Entire Site
Free Trial
Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.
- Create BookmarkCreate Bookmark
- Create Note or TagCreate Note or Tag
- DownloadDownload
- PrintPrint
Chapter 11. Configuring Microsoft Intern... > Frequently Asked Questions
Frequently Asked Questions
| Q: | What are the main differences between ISA Server Standard Edition and Enterprise Edition? | |||||||||||||||||||||
| A: | There are three categories of differences between ISA Server Standard and Enterprise Editions: hardware support; network architectures supported; and administrative features provided. Table 11.4 summarizes these differences.
| |||||||||||||||||||||
| Q: | What operating systems can I install ISA Server on? | |||||||||||||||||||||
| A: | ISA Server 2006 is supported on only 32-bit Windows operating systems. Microsoft currently lists only the 32-bit versions of Windows Server 2003 with Service Pack 1 and Windows Server 2003 R2, but when Windows Server 2008 is released the 32-bit version should be supported as well. | |||||||||||||||||||||
| Q: | I thought my firewall rules were built in the Firewall Policy section of the ISA Server Management interface. What is the Network Rules section for, then? | |||||||||||||||||||||
| A: | The Firewall Policy section of the management interface allows you to configure firewall rules for blocking and allowing protocols to pass through the ISA Server packet filter. Network rules allow you to configure routing and NAT rules for traffic between various network segments. | |||||||||||||||||||||
| Q: | I can connect to the web from an internal client, but not from the ISA Server itself. What is wrong? | |||||||||||||||||||||
| A: | You need to have a rule that allows traffic to and from the local host. You can create the rule yourself, or find the built-in system rule that provides the configuration you need and enable it. | |||||||||||||||||||||
| Q: | Users on my network have started complaining that web browsing is terribly slow. I quickly checked Task Manager on the firewall, and the CPU and memory are being heavily used. What is the problem? | |||||||||||||||||||||
| A: | In many cases the problem will be related to caching as part of the web proxy service. Web proxy caching requires lots of RAM, and depending on the number of clients supported and cache settings, can require lots of disk space as well. If these resources start to run out the CPU can become heavily taxed as well. Check your cache settings to determine if you can lighten the load on the box. Also, try to determine which resources are most lacking, and add more if possible. | |||||||||||||||||||||
| Q: | I am having network problems. How can I fix them? | |||||||||||||||||||||
| A: | If you are having intermittent connectivity issues your primary troubleshooting tools should be alerts, sessions, and logging. Use these monitoring utilities built into the ISA Server Management interface to try to zero in on the specific issue you are having. I would begin by looking for something obvious in the Alerts tab. Then use the Sessions tab to monitor what is happening as it happens as well as using the query functionality on the Logging tab to mine for evidence. | |||||||||||||||||||||
| Q: | I have configured Connectivity Verifiers for my main network services such as DNS and AD. However, DNS keeps going down, but ISA Server always reports it as online | |||||||||||||||||||||
| A: | You have probably set up verifiers that rely on pinging the host to determine if the service is online, but this validates only that the host is running. The service may have locked up or been accidentally stopped. The TCP connect verification option is the only way to reliably ensure that the service is still running on the host. Keep in mind that although both options require minimal resource the TCP connect option is more resource-intensive for both the remote and the ISA Server. On taxed hosts these relatively small additional resource requirements can add up. |
