• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

RE: Discussion on HP Appliances

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Misc.] >> ISA Firewall Appliances >> RE: Discussion on HP Appliances Page: <<   < prev  1 [2]
Login
Message << Older Topic   Newer Topic >>
RE: Discussion on HP Appliances - 3.Nov.2005 11:32:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Michael,

Sounds like a good plan you have. I haven't run RainWall/RainConnect on the DL320's, but I don't expect there to be a problem. If you do run into an issue, the most likely reason will be due to the system hardening. That will help the Rainfinity support folks know where to start. Other than that, I see no problems with running Rainwall/Rainconnect on the DL320s.

HTH,
Tom

(in reply to tshinder)
Post #: 21
RE: Discussion on HP Appliances - 7.Dec.2005 8:54:24 PM   
demroyer

 

Posts: 2
Joined: 7.Dec.2005
Status: offline
Hi Tom,

A few months back I read a review you posted (I think it was you) about the HP DL320 ISA appliance, and as we are getting ready to retire our existing ISA 2000 box in favor of an appliance, I thought I would revisit the article to confirm that this is a well-regarded solution.  However, try as I might I can't find that article anymore - have you pulled the review of the HP solution?  If so, is there something scary about it that I should look to avoid?  My plan was to purchase the HP appliance and then install RainConnect on it to load balance across our multiple ISP connection. 

On a similar note, I see that there is a review of the HP appliance and a few others at the WindowsIT pro site, but as I'm not a member I can't access the review.  Did the HP stack up well in that roundup, or did another option seem to be a clear winner?  We are looking to spend around $4K for the appliance if that helps put that question in perspective.

This is my first post on this site, although I have used ISAServer.org as a reference for years.  Any feedback you could provide would be greatly appreciated.  Thanks!

Demian 

(in reply to tshinder)
Post #: 22
RE: Discussion on HP Appliances - 8.Dec.2005 2:06:30 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Demian,

I don't know what happened to that reivew. I see references to it on Google, but they all point to dead links. I'll see what I can find out.

The HP box did well, if you're into the pure ISA firewall experience. The Network Engines was a good selection for those who want the look and feel of a traditional hardware firewall, since you'll see almost no trace of Windows in the management experience.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to demroyer)
Post #: 23
RE: Discussion on HP Appliances - 8.Dec.2005 4:34:53 PM   
demroyer

 

Posts: 2
Joined: 7.Dec.2005
Status: offline
Thanks for the response Tom - I'll be on the lookout for that review, in case it turns up somewhere.  In the meantime, since we're pretty familiar with (and happy with) ISA Server thus far, I think we're going to go ahead with the HP appliance.  Again, I appreciate the feedback, not to mention all the awesome ISA articles you've contributed over the years - they've been a HUGE help to us.

Demian  

(in reply to tshinder)
Post #: 24
RE: Discussion on HP Appliances - 9.Dec.2005 3:10:10 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Demian,

Thanks for the kind words :)

I'll let you know what happened to the article when we figure it out.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to demroyer)
Post #: 25
RE: Discussion on HP Appliances - 11.Dec.2005 7:53:15 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Demian,

Here you go:

http://www.isaserver.org/articles/HP-ProLiant-DL320-ISA-Hardware-Firewall.html

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to tshinder)
Post #: 26
RE: Discussion on HP Appliances - 14.Feb.2006 5:32:14 PM   
bendji

 

Posts: 56
Joined: 18.Sep.2005
From: Denmark
Status: offline
Hi Tom,

First thx for a great article and a great forum (to all you ISA people out there)

I've just got one question this time

If I look at the configuration, there is only one Hard drive in "sata 80 GB". I've asked HP if it was posible to buy it with a raid 1 and either two sata or scsi hotswap drives in and they told me no. In my exsperience HD's always go on strike at some point , so I like to have at least a raid 1 with hot swap in and this HP server don't offer that. Ain't it better to have at least a raid 1 with hotswap in the firewall in case the Hard drive deside to go on strike?

He He and he is my question two (Though I did only have one):
Is there some servers you (the isa people on this board) prefer. Server there perform better than others etc?

Yours Sincerely
Benjamin


(in reply to tshinder)
Post #: 27
RE: Discussion on HP Appliances - 16.Feb.2006 4:04:26 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Benjamin,

Sure, it would be better, but then it would cost more

That's said, you always roll the dice with hard disks. I've been lucky, as I have ISA2k firewalls I installed in 2001 and they've been humming away nicely.

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to bendji)
Post #: 28
RE: Discussion on HP Appliances - 1.Mar.2006 4:18:11 PM   
poiuy

 

Posts: 82
Joined: 20.Oct.2005
Status: offline
I have had a DL320 in production for almost 4 months.  Although I have not looked at other ISA FW appliances I have been very happy with both ISA and the DL320.  I do have a couple of gripes.

1. While the server comes with SATA RAID on board it is not possible to use it with HP's image.  I contacted HP to verify that I was correct and they confirmed. (I don't see why they do not offer 2 restore disks.  One to use with HW RAID and one for single disk).  Right now I am using Software RAID 1. 

2. Virus Throttle.  Out of the box the Virus Throttle is practically useless.  It works fine if there are only ~10 connections on your network but as users increase it brings your internet connection to it's knees (Session timeouts slow / non existant browsing. Don't even try CNN).  I spent weeks trying to figure out why our internet connection was so slow.  I even built a white box ISA 2004 and tested it.  When it outperformed the DL320 I was peeved.  Then I turned off the Virus Throttle and everything is great.  In concept the VT sounds like a great idea but the documentation on how to properly configure it is sorely lacking.

Tom, do you have any config recommendations for the VT?

I ordered ours DL320 from CDW.  It was on BO when we placed the order.  It took about two weeks for it to be deliverd.

(in reply to tshinder)
Post #: 29
RE: Discussion on HP Appliances - 5.Mar.2006 5:36:01 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Poiuy,

Good questions regarding VT. I've found it sort of difficult to get detailed information on the VT. Let me see what I can find out.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to poiuy)
Post #: 30
RE: Discussion on HP Appliances - 23.Mar.2006 10:53:11 AM   
gwernham

 

Posts: 2
Joined: 23.Mar.2006
Status: offline
Hi all.

We have installed 2 of these boxes into our infrastructure.

We bought extra sata drives for these servers.
We did not relise the problems with adding another SATA drive and configuring raid through the motherboard/raid setup.

HP do tell you that their restore disks do NOT support SATA raid
However we managed to work out quite an easy procedure for migrating the HP restore disks to a raid setup.
You can even upgrade your existing installation.

I am in the proccess of creating a document for this install. If anyone is interested I will post the info here.

Guthrie Wernham
Systems Administrator
Aberdeenshire Council


Firewall Admin : Nokia Checkpoint, ISA 2000, ISA 2004

(in reply to dolphx)
Post #: 31
RE: Discussion on HP Appliances - 23.Mar.2006 2:58:55 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Guthrie,

That would be great!
Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to gwernham)
Post #: 32
RE: Discussion on HP Appliances - 6.Apr.2006 6:17:41 AM   
ssor

 

Posts: 28
Joined: 29.Jun.2005
From: Sydney, Australia
Status: offline
I have a HP Proliant DL320 G3 with ISA pre-installed. Everything is running fine and the ISA Configuration Backup is OK except that when I restore the configuration, it gives me the error message "Error: 0xc004038f, The MSDE feature is currently not installed. To install MSDE, in the Add/Remove Programs applet, select Microsoft ISA 2004 and click change. Then in Microsoft ISA 2004 installation wizard, use the Modify option to add MSDE to the installation.".
Then when I follow the instruction from the error message above, it asks me to "put the command line for the uninstallation program" which I am not sure what to put.

Please assist.

SSOR.

(in reply to tshinder)
Post #: 33
RE: Discussion on HP Appliances - 25.May2006 11:34:53 AM   
angelis

 

Posts: 2
Joined: 25.May2006
Status: offline
Hello.
Is it possible, with the isa-in-a-box, to load a 3rd-party agent? I'm thinking in particular of APC Powerchute 7.04 agent, to allow the DL320ISA to be shut down gracefully. Also I want to install a 2nd Serial ATA to mirror the boot disk. Is this a good idea or should I go for 2 x SCSI and a software raid1?
Many thanks, Derek

(in reply to tshinder)
Post #: 34
RE: Discussion on HP Appliances - 30.May2006 2:04:58 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Derek,

You could do that. I would choose the most cost effective option.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to angelis)
Post #: 35
RE: Discussion on HP Appliances - 5.Jul.2006 11:33:00 AM   
gwernham

 

