Welcome to ISAserver.org

ISA and MS update, SCE, and Forefront

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> General >> ISA and MS update, SCE, and Forefront

Page: [1]

Message

<< Older Topic Newer Topic >>

ISA and MS update, SCE, and Forefront - 26.Oct.2007 10:13:18 AM

danielsb@gunnery.org

Posts: 34
Joined: 29.Jul.2004
Status: offline

I have ISA 2006. On my network i use System Center Essentials (for updates and software deployment), and Forefront client security.

The ISA server doesn't seem to interact with either of these. SCE cannot seem to deploy the agent, and while every other server automatically installed Forefront, the ISA has not.

What do i need to do to get ISA to function properly with these services.
thanks

BJ

Post #: 1

RE: ISA and MS update, SCE, and Forefront - 28.Oct.2007 10:51:01 AM

tshinder

Posts: 46778
Joined: 10.Jan.2001
From: Texas
Status: offline

Don't install the FCS agent on the ISA Firewall. It's not required when the firewall is never used as a workstation.

What problems are you having regarding SCE?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to danielsb@gunnery.org)

Post #: 2

RE: ISA and MS update, SCE, and Forefront - 28.Oct.2007 11:03:18 AM

danielsb@gunnery.org

Posts: 34
Joined: 29.Jul.2004
Status: offline

the SCE agent didnt automatically install on ISA as it did in the rest of the domain. Now, to get the agent to install and updates to function properly, i did disable the MS Firewall on domain members.

Basically, since the SCE agent doesn't want to install, i assume the ISA isn't getting updates either.

thanks

PS - if the Forefront client is installed on the ISA server, is that a bad, or just unneeded.

(in reply to tshinder)

Post #: 3

RE: ISA and MS update, SCE, and Forefront - 28.Oct.2007 11:32:16 AM

tshinder

Posts: 46778
Joined: 10.Jan.2001
From: Texas
Status: offline

The FCS client could significantly reduce performance on the ISA Firewall, and since I don't consider it to be needed, why take the performance hit?

The SCE agent problably required RPC/DCOM access to the ISA Firewall, so that's why the autoinstall didn't work. There should be a manual installation routine you can use, right?

The SCE Agent should be calling the SCE computer for information. So the question to answer here is what protocols are required to allow the SCE agent to call the SCE server?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to danielsb@gunnery.org)

Post #: 4

RE: ISA and MS update, SCE, and Forefront - 28.Oct.2007 11:36:11 AM

danielsb@gunnery.org

Posts: 34
Joined: 29.Jul.2004
Status: offline

i will try the manual install and then see what happens.

thanks

(in reply to tshinder)

Post #: 5

RE: ISA and MS update, SCE, and Forefront - 29.Oct.2007 9:58:44 AM

tshinder

Posts: 46778
Joined: 10.Jan.2001
From: Texas
Status: offline

Let us know how it works out for you.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to danielsb@gunnery.org)

Post #: 6

RE: ISA and MS update, SCE, and Forefront - 31.Oct.2007 12:25:54 PM

danielsb@gunnery.org

Posts: 34
Joined: 29.Jul.2004
Status: offline

i finally got around to trying the manual install, but it errored out on me (some type of script error). i will have to do a bit of SCE research when i have the time.

thanks for the advise.

(in reply to tshinder)

Post #: 7

RE: ISA and MS update, SCE, and Forefront - 1.Nov.2007 9:50:44 AM

tshinder

Posts: 46778
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Daniel,

Thanks! We'll be really interested to see what you find out.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to danielsb@gunnery.org)

Post #: 8

RE: ISA and MS update, SCE, and Forefront - 7.Nov.2007 1:39:49 PM

gwenz

Posts: 7
Joined: 7.Nov.2007
Status: offline

I would like to know your results as well.

thanks

Gwen

(in reply to tshinder)

Post #: 9

RE: ISA and MS update, SCE, and Forefront - 7.Nov.2007 1:41:32 PM

danielsb@gunnery.org

Posts: 34
Joined: 29.Jul.2004
Status: offline

i hope to work the issue next week.

thanks

(in reply to gwenz)

Post #: 10

RE: ISA and MS update, SCE, and Forefront - 9.Nov.2007 1:09:41 PM

gwenz

Posts: 7
Joined: 7.Nov.2007
Status: offline

Did you see the recent post at:
http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=2378309&SiteID=17&pageid=0

This may be the solution you need. Stephanie posted she will make it a KB article soon.

Gwen
http://myitforum.com/cs2/blogs/gzierdt/default.aspx

_____________________________

Gwen Zierdt
http://myitforum.com/cs2/blogs/gzierdt/default.aspx

(in reply to danielsb@gunnery.org)

Post #: 11

RE: ISA and MS update, SCE, and Forefront - 9.Nov.2007 1:30:44 PM

danielsb@gunnery.org

Posts: 34
Joined: 29.Jul.2004
Status: offline

thanks - i will give it a try next week.

bj

(in reply to gwenz)

Post #: 12

RE: ISA and MS update, SCE, and Forefront - 19.Nov.2007 11:37:23 AM

gwenz

Posts: 7
Joined: 7.Nov.2007
Status: offline

Any luck?

_____________________________

Gwen Zierdt
http://myitforum.com/cs2/blogs/gzierdt/default.aspx

(in reply to danielsb@gunnery.org)

Post #: 13

RE: ISA and MS update, SCE, and Forefront - 30.Nov.2007 12:13:27 PM

danielsb@gunnery.org

Posts: 34
Joined: 29.Jul.2004
Status: offline

i had to put it on a back burner - i have been off campus a lot lately for medical reasons and when i get on campus, i am putting out more urgent fires. I will definitly post to this group once i get a change to try it out.

thanks for pointing out the article.

(in reply to gwenz)

Post #: 14

RE: ISA and MS update, SCE, and Forefront - 2.Dec.2007 1:52:15 PM

tshinder

Posts: 46778
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Daniel,

No problem. Hope you get to feeling better soon!

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to danielsb@gunnery.org)

Post #: 15

RE: ISA and MS update, SCE, and Forefront - 12.Mar.2008 3:11:22 PM

gwenz

Posts: 7
Joined: 7.Nov.2007
Status: offline

Not sure if you were ever able to resolve your problem but Essentials 2007 SP1 was announced on 3/10/08

More details at: http://technet.microsoft.com/en-us/sce/default.aspx

Gwen
The Real World is Messy: Making Sense with Essentials 2007
http://myitforum.com/cs2/blogs/gzierdt/default.aspx

< Message edited by gwenz -- 12.Mar.2008 3:12:23 PM >

(in reply to danielsb@gunnery.org)

Post #: 16