Sorry, mistake: "If SBS can have a DC, Exchange, and ISA on the same box, why can't I?" Should read : "If SBS can have a DC, Exchange, and ISA on the same box, why can't I do it on a full blown ISA and Exchange config?" Yes.. I've gone through this conversation... *very* difficult fight... (even *with* consultants). K -----Original Message----- From: Kenny Mann Sent: Thursday, March 24, 2005 4:06 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: OT: Consultant/Admin Rant http://www.ISAserver.org <two cents> "It's easy" Easy is always relative. To a PHB, easy means any stupid person can do it, so hire the cheapest computer tech you can. Maintain? Huh? It also makes the PHB think "If SBS can have a DC, Exchange, and ISA on the same box, why can't I? No no, just a condensed version of that book please, in a paragraph." To me , it means quick to learn and any problems should be fairly easy to figure out. (I would not have guessed that I had to add a protocol definition to allow connection even though person X has unrestricted IP access. Maybe I'm just stupid...) </two cents> Well, this is my last email for the day. Everyone have a great weekend and a happy Easter! Kenny -----Original Message----- From: Amy Babinchak [mailto:amy@xxxxxxxxxxxxxxxxxxxxxxxxxx] Sent: Thursday, March 24, 2005 3:34 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: OT: Consultant/Admin Rant http://www.ISAserver.org I agree with you on that point. It's the old give them an inch and they'll take a mile problem. The most recent sales pitch for SBS was "you can install it in 15 minutes and it runs your whole business! It's easy" or something very similar to that. To their credit one guy brought this up as a problem and it was met with thunderous applause. So this problem is understood. The SBS worldwide marketing guy that was presenting said he heard the message loud and clear and promised that "easy" would not appear in any future product marketing. They are beginning to make efforts to direct people to MS Partners and there is a new small business partner level coming soon. It's going to sit between Registered and Certified as I understand it. Amy Harbor Computer Services Small Business Computer Specialists Client Blog: http://smalltechnotes.blogspot.com/ Tech Blog: http://isainsbs.blogspot.com/ Help: http://helpdesk.harborcomputerservices.net/ Website: http://www.harborcomputerservices.net/ -----Original Message----- From: Danny [mailto:nocmonkey@xxxxxxxxx] Sent: Thursday, March 24, 2005 4:18 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: OT: Consultant/Admin Rant http://www.ISAserver.org (John Tolmachoff from the MS Exchange invited us to this discussion, so I am new to this list) I agree with what you say for the most part, Amy, but ... In my opinion, wizards that configure otherwise complex systems (software) invite unqualified people to do things that they otherwise would not be capable of doing. Software configuration wizards do not have a good image in the IT industry from a knowledge gain and future troubleshooting perspective. Maybe these unqualified SBS consultants would learn more if all these wizards weren't available; most people are lazy by nature. Easier to configure software, specifically wizards, equals more sales for Microsoft, so I can see why the wizards are present in SBS. ...D On Thu, 24 Mar 2005 15:44:14 -0500, Amy Babinchak <amy@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote: > http://www.ISAserver.org > > > > ISA and Exchange are the pieces of SBS that aren't point and click. I see > just as many idle Exchange servers as ISA Servers. Too many people enter > this biz without the necessary skills. Zone Alarm...don't get me started. If > PSS isn't jiggy on SBS/ISA then they had better get with it. This is the > fourth generation of SBS after all. There's some cool stuff in SBS that even > you, Tom, would get a kick out of but you have to get past the .local bias. > > > > Jim et al. have done wonderful things wizardizing the setup of SBS. No > matter how simple you make it though someone will manage to screw it up. The > "big" network guys screw it up by applying what they think they know and not > using the wizards and the rest can't find their head without the help of a > wizard. I like wizards they make mundane tasks easy. They can make complex > tasks simple because it usually turns out that the task that appears complex > isn't, it just requires a whole bunch of tiny steps to accomplish. But they > aren't going to handle every situation. > > > > Yes, SBS gets slammed on this list. But it's getting friendlier here. The > problem is that because SBS is different in it's configuration that SBSers > that stray from the SBS specific sites end up getting bad advice and don't > know it. The SBS product has some really good things going for it and some > of these are actually going to be moving up the food chain. I'll think that > we'll come to live in harmony eventually. But Microsoft's big push to get > more and more and more and more people pushing SBS is bringing a large > number of unqualified <your favorite derogatory term here> into the field. > > > > Understanding networking is a battle no matter what product you use. I had a > client call today. No Internet access. Internal network is fine. They called > SBC. SBC tech told him that there was a problem with the network > configuration because the Gateway was blank on the NIC and therefore there > was no way that it could have ever worked. Fortunately this customer has > been with me long enough that he knew to hang up at that point and call me. > > > > > Amy > > > > Harbor Computer Services > > Small Business Computer Specialists > > > > Office (248) 546-6056 > > Mobile (248) 890-1794 > > > > Client Blog: http://smalltechnotes.blogspot.com/ > > Tech Blog: http://isainsbs.blogspot.com/ > > Help: http://helpdesk.harborcomputerservices.net/ > > Website: http://www.harborcomputerservices.net/ > > > > Hi Amy, > > No problem with that. I understand your experience, and I see this all the > time myself. > > > > My analysis is that people in the SBS space don't care for ISA because there > really isn't any good guidance for it. In order to get it to work right on > an SBS box, the SBS and ISA guys (like Jim) have to work long, hard, hours > to break ISA's fundamental design goal of that of a network firewall. They > have to make a lot of compromises and tweaks to turn ISA into a mixture of > host-based firewall and networkf firewall, which even if some PM told they > ISA dev team that is what they needed to do, the end result was that they > created a enterprise ready network firewall and let the lab guys figure out > how to munge it into ZoneAlarm for SBS :) > > > > From conversations that I've had with a number of folks in difference places > and spaces, the key issues are: > > > > * SBS PSS isn't too jiggy on the ISA/SBS combo > > * They tell people to go to www.isaserver.org for help > > * There's almost nothing there on www.isaserver.org re: SBS because you're > the only one who has contributed relevant content in this area > > * The SBS customers go to the www.isaserver.org Web boards and get nailed to > the wall for co-lo'ing ISA on a DC/Exchange Server > > * The SBS customers get sad and mad because they were told to go to > www.isaserver.org and then assailed by the crowd > > * There is no SBS design doc on what was done with SBS to make it work with > the various ISA sceanrios and how they Wizes deviate from general network > security best practices > > * And all the other things ... :) > > > > I'm not much help because I don't know much about how SBS does things, and I > don't even work in spaces where its deployed. My expereinces with just > installing SBS 2003 and not letting me set things up "correctly" out of the > box, in terms of network settings, had me frothing at the mouth. Just at > Debi :-)) > > > > Thanks! > > Tom > > > > http://www.ISAserver.org > > I don't have anywhere else for this, so sorry Tom but I've got to hijack for > minute. I don't think that I've ever done this before but since attending > the SBS Users Group Tour last night I've been in such a state that I didn't > sleep very well. I'm a member of the local group and we're generally a small > (30-ish) bunch of knowledgeable people but this event was different. What's > keeping me up at night? The sorry state of ISA knowledge among people > calling themselves small business consultants. I handed out all the business > cards I had after I scrawled my ISA blog address on the back of them to > these sorry souls. Unfortunately I didn't have very many with me. Imagine > their surprise when (gasp) a women came to them with the answers they were > looking for. All I got back was st..st..stunned, ugh thanks. What kind of > self respecting consultant raises his hand in front of a crowd of 130 and > says I had so much trouble with my SBS install that I had to call business > down critical support to install it from the Action Pack?? Good God!!! The > whole purpose of the Action Pack is so you can learn the product not take up > the valuable time of Business Down Critical Support! Why didn't they hang up > on you? Then there was the guy that asked why Microsoft wasn't helping him > learn ISA and how there isn't any information available anywhere and the two > behind me that went on and on all night about how ISA is only good for > simple things and the ones in front of me that spent the night trashing the > product too. I was in ISA heck and it was killing me to have to sit there > quietly. When the presenters asked if there were any MVP's in the room, > there were none. There's a huge gap here that needs to be filled. These guys > are scaring me. If you run into any of them please send them over to my > blog. If it doesn't have what they are looking for have them contact me and > I'll get them what they need. I don't want to be sitting in the same room > with these kind of guys ever again. > > > > > Amy > > > > Harbor Computer Services > > Small Business Computer Specialists > > > > ------------------------------------------------------ > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > World of Windows Networking: http://www.windowsnetworking.com Leading > Network Software Directory: http://www.serverfiles.com > No.1 Exchange Server Resource Site: http://www.msexchange.org Windows > Security Resource Site: http://www.windowsecurity.com/ Network > Security Library: http://www.secinf.net/ Windows 2000/NT Fax > Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > nocmonkey@xxxxxxxxx > To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist > Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: amy@xxxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: kennymann@xxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: kennymann@xxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx