Re: Removing ISA 2000

Tech-Archive recommends: Fix windows errors by optimizing your registry

'I don't know how to do it so you should follow my advice and remove your
security system'

Sounds bloody ridiculous doesn't it? You're going to replace a fully
certified firewall system with a simple NAT router because a person too
stupid to know how to perform something basic tells you to.

You don't need to individually uninstall the updates, just ISA. Remember to
remove the firewall client from the PC's.
Remove your 2nd NIC too else the VPN will be terminated at the FVS outside
your domain.

Rerun the CEICW after restarting the system after removing the 2nd NIC.

You lose:
all application layer filtering
malformed URL filtering
egress control (outgoing)
user level control
reporting

but other than that it sounds like a plan. A damned silly plan, but a plan
nonetheless.

"Richard Wagstaff" <rwagstaff@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:ObOjA13RFHA.3704@xxxxxxxxxxxxxxxxxxxxxxx
> Many thanks for the speedy reply.
>
> Looking at the article it talks about letting traffic from the LAn to the
> Internet. We need to let the Internet to the LAN (!)
>
> Let me explain.......
>
> I'm sure you know the situation - small business, boss asks "an expert",
> "expert" states a soloution, boss makes decision.
>
> As mentioned previously, we currently have ISA and 2 NIC's and I reckon
> I'm about 10% up the ISA learning curve. We also have a remote office
> with 3 PC's running EPOS systems which need to an application server here
> in the main office.
>
> "Expert" says fit a Netgear FVS338 VPN Firewall in each office and create
> a VPN tunnel. I ask how to pass all port requests through the FVS338 to
> the ISA and "Expert" says ditch ISA and just let FVS338 do the job.
>
> "Expert" then says to boss that it will cost half an arm and leg for him
> to set up FVS338 & ISA or very little to set up FVS338 without the ISA.
> Boss sees the £ signs and tells me (after days of discussion) to ditch
> ISA.
>
> ISA has to be ditched! (unless anyone know how to set up the FVS338 as a
> VPN only - Netgear support can't seem to answer that!)
>
>
> Regards,
>
> Richard
>
>
>
> "Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@xxxxxxxxxxx>
> wrote in message news:OPfXWp3RFHA.2680@xxxxxxxxxxxxxxxxxxxxxxx
>> Follow the link and change it so ISA lets everything out the door just
>> like RRAS.
>>
>> Follow these instructions:
>> Why does Quickbooks not work with ISA:
>> > http://www.smallbizserver.net/Default.aspx?tabid=75
>>
>> Richard Wagstaff wrote:
>>> Ummm...... "Throw ISA to all/all/all" I haven't a clue what that
>>> means!! [sorry]
>>>
>>>
>>>
>>> Richard
>>>
>>>
>>>
>>> "Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <sbradcpa@xxxxxxxxxxx>
>>> wrote in message news:ePdY4D3RFHA.3544@xxxxxxxxxxxxxxxxxxxxxxx
>>>
>>>>Throw ISA to all/all/all..it does the same as RRAS
>>>>
>>>>
>>>>Why does Quickbooks not work with ISA:
>>>>http://www.smallbizserver.net/Default.aspx?tabid=75
>>>>
>>>>
>>>>Richard Wagstaff wrote:
>>>>
>>>>>I have been asked to remove ISA 2000 from our SBS 2003 and reading
>>>>>through previous posts the basic answer seems to be "don't". However,
>>>>>I still need to uninstall the beast (I wont go into the hours of
>>>>>arguments and discussions just now) and convert a 2 NIC ISA system into
>>>>>a SBS 2003 Standard setup with a hardware firewall.
>>>>>
>>>>>Am I right in thinking I just use Add/Remove programs to remove ISA
>>>>>Server 2000 Updates, ISA SP1 & ISA (in that order) and connect the
>>>>>Hardware firewall between the modem & 2nd NIC and re-run the Internet
>>>>>Connection Wizard?
>>>>>
>>>>>Would I then be better to have a single NIC or retain the 2 NIC's and
>>>>>am I likely to have any problems with Exchange connectivity?
>>>>>
>>>>>Many thanks.
>>>>>
>>>>>Richard
>>>>>
>>>>>
>>>>>
>>>>>
>>>
>


.

Relevant Pages

  • Re: gateway vpn how-to?
    ... After configuring the "Set up Local ISA VPN Server" wizard, ... After that, reboot the server. ... VPN client connections", finish the configuration afterwards. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Outgoing VPN Error 619
    ... Outbound VPN problem: ... Q1 - is the test client configured as SecureNET? ... Q2 - what do you find in the ISA logs for your tests? ... I've checked in local network rules and I do have a rule called VPN clients ...
    (microsoft.public.isa.vpn)
  • Re: Switching IP address ranges
    ... ISA Server performs deep inspection of Internet ... inspection of all VPN traffic. ... Forth just because SBS is cheap it does not mean is bad. ... I used to believe on solid state firewalls (which SonicWall is not) but they ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA2004 kills VPN outbound
    ... I understand that after you upgraded ISA 2000 to ISA ... 825763 How to configure Internet access in Windows Small Business Server ... Then, establish the VPN connection again, does it work this time? ... FW client and configure the client as a SecureNAT client. ...
    (microsoft.public.windows.server.sbs)
  • RE: Configuring ISA 2004 for outbound MS VPN access
    ... internal users to connect to an external VPN server through Microsoft ... Internet Security and Acceleration (ISA) Server 2004. ... remote VPN network is not in the local ISA server's LAT (for ISA 2004, ... Joining Networks over the Internet with a Gateway to Gateway VPN: ...
    (microsoft.public.windows.server.sbs)