Thanks for the article, it was great to find a well documented comparison between ISA 2004 and 2006. Nowadays I'm mostly interested in MOM 2005 and 2007 and would like to be able get that "Updated MOM Management Pack" for ISA 2006. I just downloaded everything related to MOM2005 through Microsoft's download sites but I couldn't see this special pack there. Is it included in the ISA2006 installation file or did I miss something on MS download ?
I will have many questions on MOM2005 and ISA integration in the upcoming days. So be prepared for my question salvo ;) (I'm especially interested in multi domain MOM agent connections made through ISA servers to just one MOM server behind a central ISA server.)
Posts: 3
Joined: 13.Sep.2006
From: Australia
Status: offline
Hi,
We currently have an SBS 2003 with ISA 2000.
Is the upgrade path to ISA 2006 relatively simple in this case and will the CEICW still set the whole thing up, or are advanced skills going to be required to get the benifits of 2006?
MS has officially stated that 2006 won't be added to SBS -- the network level protection and the Web proxy enhancments can't be leveraged by an on-box SBS install.
However, put the ISA firewall in front of the SBS box, and then you'll get some nice protection!
I have tried the trial version of ISA 2006 and i do not see that BIG jump from ISA 2004 !!!
I was really disappointed, The new Branch to office and Publishing options that were made in ISA 2006 should have been added to ISA 2004 as a Service Pack 3 !!!
I did not recommend the upgrade to ISA 2006 from ISA 2004.
I thought ISA team read this site and take into consideration all the posted threads in the ISA Wishlist forums !!!
But it seems they do not !!!
No N:1 natting !!!
No multiple gateways support !!
No built in option to print the configuration !!
No log file to track the changes done to the ISA rules were made by who and when !!
No Built in virus system, they have all the new Live software ( Live Saftey , one care , and none to ISA !! )
Yes, I felt the same way when I first saw the ISA 2006 Firewall in alpha. But check out the new features mentioned in my article, you might find some things that you can use.
Posts: 5899
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
quote:
ORIGINAL: tshinder
Hi Tarek,
Yes, I felt the same way when I first saw the ISA 2006 Firewall in alpha. But check out the new features mentioned in my article, you might find some things that you can use.
Tom
Hi Tom,
is this reply for this ?
quote:
Hi Neild,
2004 is faaaar away much more better than 2000.
Tarek
_____________________________
Tarek Majdalani
MS Forefront Edge Security MVP Website : http://www.elmajdal.net Covering ISA Server/TMG, Windows Server 2008 & Windows 7,Windows 8
What I was saying was that I was also disappointed that 2006 didn't have the requested improvements over 2004. But I guess we'll have to wait for 2007.
I agree. I am usually excited abouot new versions for M$ software with all the improvements they usually provide. But in this case, isa 2006 is pretty much 2004 R2. I read the good features, now I have to decide if its worth upgrading the larger companies, and re-doing the new MOM rules. Maybe when 2008 rolls around...
Posts: 19
Joined: 10.Jun.2004
From: Australia
Status: offline
Hi Tom,
We have two sites connected via 2 ISA 2004 firewalls using PPTP VPN which is now working perfectly after some service packing. Is it a smooth upgrade to 2006 and do you see it causing any disruption to the existing configuration of the VPN and any routes we have already established.
Posts: 28
Joined: 28.Jun.2001
From: Oceanside, CA 92054
Status: offline
Tom, does ISA 2006 really support Wildcard SSL Certificates to the back end server? I see conflicting information on this topic. On your website, under the header: Support for wildcard certificates on the published Web Server ISA 2004 supported wildcard certificates on its Web listener, but did not support wildcard certificates on the published Web server located behind the ISA firewall. ISA Server 2006 improves on wildcard certificate support by allowing the ISA firewall administrator to use a wildcard certificate on the published Web server.
However on Microsoft's webiste, on this page: http://www.microsoft.com/technet/isa/2006/toolbox_concepts.mspx#Contenttypes Selecting SSL Server Certificates Wildcard certificates are supported only on the ISA Server computer. In HTTPS-to-HTTPS bridging, you cannot use wildcard certificates to authenticate the back-end Web server to ISA Server.
Is it a feature that was planned but later removed? I need to have SSL all the way to the back end and would like to use a wildcard certificate. We are currently running ISA 2004, but would upgrade to 2006 if it supported this feature.