RE: Policy takes so long to take effect

  • From: "Edward Sullivan" <esullivan@xxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 5 Mar 2003 07:50:03 -0600

Which is interesting when you consider that Raptor, one of the first firewall 
products ported to NT from Unix didn't require a restart for policy changes. 
Neither did another popular enterprise firewall from 1997 that the name escapes 
me...(I only implemented 5 of them , give me a bit I will remember the name....)

I think the real question is: Since many other software firewall products which 
run on Windows NT/2000 do not require a restart when policy changes are made, 
why does ISA require a restart when policy changes are made? If it is by 
design, then what was the thought process behind the design?

Ed Sullivan
IT Director
esullivan@xxxxxxx <mailto:esullivan@xxxxxxx> 
KMA Direct Communications
Confidential and Proprietary 



-----Original Message-----
From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx]
Sent: Tuesday, March 04, 2003 3:47 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Policy takes so long to take effect


http://www.ISAserver.org


That's by design, most changes require the restarting of services.

Steve

-----Original Message-----
From: Virgil Marcelo [mailto:vmarcelo@xxxxxxxxxxxxxxx] 
Sent: Tuesday, March 04, 2003 4:55 PM
To: Isa List
Subject: [isalist] Policy takes so long to take effect


http://www.ISAserver.org


Why is it that it takes ISA server so long to activate its access policy once a 
change is made. There were instances that we have to restart the services.

Pls. help

Thanks

Virgil Marcelo
IT Director
Arcadian Management Services



-----Original Message-----
From: Mennan ÖZTÜRK [mailto:mennanozturk@xxxxxxxxxxxxxxx]
Sent: Tuesday, March 04, 2003 12:39 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: sbs isa server


http://www.ISAserver.org


this problems occurs when your internet connection wizard (icw) isn't complete. 
first of all disable oyur ip packet filtering on your ISA. then try to connect 
internet on your server. you will connect at that time. but your packet 
filtering option is disable. so run 'start/run/icw ' to configure your ISA .


----- Original Message -----
From: "Amy Babinchak" <amy@xxxxxxxxxxxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, March 04, 2003 4:27 PM
Subject: [isalist] RE: sbs isa server


> http://www.ISAserver.org
>
>
> If you have installed the firewall client on the server, disable it. 
> The server does not need the firewall client.
>
> Amy Babinchak
>
>
> -----Original Message-----
> From: klymaxis@xxxxxxxxxxx [mailto:klymaxis@xxxxxxxxxxx]
> Sent: Tuesday, March 04, 2003 7:44 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] sbs isa server
>
> http://www.ISAserver.org
>
>
> I have install a SBS packet which includes Isa Server. In my SBS 
> server there is a modem which provides internet access to all the 
> clients, My problem is that although all the clients have internet 
> access through this modem and a program caled firewall client, the 
> server itself can not access.
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/ Windows 
> Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT 
> Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as: 
> amy@xxxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
> $subst('Email.Unsub')
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/ Windows 
> Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT 
> Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
mennanozturk@xxxxxxxxxxxxxxx
> To unsubscribe send a blank email to 
> $subst('Email.Unsub')
>


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/ Windows Security 
Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: 
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
vmarcelo@xxxxxxxxxxxxxxx To unsubscribe send a blank email to 
$subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/ Windows Security 
Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: 
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
esullivan@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: