Welcome to ISAserver.org

3 bugs found so far in ISA 2004 Beta.

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> General >> 3 bugs found so far in ISA 2004 Beta.

Page: [1]

Message

<< Older Topic Newer Topic >>

3 bugs found so far in ISA 2004 Beta. - 21.Feb.2004 11:49:00 PM

penrose.l@2college.nl

Posts: 474
Joined: 29.Jan.2004
From: Netherlands
Status: offline

Hi ppl ,

I managed to find only 3 bugs in ISA 2K4 so far :

- Installation msi doesn't check for existing folders in C:\program files\ for instance Microsoft SQL Server folder. If any folder exists then installation will fail. Fix is to manually delete any folder that's related to ISA server and SQL MSDE before installing

- Exporting ISA settings to xml and importing these settings in another ISA server will generate duplicate Alerts. These appear as error msg's in the eventlog. Fix is to manually delete all duplicate alerts in alert configuration

- Major bug found in RPC filter disrupting NLB cluster functionality. I have been trying to build a 2004 cluster for some time now only to find that the only real solution is to disable to RPC filter before clustering the servers.

- Another possible bug can be found in the internal routing between NIC's in the ISA server. I am currently testing this setup. ( not an official bug yet )

All these issues have been reported to microsoft and they are working on the issues.
Wanted to let you guys know so you don't fall in the same problems "[Smile]"

Happy testing !

Lex Penrose

Post #: 1

Featured Links*

RE: 3 bugs found so far in ISA 2004 Beta. - 22.Feb.2004 7:06:00 PM

penrose.l@2college.nl

Posts: 474
Joined: 29.Jan.2004
From: Netherlands
Status: offline

Ok Msft is very quick on this one :

- Installation msi doesn't check for existing folders in C:\program files\ for instance Microsoft SQL Server folder. If any folder exists then installation will fail. Fix is to manually delete any folder that's related to ISA server and SQL MSDE before installing
====
Hi Lex,

Thanks for your input. We are aware of this issue which results in a problem
with MSDE uninstall procedure. We are considering a fix for this for the
final version of the product.
====

- Major bug found in RPC filter disrupting NLB cluster functionality. I have been trying to build a 2004 cluster for some time now only to find that the only real solution is to disable to RPC filter before clustering the servers.
====
This is a limitation in the beta version that was already fixed for RC.

The problem is with the system policy rule, "Allow access to AD" that allows
traffic from local host to internal. This rule contains RPC rule that blocks
DCOM traffic and the user can't configure it. To overcome this issue you can
diable the system policy rule and create the relevant access rule manually.
Than you can configure the rule to allow DCOM traffic.

Uri.
====

They haven't replied to the other issue though [Smile]

Kind regards,
Lex P.

(in reply to penrose.l@2college.nl)

Post #: 2

RE: 3 bugs found so far in ISA 2004 Beta. - 22.Feb.2004 8:08:00 PM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Lex,

Great info! I've noticed some serious problems with the RPC filter myself, such as not allowing you to use user/group based access policy for users on the VPN clients network. The authentication for users on the VPN clients network fails at random times, very odd, because the failures do not appear anywhere in the event logs, and only show up in the real time logging as "disallowed" based on the default rule.

I haven't even attempted NLB yet, because from what I've heard, its not "officially supported" on Standard Edition.

If you get it working, let us know the trick! I have some info on bidirectional affinity to help it work with ISA 2000, but it might not be required in ISA 2004.

Thanks!
Tom

(in reply to penrose.l@2college.nl)