• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Virtual ISA 2006

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> Installation >> Virtual ISA 2006 Page: [1]
Login
Message << Older Topic   Newer Topic >>
Virtual ISA 2006 - 5.Feb.2007 4:07:06 PM   
Zapata

 

Posts: 28
Joined: 25.May2003
Status: offline
Im running a 2 legged ISA 2006 on MS Virtual Server 2005R2, the External network card on the host machine has Virtual Server enabled only, no TCP/IP or other protocols.

Questions:

1) Is this a safe way to run ISA?
2) How much does VS impact on ISA performance?
3) Are there any considerations running ISA this way?

This is not a production environment atm.
Post #: 1
RE: Virtual ISA 2006 - 5.Feb.2007 9:09:12 PM   
ptlinva

 

Posts: 21
Joined: 16.Mar.2005
From: Rhoadesville, VA
Status: offline
I'm not sure if you realize it, but Virtual Server is limited to ONE processor.

It doesn't take much traffic at all to overwhelm ONE processor in ISA - especially with all the writing to the log files for each packet transferred.

As somone who runs Virtual Server (as well as VMware), I wouldn't recommend running your firewall on a virtual server.  I'm got Virtual Server running on two production servers and I've hit limitations quite a few times (one is running 8 virtuals and the other 5 virtuals on dual processors with hyperthreading (shows up as 4 processors in base o/s). 

VMware will let you use more processors and is probably a better choice for running ISA.

I wouldn't recommend rolling out ISA as a virtual machine in a production environment unless you don't anticipate ANY growth.

BTW, why are you trying to use this type of arrangement?  Is it for testing or possibly for dedicated servers for customers?

Good Luck! :)

Your friend in Virginia,
Paul L.

(in reply to Zapata)
Post #: 2
RE: Virtual ISA 2006 - 5.Feb.2007 9:23:41 PM   
ptlinva

 

Posts: 21
Joined: 16.Mar.2005
From: Rhoadesville, VA
Status: offline
Sometimes it helps to read the ENTIRE message - including the last sentence before replying....

Sorry...

BTW, in a non-production environment, running multiple ISA's on MSVS will work just fine.

It's definately a great way to test things...

Good Luck and let us know how it goes! :)

Paul


(in reply to ptlinva)
Post #: 3
RE: Virtual ISA 2006 - 7.Feb.2007 1:11:46 PM   
Zapata

 

Posts: 28
Joined: 25.May2003
Status: offline
I didn't know that MSVS used only one CPU, thanks for telling me!

What did you think about safety as far as ISA sharing NIC with the host?

Thanks!
//Andreas

(in reply to ptlinva)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> Installation >> Virtual ISA 2006 Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts