[isalist] Re: Welcome to your NEW ISA Firewall

  • From: Jim Harrison <Jim@xxxxxxxxxxxx>
  • To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 3 Jul 2008 20:13:29 -0700

http://www.ISAserver.org
-------------------------------------------------------

http://support.microsoft.com/kb/885957 will soon be updated to include this:

"Staged updates"

In large enterprises you may not be able to install updates simultaneously on 
all ISA Server computers. In this case, we recommend that you install updates 
in the following order:
1. On each computer running the ISA Server Management console (for remote 
management).
2. On each Configuration Storage server.
3. As required, run the upgrade separately on each server within an array and 
repeat for all arrays. To maintain availability, do the following on each ISA 
Server computer:
    a) If the server is load-balanced using NLB or any other load-balancing 
mechanism, remove it from the load-balancing configuration.
    b) Drain existing connections served by the server.
    c) Set nlb to "suspended" to prevent auto-rejoin on reboot
    d) Install the update.
    e) Perform additional steps as required by the update package.
    f) Reboot the server if required
    g) Start NLB on the updated server

Important
After installing an update on the remote management console or Configuration 
Storage server, the following state applies:
* The update does not affect remotely managed ISA Server computers or array 
members that do not yet have the update installed.
* Features provided by the update may only be partially functional, as follows:
    - Features that do not require a change on the ISA Server computer will 
work as expected. For example, policy changes made at the remote management 
computer will affect all members of the array.
    - Features that require a change on the ISA Server computer will not be 
functional. For example, ISA Server 2006 SP1 provides a test button feature to 
verify Web publishing settings. This feature will not be available on array 
members that are not running SP1.

If an update is not installed on all array members, only servers running the 
update can provide the update features. As client requests are balanced between 
array members, clients cannot benefit from changed behavior if a request is 
served by an array member that does not have the update installed.

Jim

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Bruce Lautenschlager
Sent: Thursday, July 03, 2008 8:54 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Welcome to your NEW ISA Firewall

http://www.ISAserver.org
-------------------------------------------------------

Thanks for the link. Dumb question, but in my ISA 2006EE setup (3 servers,
one CSS, two ISA array members), to which should I apply the SP first - the
CSS or one of the array members? I would think the CSS...

Bruce

--------------------------------------------------
From: "Greg Mulholland" <greg@xxxxxxxxxxxxxx>
Sent: Thursday, July 03, 2008 5:46 AM
To: "ISA Mailing List" <isalist@xxxxxxxxxxxxx>
Subject: [isalist] Re: Welcome to your NEW ISA Firewall

> http://www.ISAserver.org
> -------------------------------------------------------
>
> had a chance to do this last night. worked a treat Jim fwiw.. thanks
>
> ________________________________________
> From: isalist-bounce@xxxxxxxxxxxxx [isalist-bounce@xxxxxxxxxxxxx] On
> Behalf Of Jim Harrison [Jim@xxxxxxxxxxxx]
> Sent: Thursday, 3 July 2008 12:32 PM
> To: ISA Mailing List
> Subject: [isalist] Re: Welcome to your NEW ISA Firewall
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Yep - it's a pretty sweet trip.
>
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Thomas W Shinder
> Sent: Wednesday, July 02, 2008 5:17 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Welcome to your NEW ISA Firewall
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> http://www.microsoft.com/downloads/details.aspx?FamilyID=d2feca6d-81d7-4
> 30a-9b2d-b070a5f6ae50&DisplayLang=en
>
> HTH,
> Tom
>
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://blogs.isaserver.org/shinder/
> Book: http://tinyurl.com/3xqb7
> MVP -- Microsoft Firewalls (ISA)
>
>
>> -----Original Message-----
>> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
>> Jim Harrison
>> Sent: Wednesday, July 02, 2008 1:58 PM
>> To: [ISAserver Discussion List]
>> Subject: [isalist] New ISA 2006 publishing article on TechNet
>>
>> http://www.ISAserver.org
>> -------------------------------------------------------
>>
>> http://technet.microsoft.com/en-us/library/cc707697(TechNet.10).aspx
>>
>> Thanx to Jason Jones for the inspiration and Jason & Tom Shinder for
> the proofing
>> efforts.
>> ------------------------------------------------------
>> List Archives: //www.freelists.org/archives/isalist/
>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
>> ISA Server Blogs: http://blogs.isaserver.org/
>> ------------------------------------------------------
>> Visit TechGenix.com for more information about our other sites:
>> http://www.techgenix.com
>> ------------------------------------------------------
>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>> Report abuse to listadmin@xxxxxxxxxxxxx
>>
>
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: