Welcome to ISAserver.org

ISA 2007 sightings

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> General >> ISA 2007 sightings

Page: [1]

Message

<< Older Topic Newer Topic >>

ISA 2007 sightings - 17.Jun.2006 5:30:17 PM

denizyalcin

Posts: 122
Joined: 19.Jan.2005
From: Turkey
Status: offline

I couldn't find any suitable thread to put this in. The roadmap for MS' Forefront initiative gives a little hint for the next version of ISA server. Here is the link : http://www.microsoft.com/library/media/1033/forefront/graphics/spot/70020_700x524_RoadMap_F.jpg
Look at the bottom-right corner.

Post #: 1

Featured Links*

RE: ISA 2007 sightings - 17.Jun.2006 6:23:02 PM

JesseA

Posts: 51
Joined: 15.Aug.2002
Status: offline

Very interesting, but where is this from? Have you link to article that contains and describes this image?

(in reply to denizyalcin)

Post #: 2

RE: ISA 2007 sightings - 17.Jun.2006 7:08:40 PM

elmajdal

Posts: 5060
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

check this : http://www.microsoft.com/forefront/2006/prodinfo/overview.mspx

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to JesseA)

Post #: 3

RE: ISA 2007 sightings - 19.Jun.2006 9:07:24 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hey guys,

Yes, the next version will be ISA 2007. Expect a BIG rewrite and many signifcant improvements. PIX and Check Point are going to cry :)

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to elmajdal)

Post #: 4

RE: ISA 2007 sightings - 19.Jun.2006 9:14:28 PM

JesseA

Posts: 51
Joined: 15.Aug.2002
Status: offline

Tom, do you have information what BIG improvements will be in ISA 2007?

P.S.
Can't understand the reason for ISA 2006 release. Should we buy the new ISA every year?

(in reply to tshinder)

Post #: 5

RE: ISA 2007 sightings - 19.Jun.2006 9:41:30 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Jesse,

If I knew, I couldn't say.

Future versions should be every two years after ISA 2007 is released. A major rewrite and then two years after an "R2" write, like ISA 2006.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to JesseA)

Post #: 6

RE: ISA 2007 sightings - 20.Jun.2006 2:47:55 AM

RAJP

Posts: 50
Joined: 11.Mar.2006
Status: offline

Hi Tom,

"PIX and Check Point are going to cry :)"

Sometimes when I laugh real hard, I cry. Is that what you meant? :-)

Ray

(in reply to tshinder)

Post #: 7

RE: ISA 2007 sightings - 20.Jun.2006 4:27:55 AM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Ray,

PIX should be crying now -- what a POS it is. I can tell you from experience. I wouldn't deploy a PIX if you gave it to me. However, Check Point is a powerful competitor and they have a very strong product, unlike Cisco who really should get out of the software security market -- that's not their core competancy and it shows big time.

Just wait and see what ISA 2007 has for us. Then compare the prices and the feature sets. We'll see who'll be eating crow in 18 months.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to RAJP)

Post #: 8

RE: ISA 2007 sightings - 22.Jun.2006 2:06:59 AM

RAJP

Posts: 50
Joined: 11.Mar.2006
Status: offline

C'mon Tom, tell us how you really feel about Pix. :-)

Personally, I think you seriously understated how lousy it is. The only people I know that buy Pix are ones who have bought into Cisco lock, stock and barrel.

Check Point's done some good stuff, particularly with end point security. If Microsoft turned that firewall client into a real firewall, one that could be used for laptops through servers for host protection, and had good management capabilities like configuration by groups and policy pushes, they would have one winning product.

Ray

(in reply to tshinder)

Post #: 9

RE: ISA 2007 sightings - 23.Jun.2006 3:28:33 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Ray,

You're right about that. I've pushed and pushed several idea on how to fully leverage the firewall client to provide "one of a kind" protection for the Firewall client machines, but my ideas never seem to stick or even get acknowledged

If you want to see a nice rant on the dreaded PIX, check out:

http://blogs.isaserver.org/shinder/2006/06/21/chapter-3x-of-dr-ts-rant-on-pix-firewalls/

:)

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to RAJP)

Post #: 10

RE: ISA 2007 sightings - 3.Jul.2006 9:10:51 PM

Beefcake

Posts: 7
Joined: 3.Jul.2006
From: Indiana
Status: offline

Just out of curiousity, where does the Netscreen fall into this discussion. My guess would be between Pix and CP but I don't have experience with CP, what are your thoughts guys?

(in reply to tshinder)

Post #: 11

RE: ISA 2007 sightings - 4.Jul.2006 3:56:40 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi BC,

I've never thought much about the Netscreen. I'd put them above PIX, but below ISA and Check Point both in terms of stateful packet inspection and application layer inspection. The Cisco and Junipar application layer inspection feature sets are pretty immature at this time, which makes sense, because these are networking companies, not security companies. The job of a networking company is move packets are quickly and efficiently as possible, which is clearly not the same goal of a network security specialist.

That's why this "networking guy" grandfathering into the network security role is such a travesty and why its created such a gaping security hole on most networks I know. It's sort of like when in the 1920's the USA moved into the era of modern medicine, but the barbers were grandfathered in. We ISA firewall admins are like the new docters post Flexner, and the "networking guys" are the barbers still applying leeches for a good "bleeding" (unfortunatley, they're bleeding their employers dry with insanely expensive "hardware" crap that doesn't work).

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Beefcake)

Post #: 12

RE: ISA 2007 sightings - 5.Jul.2006 4:42:24 PM

AlexMC

Posts: 9
Joined: 20.Jun.2006
Status: offline

As per elmajdal has found, i think it's more believable that they would bring out ISA 2008 in the final quarter of 2007..

Still going to do that exam though!

(in reply to tshinder)

Post #: 13

RE: ISA 2007 sightings - 4.Aug.2006 11:40:04 PM

BillBrosius

Posts: 7
Joined: 19.Jul.2006
Status: offline

Tom,

Do you have a more accurate estimate as to when they think they will release ISA 2007? I think you mentioned once that one of the improvements in ISA 2007 will be automatic fail-over from Forms-based authentication to basic for OWA so that we don't have to worry about jumping through hoops with different listeners and such.

I still haven't been able to get my TREO 700P to work with ActiveSync because of the "No Trusted Root Certificate" problem when using self issued certificates.

Is there a thread that talks about setting up ISA to work with Exchange using just Basic authentication for both OWA and OMA and ActiveSync?

Thanks.

Bill

(in reply to AlexMC)

Post #: 14

RE: ISA 2007 sightings - 5.Aug.2006 6:44:57 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Bill,

I think they'll make the ISA 2007 deadline -- but it all depends on the Longhorn release schedule.

I don't know about the Treo, but it's a no brainer getting to work on the Samsung i730 -- it works everytime.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to BillBrosius)

Post #: 15

RE: ISA 2007 sightings - 7.Aug.2006 5:41:13 PM

tmorton

Posts: 15
Joined: 27.Mar.2006
Status: offline

Hey Bill,

I just upgraded to a MotoQ and had the same issue. There is a utility on the Microsoft site that will allow you to add Certificates to VZW mobile phones. I have not tried it on the Treo but it has worked on multiple Motorola Q's.

Here is a quick howto for using it. Make sure you create the "Storage" folder.
http://blogs.technet.com/sbs/archive/2006/07/24/443178.aspx

Let me know if this worked or not.
Thanks
Ty

(in reply to tshinder)

Post #: 16