Posts: 2
Joined: 23.Mar.2006
Status: offline


Sorry for not getting back to you earlier.
We managed to build two servers using our process.
I did not get a chance to create a document for this process. I was forced to put both servers into a live environment.
Both servers now act as a firewall protecting our network from our ISDN and PSTN dialup lines.
I work in a very busy IT department, so resources are always in short supply.
I had meant to re-stream one of the servers and document this process properly.
I should be able to talk you through the process. Generally what you need to do is the following :
Make sure you are starting off with a re-streamed product. If you have configured any raid options make sure you delete any raid settings and reset the hardware (from the restore CD).
Once re-streamed startup the server and go through the standard configuring options. Once you get through all the network and ISA configuration screens and into the OS you need to add two new drivers.
They are :
Adaptec AHCI Serial ATA HostRAID
Adaptec Processor Device (Pseudo)
Since you are adding these drivers without the devices being enabled you will have to add them is a different way.
I have found the document that I started.


Steps to configure ISA servers (MRM) to use SATA Raid

Unzip ‘Adpahci.1.0.414.0-3842-Windows2000_2003.i686.zip’ to a floppy disk


Initialise Hardware (F1) if not new hardware
Restore Software (F2) if not new software
Press C
Press A
Server will reboot
Login
Go through Windows Setup Wizard. Answer question as required.
After this the server reboots.
Login
Server reboots after doing some initiations tasks
Login
Control Panel > Add Hardware
Add new hardware device, manually select (advanced)
SCSI/RAID
Have disk
Load both drivers.
'Adaptec AHCI Serial ATA HostRAID and Adaptec Processor Device (Pseudo)'

Reboot server.
When rebooted the server should display errors starting services.
Login and shutdown.
Press F10 on startup
Go into Setup, Advanced Options, SATA software raid, Enable
Press escape twice, and press F10. Server reboots.
When server is rebooting press (Ctrl A) at the raid bios.
Go into Array Config
Configure Drives
Insert x 2 drives.

This is as far as I got with the document
I think once you have added both drives to the raid, then you choose to prepare the raid using the first disk as the disk to copy from.
I have attached the drivers that I used.
Once you have done all this you can install the 'HP Storage Manager' to veiw and configure the raid. (hpsm_win_3.10.00-4242_x86.zip). I can send this to you, but you can download it from HP

Have a go. If you have any problems don't hesitate to contact me.
Again sorry for the late reply.
Kind regards

Guthrie

(in reply to tshinder)
Post #: 36
RE: Discussion on HP Appliances - 14.Jul.2006 5:04:39 PM   
khale

 

Posts: 42
Joined: 8.Feb.2002
From: Greensboro, NC
Status: offline
I spent over an hour yesterday calling HP just trying to get some more information about the product.
In all that time I did not get anyone who knew anything about the product.

Does anyone know of a contact at HP that knows anything about this product?

Can the unit be ordered with SCSI RAID 1? That is a requirement in my book. I have had more than my share of
drives to fail, even with good backups, you still are looking as some down time.

Is it a better way to go than to get a server and load ISA yourself?

Thanks




_____________________________

Kelly Hale, MCP
ICS Systems, Inc.
khale@icssystemsinc.com

(in reply to gwernham)
Post #: 37
RE: Discussion on HP Appliances - 14.Jul.2006 5:10:49 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Kelly,

Or you can try a Network Engines ISA hardware firewall.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to khale)
Post #: 38
RE: Discussion on HP Appliances - 14.Jul.2006 5:29:39 PM   
khale

 

Posts: 42
Joined: 8.Feb.2002
From: Greensboro, NC
Status: offline
I looked at them (Network Engines) this morning and to get the Raid you have to go with their NS8200 model that
costs $9500.00 for the box plus the $595.00/year support. That put it way out of the range for my clients needs.

I can get a Dell server with Raid and install ISA 2004 myself for about 1/2 the cost of the NS8200.

Do you know if the HP has a Raid option out of the box? I know that you can get the 320 with Raid as a server.

I read your report on the DL320 and I see what you mean about not giving them that last 1/2 star. They have a
page on their web site on the package, but no part numbers and their link to order it on-line appears to be a link
to the DL320 server only.

Is the only real advantage to using a hardware appliance the setup time it saves you?

If you had $5000.00 to spend for the hardware(with Raid-1)/software, which way would you go?

Thanks,

_____________________________

Kelly Hale, MCP
ICS Systems, Inc.
khale@icssystemsinc.com

(in reply to tshinder)
Post #: 39

Page:   <<   < prev  1 [2] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Misc.] >> ISA Firewall Appliances >> RE: Discussion on HP Appliances Page: <<   < prev  1 [2]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts