Welcome to ISAserver.org

Using Backup Exec Remote Agent for server running ISA 2006

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> General >> Using Backup Exec Remote Agent for server running ISA 2006

Page: [1]

Message

<< Older Topic Newer Topic >>

Using Backup Exec Remote Agent for server running ISA 2006 - 7.Jan.2008 1:16:00 PM

MinusB27

Posts: 13
Joined: 17.Dec.2007
Status: offline

I have recently installed ISA 2006 Standard on a new box with Windows 2003 R2 to replace an older box running ISA 2004 Windows 2003 SP1. I cannot seem to get Backup Exec 10d Media server to connect to the remote agent running on this new ISA Server.

In ISA 2004, we had a rule setup to allow the BE traffic, and it has always worked ok with no problems. The same rule also allowed traffic from the Media server to servers in the DMZ. In the new setup, the DMZ servers get backed up ok, but the localhost (ISA 2006 server) cannot be connected to. I go into my media server and edit the job... go to User Defined selections and see my new server listed, but when I try to expand it to select items to backup, it take some time (1 minute or so) and eventually comes up with a dialog with the error 'Logoin account "Backup Exec Remote Account" failed to access <<servername here>>. The directory or file was not found or could not be accessed.

While watching the monitor on the ISA Server, i see the successful initiated connection and closed connection attempts from the media server with the Backup Exec rule I had created. However, I then see a string of denied connection attempts to my ISA Server from my media server on port 135 with a protocol of 'unidentified IP Traffic' and the rule blocking it is the 'Default rule'. This only happens when I try to connect to the ISA Server from my media server in the method mentioned in the previous paragraph.

I see no errors in the ISA Servers event log, and have confirmed that the account that Backup Exec uses exists on the ISA Server with the proper rights/privlidges.

If anyone has expierenced such issues and were able to resolve them, your insight would be greatly appreciated.

Josh Brown

Post #: 1

Featured Links*

RE: Using Backup Exec Remote Agent for server running I... - 7.Jan.2008 3:15:52 PM

pwindell

Posts: 802
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

I don't think I would even try that way and would remove the Agent from the ISA.

Then:

Use Windows Backup (on the ISA) to back the ISA to a "*.bkf" file to a share on another server.

Then backup the other Server with Backup Exec which will backup the "*.bkf file along with the rest of the machine.

That is how I do mine with most of the servers. All of my Servers use their own local copy of Windows Backup (scheduled) to backup their own self to a *.bkf file to a share on a File Server. I even do a Config backup of ISA periodically and save the XML file to the same share. The File Server then has a large internal Tape Drive where I backup the contents of the File Server which includes all the *.bkf files.

I end up being able to backup most of my whole server room on one machine with one Tape. I have Backup Exec but have given up using it,...it is just too much hassle and have had problems with services failing to start on servers if the Agent in installed on them.

It took a bit of time to setup the scheduled backups with Windows Backup, but after it was finished it works fine and the design is so simple that it always works and I have never had it fail.

_____________________________

Phillip Windell
www.wandtv.com

(in reply to MinusB27)

Post #: 2

RE: Using Backup Exec Remote Agent for server running I... - 7.Jan.2008 4:38:45 PM

MinusB27

Posts: 13
Joined: 17.Dec.2007
Status: offline

This sounds good. I've discussed the idea of not running Backup Exec on this server with my boss and he agrees.... the less stuff we run here, the better (in a security sense)

When we sat down and discussed what was really important (to backup) on the ISA Server, we came up with the following.

- Firewall and System Policies (easy to export these as we change them, which doesn't happen very often anyway)
- Firewall Logs - important for auditing and trouble shooting

With the logs, we do the logging with an MSDE database running on the ISA Server.

I noticed that ISA keeps log files (from each day) locked as it uses them for reporting, etc. What is the best way to backup these logs and get them off to a seperate server for backup? Storing them to a seperate SQL Server is not an option, since theres no guarantee that the SQL Server would always be available for logging. The other option is writing logs to a file, but I'd prefer to keep the logs in the MSDE databases if possible.

(in reply to pwindell)

Post #: 3

RE: Using Backup Exec Remote Agent for server running I... - 7.Jan.2008 5:05:05 PM

pwindell

Posts: 802
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

It is not ISA that keeps them locked,...it is the SQL Server Engine (MSDE),...the same way it would if you were running the full version of SQL Server.

The full version of SQL Server has its own built in backup utility to backup a live database to a simple file which you can then in turn backup with Windows Backup or any other backup package,...or just simply manually copy the file somewhere. The SQL Backup utility I believe can even run on a schedule. However I do not know what options are available with MSDE since it is so stripped down. Maybe one of the other guys around here will know what to do with that.

_____________________________

Phillip Windell
www.wandtv.com

(in reply to MinusB27)

Post #: 4