Re: ISA Reboots Periodically (losing confidence quickly)

  • From: "Edward Sullivan" <esullivan@xxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 3 Jun 2003 18:02:08 -0500

"I really don't believe in dropping tons of cash on Internet Appliances, when a 
PC running reasonably priced software *should* be able to manage the task just 
as well."

"My server reboots itself on a random basis. I have been meaning to nuke and 
pave the systems for a while , but lack the desire to spend 6 hrs rebuilding it 
from the ground."

Our two NetScreen 50 firewalls secure the networks of our main and sister 
location and provide VPN WAN to link our two sites.

The text below is copied from the web admin screen of one of the NS50's:

//Up 5260 hours 9 minutes 30 seconds since 2002-10-27 12:13:01//

The last time one of the NS50's was rebooted was for a scheduled outage 
unrelated to the firewall. We paid $4850 for each in December of 2001.

I think ISA is great for specific environments and scenarios. Not every office 
can afford to shell out 5K for a firewall. However, I have minimal staff which 
handles help desk as well as network, os, telephony, and development functions. 
I don't have time to mess around with something as mission critical as our 
Internet access and network security.

A 1 processor ISA license costs about $1200. Add a properly-equipped server at 
say $1500, giving you a grand total of $2700, or half the cost of a firewall 
appliance. At half the cost, you gain great flexibility, reporting, and ease of 
use of use with ISA. If this is what you need, and you have a small to medium 
size office, and the time and money to spend supporting it, then ISA is great. 
In my case I don't have the manpower to deal with problems like the ones that 
occur regularly in ISA. What I spent on a firewall appliance I gain back over 
time in support resources - time and money, and stability. 

(Also keep in mind that you don't own that $1200 piece of MS software. You 
bought the license to use it, but you can't count it as an asset in a sale, or 
ever sell it to anyone else. Just look back at the Bluelight.com fiasco.)

This is only my two cents. Please don't flame me - I believe in the RIGHT 
environment with the staff to support it, I think ISA wins hands down. In other 
cases, something else is needed. It is up to you to chose the right tool to get 
the job done for your environment.

Ed





-----Original Message-----
From: Mark Strangways [mailto:strangconst@xxxxxxxxxx]
Sent: Tuesday, June 03, 2003 5:15 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Reboots Periodically (losing confidence
quickly)


http://www.ISAserver.org


I have the issues you describe.
My server reboots itself on a random basis.
I have been meaning to nuke and pave the systems for a while , but lack the
desire to spend 6 hrs rebuilding it from the ground.
I know my server requires some new drives, and this is what is likely
causing my servers stress.

If you can keep the server offline from the internet, try to run the server
with ISA disabled.
You will "likely" find that it will reboot with out ISA running.
But you will have to use it as a server in some form to make sure it's
taxed.
Perhaps disable the web cache if you use it.

Regards,

Mark S
----- Original Message ----- 
From: "Mike-TechniSource" <mike@xxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, June 03, 2003 12:13 PM
Subject: [isalist] Re: ISA Reboots Periodically (losing confidence quickly)


http://www.ISAserver.org


Hello All,

Thank you for all your quick replies.

All of the things you mention are valid points - and I will narrow it
down that way.  I guess I ruled some of the hardware issues out, due to
the server being an pre-existing server for some other critical services
previous to ISA being installed on there.  Still, ISA may be stressing
the server in a different way, than previously before.  Addressing
different memory locations, being ultra network intensive, etc.

Swapping the RAM is a wonderful idea - even know we never got any parity
errors, and so forth.

I appreciate your input - and also restoring my confidence in ISA Server
- as I really don't believe in dropping tons of cash on Internet
Appliances, when a PC running reasonably priced software *should* be
able to manage the task just as well (if not better).

Thanks!

Mike



Other related posts: