Re: ISA Reboots Periodically (losing confidence quickly)

  • From: "Greg Mulholland" <greg_mul@xxxxxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 5 Jun 2003 09:41:00 +1000

Edward

I would steal such an appliance from work I think, yes

Greg

-----Original Message-----
From: Edward Sullivan [mailto:esullivan@xxxxxxx] 
Sent: Wednesday, June 04, 2003 11:36 PM
To: [ISAserver.org Discussion List]

http://www.ISAserver.org


Exactly, which was my point - the right tool for the right job. We don't
have a need for Exchange RPC publishing or SSL bridging, so that level of
flexibility isn't a benefit we gain from ISA. (We do host a few www
services, and to protect those we use eEye's SecureIIS.)

You know what I would LOVE to see, Tom? I don't know what your take on this
is, but why doesn't Microsoft work with someone like Dell or HP to make an
ISA appliance? Have it run just like ISA, but with compliant hardware built
to minimize hardware incompatibility issues. (Heck, stick it in a colorful
pizza box like the iPrism appliance or Google's search box to appease the
marketing folks.)

THERE's an idea to make someone lots of $$$. How many people on this list
would buy an ISA appliance? We use both Maxtor and Dell NAS appliances and I
love em. I would even consider getting an ISA appliance for reporting and
web-filtering if someone ever made one.

Ed Sullivan
Director of Information Technology
esullivan@xxxxxxx <mailto:esullivan@xxxxxxx> 
KMA Direct Communications
Confidential and Proprietary


-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Tuesday, June 03, 2003 7:39 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Reboots Periodically (losing confidence
quickly)


http://www.ISAserver.org


Hi Edward,

How are those NetScreen devices with Exchange RPC publishing and SSL
bridging? :-)

All products have their nitches. NetScreen can do layer 2 transparent
firewalling ISA can't. But NetScreen becomes swiss cheese or complely
blind when it comes to protecting Web services and email services.

Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 



-----Original Message-----
From: Edward Sullivan [mailto:esullivan@xxxxxxx] 
Sent: Tuesday, June 03, 2003 6:02 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Reboots Periodically (losing confidence
quickly)


http://www.ISAserver.org


"I really don't believe in dropping tons of cash on Internet Appliances,
when a PC running reasonably priced software *should* be able to manage
the task just as well."

"My server reboots itself on a random basis. I have been meaning to nuke
and pave the systems for a while , but lack the desire to spend 6 hrs
rebuilding it from the ground."

Our two NetScreen 50 firewalls secure the networks of our main and
sister location and provide VPN WAN to link our two sites.

The text below is copied from the web admin screen of one of the NS50's:

//Up 5260 hours 9 minutes 30 seconds since 2002-10-27 12:13:01//

The last time one of the NS50's was rebooted was for a scheduled outage
unrelated to the firewall. We paid $4850 for each in December of 2001.

I think ISA is great for specific environments and scenarios. Not every
office can afford to shell out 5K for a firewall. However, I have
minimal staff which handles help desk as well as network, os, telephony,
and development functions. I don't have time to mess around with
something as mission critical as our Internet access and network
security.

A 1 processor ISA license costs about $1200. Add a properly-equipped
server at say $1500, giving you a grand total of $2700, or half the cost
of a firewall appliance. At half the cost, you gain great flexibility,
reporting, and ease of use of use with ISA. If this is what you need,
and you have a small to medium size office, and the time and money to
spend supporting it, then ISA is great. In my case I don't have the
manpower to deal with problems like the ones that occur regularly in
ISA. What I spent on a firewall appliance I gain back over time in
support resources - time and money, and stability. 

(Also keep in mind that you don't own that $1200 piece of MS software.
You bought the license to use it, but you can't count it as an asset in
a sale, or ever sell it to anyone else. Just look back at the
Bluelight.com fiasco.)

This is only my two cents. Please don't flame me - I believe in the
RIGHT environment with the staff to support it, I think ISA wins hands
down. In other cases, something else is needed. It is up to you to chose
the right tool to get the job done for your environment.

Ed





-----Original Message-----
From: Mark Strangways [mailto:strangconst@xxxxxxxxxx]
Sent: Tuesday, June 03, 2003 5:15 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Reboots Periodically (losing confidence
quickly)


http://www.ISAserver.org


I have the issues you describe.
My server reboots itself on a random basis.
I have been meaning to nuke and pave the systems for a while , but lack
the
desire to spend 6 hrs rebuilding it from the ground.
I know my server requires some new drives, and this is what is likely
causing my servers stress.

If you can keep the server offline from the internet, try to run the
server
with ISA disabled.
You will "likely" find that it will reboot with out ISA running.
But you will have to use it as a server in some form to make sure it's
taxed.
Perhaps disable the web cache if you use it.

Regards,

Mark S
----- Original Message ----- 
From: "Mike-TechniSource" <mike@xxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, June 03, 2003 12:13 PM
Subject: [isalist] Re: ISA Reboots Periodically (losing confidence
quickly)


http://www.ISAserver.org


Hello All,

Thank you for all your quick replies.

All of the things you mention are valid points - and I will narrow it
down that way.  I guess I ruled some of the hardware issues out, due to
the server being an pre-existing server for some other critical services
previous to ISA being installed on there.  Still, ISA may be stressing
the server in a different way, than previously before.  Addressing
different memory locations, being ultra network intensive, etc.

Swapping the RAM is a wonderful idea - even know we never got any parity
errors, and so forth.

I appreciate your input - and also restoring my confidence in ISA Server
- as I really don't believe in dropping tons of cash on Internet
Appliances, when a PC running reasonably priced software *should* be
able to manage the task just as well (if not better).

Thanks!

Mike


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
esullivan@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
greg_mul@xxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



Other related posts: