Re: When is next version of ISA coming out?

Hi there,

Although I agree that some of the features you listed there make sense, I
think that a lot of them don't fit the MS product philosophy. ISA was never
supposed to be the end-all solution to all the world problems, and I don't
think that will change in the future. That is why there is an established
network of MS partners (ISV's - Independent Software Vendors) that provide
add-ons to ISA for the extra functionality.

I don't know about you, but I prefer myself to pay for a fully-featured
product that extends ISA and does very well what I need, instead of relying
on a "free" and "light" version included with ISA. As I said there are 3rd
party products for at least 70% of the functionality you listed that perform
admirably. Out of the rest, again some make sense and other don't (at least
not to me). Case in point: built-in signatures to block certain type of
traffic. Seeing as the application signatures change very often, and
moreover the current trend is to build applications whose "signature" is
customizable, such a database of signatures is probably not worth the
effort. Much useful is the mechanism (that already exists in ISA2004)
allowing one to specify exactly what signatures to block. I guess we would
want that extended to other protocols as well, not only to http - but
certainly a database of signatures won't help with that :-)

Virgil



"M.Richards" <mrich232@xxxxxxx> wrote in message
news:emcs14evFHA.724@xxxxxxxxxxxxxxxxxxxxxxx
>> Not happy with ISA2004?? Out of pure curiosity, what exactly do you need
>> that's not there in ISA2004?
>
> Hi Virgil:
>
> Not unhappy, just wondering what's brewing in the kitchen.
>
> There's a bunch of things that might be included: built-in antivirus with
> MS's purchase of Antigen, the Next-Gen TCP/IP stack with it's enhanced
> filtering/IDS
> capabilities(http://www.microsoft.com/technet/community/columns/cableguy/cg0905.mspx),
> better IDS features, putting the HTTP referrer field in Web Proxy logs,
> built-in RPC-Over-HTTPS proxy as an Application Filter, .NET and Monad
> integration, "edge server" capabilities similar to Exchange in an "edge"
> configuration, real-time replication of the state table to other hot
> spares or NLB members, better RADIUS integration that doesn't require PAP
> or little-known registry value tweaks, an application filter just for SQL
> Server 2005 or SharePoint or whatever, increasing the number of permitted
> CPUs in standard edition now that dual-core hyper-threaded CPUs are coming
> out, ability to boot from DVD and run entirely in RAM (unlikely), support
> for other distributed caching protocols besides CARP, support in RRAS for
> BGP, a full pre-packaged implemenation of VPN quarantine with good tools,
> built-in rootkit detection and defenses, additional support for
> third-party hardware accelerators for doing application-layer inspection,
> ability to do historical queries against text logs in addition to MSDE
> logs, exposure of all ISA COM objects via WMI, enhancements to the ISA COM
> objects and SDK, built-in SOCKS5 support with the bells&whistles necessary
> for full interoperability with Mac and Linux clients, even more low-level
> control over RPC/DCOM/COM+ details, built-in web filter for
> XML/SOAP/BizTalk, built-in HTTP signatures for allowing/blocking a large
> variety of P2P/IM/whatever-over-HTTP clients, and in general new stuff to
> help ensure that ISA won't be just another "firewall also-ran" in the long
> run (or new stuff to show that MS isn't going to just abandon ISA out of
> the blue like past products just because it isn't selling as well as
> they'd hoped).
>
> Anyway, new stuff like that... :-)
>
> Do you happen to know rough time-lines or new feature sets?
>
>
>


.

Relevant Pages

  • Booting problems
    ... am going nuts compiling my kernel of release 4.11. ... options SOFTUPDATES #Enable FFS soft updates support ... device isa ... pseudo-device splash ...
    (freebsd-questions)
  • Booting problems
    ... am going nuts compiling my kernel of release 4.11. ... options SOFTUPDATES #Enable FFS soft updates support ... device isa ... pseudo-device splash ...
    (freebsd-questions)
  • Wireless PCI Card D-Link DWL-G520+
    ... Was anybody able to let the mentioned PCI wireless Card work with the ... I compiled a brand new kernel, adding support for: ... # PCI PCMCIA controllers ... # ISA PCMCIA controllers ...
    (comp.unix.bsd.netbsd.misc)
  • Re: Mysterious ISA firewall /SQL lock-up and server slow-down
    ... Changing the ISA logging to text didn't change anything... ... the server performance task alone as a hunch, and indeed, it didn't cause the ... Performance data collection is triggered by a Task Scheduler task called ... Support Services so that a dedicated support professional can resolve the ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to browse shared folders on DC
    ... Event Source: Userenv ... see Help and Support Center at ... Event Type: Warning ... So you're using ISA, ...
    (microsoft.public.windows.server.active_directory)