the same array. IE is configured
to load the configuration script from the main ISA server. In the lab
it works, however clients need to restart IE if the main server is
offline.
Requirements:
- two separate ISA servers (Win2k SP4, ISA SP1) - 1 in main office, 2nd
in DR location
- both servers must be in Integrated mode
- Automatic web proxy client failover - Internet Explorer must be able
to find the DR server automatically if the main server is offline.
- no third party software can be purchased (at this stage)
- clients will be web proxy clients. Firewall clients will be pointing
to a third ISA server.
- clients should only be using the main server unless the main server is
offline.
Additional Information:
- Link between main office and DR is 10Mbps
- Main office and DR can be in the same AD site
- Schema has been initialised and all Rules/Elements are created at
Enterprise level.
- There are domain controllers at the DR site.
- Clients are running XP SP1 with Internet Explorer 6 SP1.
- Separate ISP for each ISA server.
- Clients will be in multiple subnets distributed across the country.
Questions:
- Same Array or separate Arrays?
- How should IE be configured, discovery, script or pac file?
- Can this be achieved without third party software?
Regards,
Steve.
[INFO] -- Access Manager:
------------------------------------------------------------------------
-------------------------------------
This email (including any attachments to it) is confidential, legally
privileged, subject to copyright and is sent for the personal attention
of the intended recipient only. If you have received this email in
error, please advise us immediately and delete it. You are notified that
disclosing, copying, distributing or taking any action in reliance on
the contents of this information is strictly prohibited.Although we have
taken reasonable precautions to ensure no viruses are present in this
email, we cannot accept responsibility for any loss or damage arising
from the viruses in this email or attachments.We exclude any liability
for the content of this email, or for the consequences of any actions
taken on the basis of the information provided in this email or its
attachments, unless that information is subsequently confirmed in
writing. If this email contains an offer, that should be considered as
an invitation to treat.
------------------------------------------------------------------------
-------------------------------------
========================================================================
======
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
