• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA 2006 ee CSS installation

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> Installation and Planning >> ISA 2006 ee CSS installation Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA 2006 ee CSS installation - 17.Jan.2007 11:00:11 PM   
brittanyl

 

Posts: 7
Joined: 17.Dec.2006
Status: offline
Hi

I am newbie in ISA. I have to install ISA 2006 Enterprise in 2 different servers with 3 NICs each but i need to install CSS first rite?

My problem when i install CSS :  I am installing the CSS in a different server from the ISA server. Not in DC and not in ISA server itself. Is this ok?

From my understanding, the CSS stores all the firewall policies of the 2 ISA servers which each ISA server will have their copy at the local server, therefore if CSS server fail. Can the 2 ISA server still perform?

Please advise. Many thanks.

Best Regards,
Brittany
Post #: 1
RE: ISA 2006 ee CSS installation - 18.Jan.2007 12:12:34 AM   
ClintD

 

Posts: 1848
Joined: 26.Jan.2001
From: Keller, TX
Status: offline
quote:

I am newbie in ISA. I have to install ISA 2006 Enterprise in 2 different servers with 3 NICs each but i need to install CSS first rite?


quote:

My problem when i install CSS :  I am installing the CSS in a different server from the ISA server. Not in DC and not in ISA server itself. Is this ok?



Since you are installing it on a different server than the ISA Servers, then yes, you'll need to install the CSS first. It is fine to install it on another server (non-DC and non-ISA Server) - just make sure that server is a domain member.

quote:

From my understanding, the CSS stores all the firewall policies of the 2 ISA servers which each ISA server will have their copy at the local server, therefore if CSS server fail. Can the 2 ISA server still perform?


Yes - ISA keeps a copy of the policy cached in the registry in case the CSS is unavailable. There's a time limit to how long the policy is 'good', but I can't recall how long it is.

Once you install ISA and it has contacted the CSS, you can see the local copies by going into REGEDT32 and looking under HKEY_LOCAL_MACHINE - you'll see about 4-5 new subkeys in there that are specific to ISA.

Like this...
HKLM\Isastg_Eff1
HKLM\Isastg_Eff1Policy
HKLM\Isastg_Eff1Prot
HKLM\Isastg_Eff2
HKLM\Isastg_Eff2Policy
HKLM\Isastg_Eff2Prot

< Message edited by ClintD -- 18.Jan.2007 12:14:23 AM >

(in reply to brittanyl)
Post #: 2
RE: ISA 2006 ee CSS installation - 21.Jan.2007 11:42:05 PM   
brittanyl

 

Posts: 7
Joined: 17.Dec.2006
Status: offline
Thanks ClintD,

Intially i planned to installed Configuration Storage Server in one of the domain member but due to no domain member available to install the CSS, can i install the CSS into domain controller? Is this advisible?

I have went through the isaserver.org.. most of the articles shows only installing CSS in domain member.. i wonder will the configuration will be the same?

Thanks.



(in reply to ClintD)
Post #: 3
RE: ISA 2006 ee CSS installation - 22.Jan.2007 2:50:40 AM   
brittanyl

 

Posts: 7
Joined: 17.Dec.2006
Status: offline
Hi there,

I wonder the below scenario advisable?

Will be installing CSS into DC. Then ISA array services will be installed on 2 different standalone server.

Thanks.

(in reply to brittanyl)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> Installation and Planning >> ISA 2006 ee CSS installation Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts