Welcome to ISAserver.org

Why ISA 2006 is better than 2000 and 2004

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> General >> Why ISA 2006 is better than 2000 and 2004

Page: [1]

Message

<< Older Topic Newer Topic >>

Why ISA 2006 is better than 2000 and 2004 - 7.Sep.2006 7:34:14 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: online

Use this thread to discuss the article on why ISA 2006 is better than 2000 and 2004 at:

http://www.isaserver.org/articles/White-Paper-Why-ISA-2006-Better-Solution-than-ISA-2000-2004.html

Thanks!
Tom

< Message edited by tshinder -- 7.Sep.2006 7:37:57 PM >

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

Post #: 1

Featured Links*

RE: Why ISA 2006 is better than 2000 and 2004 - 11.Sep.2006 2:16:11 PM

denizyalcin

Posts: 122
Joined: 19.Jan.2005
From: Turkey
Status: offline

Hi Mr. Shinder,

Thanks for the article, it was great to find a well documented comparison between ISA 2004 and 2006.
Nowadays I'm mostly interested in MOM 2005 and 2007 and would like to be able get that "Updated MOM Management Pack" for ISA 2006. I just downloaded everything related to MOM2005 through Microsoft's download sites but I couldn't see this special pack there. Is it included in the ISA2006 installation file or did I miss something on MS download ?

I will have many questions on MOM2005 and ISA integration in the upcoming days. So be prepared for my question salvo ;)
(I'm especially interested in multi domain MOM agent connections made through ISA servers to just one MOM server behind a central ISA server.)

(in reply to tshinder)

Post #: 2

RE: Why ISA 2006 is better than 2000 and 2004 - 11.Sep.2006 4:22:44 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Deniz,

There is a beta MOM pack that I've been using. It might not have been released yet, but it should be soon. I'll check.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to denizyalcin)

Post #: 3

RE: Why ISA 2006 is better than 2000 and 2004 - 13.Sep.2006 9:59:41 AM

denizyalcin

Posts: 122
Joined: 19.Jan.2005
From: Turkey
Status: offline

It has been released today : Microsoft Internet Security and Acceleration (ISA) Server 2000, 2004, and 2006 Management Pack for Microsoft Operations Manager (MOM) 2005

(in reply to tshinder)

Post #: 4

RE: Why ISA 2006 is better than 2000 and 2004 - 13.Sep.2006 1:59:26 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Deniz,

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to denizyalcin)

Post #: 5

RE: Why ISA 2006 is better than 2000 and 2004 - 13.Sep.2006 2:38:54 PM

Neild

Posts: 3
Joined: 13.Sep.2006
From: Australia
Status: offline

Hi,

We currently have an SBS 2003 with ISA 2000.

Is the upgrade path to ISA 2006 relatively simple in this case and will the CEICW still set the whole thing up, or are advanced skills going to be required to get the benifits of 2006?

(in reply to tshinder)

Post #: 6

RE: Why ISA 2006 is better than 2000 and 2004 - 13.Sep.2006 2:46:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Neild,

ISA 2006 will never be supported on SBS.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Neild)

Post #: 7

RE: Why ISA 2006 is better than 2000 and 2004 - 13.Sep.2006 2:55:39 PM

Neild

Posts: 3
Joined: 13.Sep.2006
From: Australia
Status: offline

Hi Tom,

Thanks for your quick and concise answer! I guess in my case 2000 is actually better than 2006, although I assume 2004 is still better than 2000?

Neild

(in reply to tshinder)

Post #: 8

RE: Why ISA 2006 is better than 2000 and 2004 - 13.Sep.2006 3:10:22 PM

elmajdal

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi Neild,

2004 is faaaar away much more better than 2000.

Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to Neild)

Post #: 9

RE: Why ISA 2006 is better than 2000 and 2004 - 13.Sep.2006 3:19:17 PM

Neild

Posts: 3
Joined: 13.Sep.2006
From: Australia
Status: offline

Thanks Tarek,

I will investigate that upgrade.

Neild

(in reply to elmajdal)

Post #: 10

RE: Why ISA 2006 is better than 2000 and 2004 - 14.Sep.2006 10:10:59 PM

erickufrin

Posts: 58
Joined: 15.Apr.2003
From: Milwaukee, WI
Status: offline

RE: SBS

To-Tom... Isnt that what was said about ISA2004?

To-SBS User... Buy a seperate box and throw ISA06 on there and get rid of ISA2k ! ;-)

(in reply to Neild)

Post #: 11

RE: Why ISA 2006 is better than 2000 and 2004 - 15.Sep.2006 1:37:10 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Erick,

MS has officially stated that 2006 won't be added to SBS -- the network level protection and the Web proxy enhancments can't be leveraged by an on-box SBS install.

However, put the ISA firewall in front of the SBS box, and then you'll get some nice protection!

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to erickufrin)

Post #: 12

RE: Why ISA 2006 is better than 2000 and 2004 - 18.Sep.2006 2:07:13 AM

ITEngineer

Posts: 257
Joined: 3.Feb.2006
Status: offline

Hi,

I have tried the trial version of ISA 2006 and i do not see that BIG jump from ISA 2004 !!!

I was really disappointed, The new Branch to office and Publishing options that were made in ISA 2006 should have been added to ISA 2004 as a Service Pack 3 !!!

I did not recommend the upgrade to ISA 2006 from ISA 2004.

I thought ISA team read this site and take into consideration all the posted threads in the ISA Wishlist forums !!!

But it seems they do not !!!

No N:1 natting !!!
No multiple gateways support !!
No built in option to print the configuration !!
No log file to track the changes done to the ISA rules were made by who and when !!
No Built in virus system, they have all the new Live software ( Live Saftey , one care , and none to ISA !! )
and much more NO NO NO !!

Thanks.

(in reply to tshinder)

Post #: 13

RE: Why ISA 2006 is better than 2000 and 2004 - 18.Sep.2006 3:31:01 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Tarek,

Yes, I felt the same way when I first saw the ISA 2006 Firewall in alpha. But check out the new features mentioned in my article, you might find some things that you can use.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ITEngineer)

Post #: 14

RE: Why ISA 2006 is better than 2000 and 2004 - 18.Sep.2006 6:49:06 PM

elmajdal

Posts: 5061
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

quote:

ORIGINAL: tshinder

Hi Tarek,

Yes, I felt the same way when I first saw the ISA 2006 Firewall in alpha. But check out the new features mentioned in my article, you might find some things that you can use.

Tom

Hi Tom,

is this reply for this ?

quote:

Hi Neild,

2004 is faaaar away much more better than 2000.

Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to tshinder)

Post #: 15

RE: Why ISA 2006 is better than 2000 and 2004 - 19.Sep.2006 3:57:21 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Tarek,

204 is MUCH BETTER than 2000!

What I was saying was that I was also disappointed that 2006 didn't have the requested improvements over 2004. But I guess we'll have to wait for 2007.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to elmajdal)

Post #: 16

RE: Why ISA 2006 is better than 2000 and 2004 - 20.Sep.2006 10:56:38 PM

thejun

Posts: 101
Joined: 21.Jan.2002
Status: offline

I agree. I am usually excited abouot new versions for M$ software with all the improvements they usually provide. But in this case, isa 2006 is pretty much 2004 R2. I read the good features, now I have to decide if its worth upgrading the larger companies, and re-doing the new MOM rules. Maybe when 2008 rolls around...

(in reply to tshinder)

Post #: 17

RE: Why ISA 2006 is better than 2000 and 2004 - 3.Oct.2006 4:50:45 AM

dpracilio

Posts: 19
Joined: 10.Jun.2004
From: Australia
Status: offline

Hi Tom,

We have two sites connected via 2 ISA 2004 firewalls using PPTP VPN which is now working perfectly after some service packing. Is it a smooth upgrade to 2006 and do you see it causing any disruption to the existing configuration of the VPN and any routes we have already established.

Regards,
David

(in reply to thejun)

Post #: 18

Wildcard certificates to the back end server? - 5.Dec.2007 6:31:42 PM

ijohnson

Posts: 23
Joined: 28.Jun.2001
From: Oceanside, CA 92054
Status: offline

Tom, does ISA 2006 really support Wildcard SSL Certificates to the back end server? I see conflicting information on this topic. On your website, under the header:
Support for wildcard certificates on the published Web Server
ISA 2004 supported wildcard certificates on its Web listener, but did not support wildcard certificates on the published Web server located behind the ISA firewall. ISA Server 2006 improves on wildcard certificate support by allowing the ISA firewall administrator to use a wildcard certificate on the published Web server.

However on Microsoft's webiste, on this page: http://www.microsoft.com/technet/isa/2006/toolbox_concepts.mspx#Contenttypes
Selecting SSL Server Certificates
Wildcard certificates are supported only on the ISA Server computer. In HTTPS-to-HTTPS bridging, you cannot use wildcard certificates to authenticate the back-end Web server to ISA Server.

Is it a feature that was planned but later removed? I need to have SSL all the way to the back end and would like to use a wildcard certificate. We are currently running ISA 2004, but would upgrade to 2006 if it supported this feature.

(in reply to dpracilio)

Post #: 19

RE: Wildcard certificates to the back end server? - 6.Dec.2007 11:27:19 AM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: online

I'm almost positive that wildcards are supported on the back end.

I'll double check though.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ijohnson)

Post #: 20