RE: Win2003 ISA Install and Patches

  • From: "Mark Hippenstiel" <M.Hippenstiel@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 4 Dec 2003 21:21:52 +0100

Rick,

If you're interested in my 2ct., I think it's generally a wise idea to
install all the available updates/fixes/service packs. 

There's really no reason to leave one of the packs out. But from what I
know, FP1 is not a prerequisite for installing ISA on Win2k3, but SP1
is.

Cheers
Mark

> -----Original Message-----
> From: Kincer, Rick [mailto:Rick_Kincer@xxxxxxxxxx] 
> Posted At: Thursday, December 04, 2003 9:01 PM
> Posted To: www.isaserver.org
> Conversation: [isalist] Win2003 ISA Install and Patches
> Subject: [isalist] Win2003 ISA Install and Patches
> 
> 
> http://www.ISAserver.org
> 
> Tom,
> 
> I just need to clarify something, I read your article on 
> installing ISA on
> Windows 2003, thanks by the way, and I noticed you had 
> Feature pack 1 as
> needing to be installed, what do you think about installing 
> the list that MS
> has on the website: 
> http://www.microsoft.com/isaserver/downloads/, where
> they suggest installing the eight patches in the order 
> listed, I have pasted
> the list below. Do you think these all should still be done, 
> in order or
> not, on a Windows 2003 install?
> 
> Thank you!!
> 
> Rick
> 
> 1) ISA Server 2000 Service Pack 1
> Install ISA Server Service Pack 1 (SP1) to address specific 
> issues that have
> been discovered in ISA Server since its ship date.
> Note: SP1 does not install on the ISA Server 120-day trial software.
> Released February, 2002   
> 
>   2) ISA Server 2000 Hotfix for Rules Engine and Potential 
> Web Proxy Service
> Crash
> Install this hotfix to make sure that some internal users 
> cannot access
> blocked Internet sites and to prevent the potential for a Web 
> Proxy service
> crash.
> Released April, 2002   
> 
>   3) ISA Server 2000 Security Patch for Unchecked Buffer in 
> Gopher Protocol
> Handler
> Get information from Microsoft TechNet about an unchecked 
> buffer in the
> Gopher protocol handler in ISA Server, and download the patch 
> to remove the
> vulnerability.
> Released June, 2002   
> 
>   4) ISA Server 2000 Feature Pack 1
> Visit the Microsoft Download Center to download Feature Pack 1.
> Released January, 2003   
> 
>   5) ISA Server 2000 Security Patch for DNS Intrusion Detection Filter
> Download this patch for ISA Server to prevent a potential 
> denial of service
> when publishing a DNS server.
> Released March, 2003   
> 
>   6) ISA Server 2000 Security Patch for Firewall Service
> Download this patch for the Firewall Service to prevent a 
> potential denial
> of service when handling responses from remote clients.
> Released April, 2003   
> 
>   7) ISA Server 2000 Required Updates for Windows Server 2003
> Visit the Download Center to download updates required for 
> ISA Server to
> function properly on computers running Windows Server(tm) 2003.
> Released April, 2003   
> 
>   8) ISA Server 2000 Security Update for Error Pages
> A security issue identified in ISA Server 2000 could allow an 
> attacker to
> execute a cross-site scripting attack. Help protect your 
> organization by
> installing this update.
> Released July, 2003   
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: isaserver@xxxxxxxxxxxx
> To unsubscribe send a blank email to 
> $subst('Email.Unsub')
> 


Other related posts: