Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
Faze Out ISA 2006 for appliance problems
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
Faze Out ISA 2006 for appliance problems - 4.Jun.2008 12:23:10 PM
|
|
|
jrollison
Posts: 13
Joined: 9.Jan.2007
Status: offline
|
In our environment we have a 2006 isa server. We are replacing this hardware with a sonicwall NSA appliance.
I got the NSA appliance configured and setup and the whole company is using the new NSA box.
The only problem that exists now is I want to disable the ISA services on the now OLD ISA server. I want to just keep it in place for now for a backup incase we need it before uninstalling ISA.
When I disable the services on the server here are the problems
1.)I cant ping the server
2.)Cant RDP to the server and no one can connect to the server unless the ISA services are running b/c we have some other internal programs running on this server.
When switching over the ISA server I disabled the external network card so there would be no internet access for ISA to get out with. It the next day or so I will team/bridge the two NIC's together for faster internal traffic to the server for the other programs running.
What is going on here? With the ISA services disabled. Wouldnt it just function as a regular server on the internal LAN?
Any information would be appriciated.
Regards,
|
|
|
|
RE: Faze Out ISA 2006 for appliance problems - 4.Jun.2008 12:36:51 PM
|
|
|
Jason Jones
Posts: 2154
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
|
ISA is a firewall, if you stop the firewall service, it is still a firewall and will block traffic.
The only way to prevent this is to uninstall ISA and remove the kernel level firewall driver. If you export the conifg, you can then reinstall ISA and import the config, this is pretty easy if the server otherwise remains unchanged.
Out of interest, why the move from ISA to NSA?
_____________________________
Jason Jones (MVP)
Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/
Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
|
|
|
|
|
RE: Faze Out ISA 2006 for appliance problems - 4.Jun.2008 12:39:59 PM
|
|
|
jrollison
Posts: 13
Joined: 9.Jan.2007
Status: offline
|
I love ISA. It was a choice made by our CIO to change it out.
|
|
|
|
|
RE: Faze Out ISA 2006 for appliance problems - 4.Jun.2008 12:41:25 PM
|
|
|
jrollison
Posts: 13
Joined: 9.Jan.2007
Status: offline
|
I didnt mean to double post. When I typed up the first post when I hit OK to post it gave me a error page. So I figured it didnt post.
Sorry about that.
|
|
|
|
|
RE: Faze Out ISA 2006 for appliance problems - 4.Jun.2008 12:55:59 PM
|
|
|
jrollison
Posts: 13
Joined: 9.Jan.2007
Status: offline
|
We have other sonicwall equiptment throughout our group of company's so I'm familiar with the configuration of the TZ series and NSA appliances already. But I perfer ISA.
|
|
|
|
|
RE: Faze Out ISA 2006 for appliance problems - 4.Jun.2008 1:05:21 PM
|
|
|
jrollison
Posts: 13
Joined: 9.Jan.2007
Status: offline
|
Here is a question. When I export the settings. Should I
1.)Export from the server level? or from the firwall policy level?
I want to be sure I have everything saved just incase I need to re-install at a later time. I'm assuming the server level but just want to double check.
Regards,
|
|
|
|
|
RE: Faze Out ISA 2006 for appliance problems - 5.Jun.2008 1:48:42 PM
|
|
|
paulo.oliveira
Posts: 835
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: online
|
Hi,
you´re rigth. You have to export on the server level where says "Export (backup)". If you export on the firewall policy level, you are exporting only the firewall policies and no other configuration.
PS: You must check the box "Export Confidencial information" and "Export user permission settings" to full backup your ISA.
Regards.
|
|
|
|
|
RE: Faze Out ISA 2006 for appliance problems - 5.Jun.2008 3:11:42 PM
|
|
|
jrollison
Posts: 13
Joined: 9.Jan.2007
Status: offline
|
Yep I did that last night with all configuration data and uninstalled ISA from the server last night. All seems to be well and the NSA appliance seems to be doing the job minus the odd issue popping up here and there that gets resloved at that time.
Regards,
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
