April 2007 - Technical Rollup Mail - Internet
News
ISA
ISA Server and Windows Server 2003 Service Pack 2
Recently Microsoft released Service Pack (SP) 2 for Windows Server 2003 (https://www.microsoft.com/technet/windowsserver/sp2.mspx). ISA Server was tested with the Windows service pack quite extensively. Unfortunately Microsoft discovered after the release of the Windows service pack that there are several issues that have potential ill-effects on ISA Server. This summarizes the currently known issues, and suggestions on how to mitigate those issues.
1. If you run ISA Server 2004 Enterprise Edition with or without the ISA Server SP2, you must install ADAM SP1 on the ISA Server Configuration Storage Server prior to installing the Windows Server 2003 SP2. ADAM SP1 can be downloaded from https://www.microsoft.com/downloads/details.aspx?FamilyId=9688F8B9-1034-4EF6-A3E5-2A2A57B5C8E4&displaylang=en.
If you install Windows Server 2003 SP2 without first installing the ADAM SP1, ISA Server will not start after the installation, and you will have to uninstall Windows Server 2003 SP2. Further information is available in the Windows Server 2003 SP2 release notes, at https://technet2.microsoft.com/WindowsServer/en/library/ed5382af-e819-4d33-ace0-225d31b7ab751033.mspx?mfr=true .
2. If you run ISA Server 2000, 2004 or 2006 Standard or Enterprise editions on a multi-core / multi-processor 32-bit computer, and the CPU is heavily utilized, you might experience performance degradation in certain deployment scenarios after installing Windows Server 2003 SP2. The issue stems from a change in interrupt handling introduced in SP2.
To correct the issue you must download and run the Interrupt Affinity Tool (intfiltr) available in Windows Server 2003 resource kit (https://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-96ee-b18c4790cffd&DisplayLang=en).
You can read about installation and usage of intfiltr.exe in https://support.microsoft.com/kb/252867.
3. If your network adaptors (NICs) support receive-side scaling (RSS), then in certain NAT scenarios ISA Server 2000, 2004 or 2006 Standard or Enterprise editions might not transfer packets from one NIC to the other after installation of Windows Server 2003 SP2.
To correct the issue you must disable RSS support - follow the instructions in https://support.microsoft.com/default.aspx?scid=kb;EN-US;927695.
What’s New at the ISA Server TechCenter
There are a number of new documents available at the Microsoft® Internet Security and Acceleration (ISA) Server TechCenter:
https://www.microsoft.com/technet/isa/default.mspx
Web Server Farm Load Balancing in ISA Server 2006. ISA Server 2006 provides Web server farm load balancing to enable administrators to publish a farm of Web servers performing the same role or hosting the same content. This document provides a feature overview and deployment details.
https://www.microsoft.com/technet/isa/2006/deployment/wplb.mspx
Performance Counters. This document provides a comprehensive list of ISA Server 2006 performance counters.
https://www.microsoft.com/technet/isa/2006/technicalreference/performance_counters.mspx
How to Securely Publish a Configuration Storage Server in ISA Server 2006. ISA Server 2006 Enterprise Edition supports a connection to an alternate Configuration Storage server securely published by ISA Server. This is especially useful if a virtual private network (VPN) connection from an ISA Server array to a Configuration Storage server is unavailable. This document provides a walk-through of the procedures required for publishing.
https://www.microsoft.com/technet/isa/2006/deployment/secure_css_publishing.mspx
Publishing Exchange Server 2007 with ISA Server 2006. This paper provides a deployment walk-through that describes how to publish the beta version of Exchange Server 2007.
https://www.microsoft.com/technet/isa/2006/deployment/exchange.mspx
Configuring ISA Server to Work with SSL Accelerators. Secure Sockets Layer (SSL) accelerators can be used with ISA Server 2006 to reduce the HTTPS handling and inspection load on the ISA Server computer. This paper describes how to configure ISA Server to work behind an SSL accelerator.
https://www.microsoft.com/technet/isa/2006/deployment/ssl_accelerator.mspx
Customizing HTML Forms in ISA Server 2006. Clients input credentials into an HTML form when authenticating using forms-based authentication. This document describes how you can customize ISA Server 2006 form sets.
https://www.microsoft.com/technet/isa/2006/html_forms.mspx
Secure Logoff from Published Web Sites. Using HTML form authentication, ISA Server issues a cookie identifying the user, so that the user does not need to be reauthenticated. This document describes how to implement secure logoff so that when ISA Server receives a logoff URL in a user request, it logs off the user, removes the cookie from the user computer, and notes that the cookie has been revoked.
https://www.microsoft.com/technet/isa/2006/logoff.mspx
Downloads
ISA
ISA Server 2006 VHD
This download comes as a pre-configured VHD. ISA Server 2006 is the integrated edge security gateway that helps protect your IT environment from Internet-based threats while providing users with fast and secure remote access to applications and data.https://www.microsoft.com/downloads/details.aspx?FamilyID=234c9dda-5452-4946-9e2f-d4b64082814e&DisplayLang=en
BizTalk
BizTalk Server 2006 PDF Help Files
Microsoft BizTalk Server 2006 Documentation in PDF format.
https://www.microsoft.com/downloads/details.aspx?FamilyID=8f3ec693-2865-4b85-8455-745511ea4267&DisplayLang=en
Microsoft BizTalk Server 2006 Documentation Update
Updated Documentation for BizTalk Server 2006 - CHM format.
https://www.microsoft.com/downloads/details.aspx?FamilyID=3294ddaf-9f67-409f-a92d-2f6070dc0d1a&DisplayLang=en
IIS
Optimizing the Performance of Microsoft Dynamics CRM 3.0 White Paper
This white paper discusses how to optimize the performance of your Microsoft Dynamics CRM 3.0 system.
https://www.microsoft.com/downloads/details.aspx?FamilyID=6b32e0b3-5520-48a7-b3cd-d8477d084821&DisplayLang=en
Delivering Collaborative Application Services as a Hosted Service Offering
SharePoint Hosting saw an opportunity to support small and mid-sized organizations by offering outsourced collaboration, task management, and contextual document management services based on Windows SharePoint Services.
https://www.microsoft.com/downloads/details.aspx?FamilyID=b055e82d-b96a-475a-b5b8-dc4c4f3800a6&DisplayLang=en
Increasing ARPU and Customer Retention with Hosted Business Application Services
WebCentral Partner Case Study
https://www.microsoft.com/downloads/details.aspx?FamilyID=2e985ebb-d2f5-4971-ba83-04dd8a62e398&DisplayLang=en
MSCOMOPS Podcast
https://www.microsoft.com/downloads/details.aspx?FamilyID=bd931607-d06d-4315-9f1f-f9391d26e396&DisplayLang=en
Windows-based Hosting 4.5 Help
The Microsoft Solution for Windows-based Hosting Version 4.5 provides hosting service providers with tools, tested best practices, scripts, and code samples designed to efficiently deploy offerings on the Windows platform.
https://www.microsoft.com/downloads/details.aspx?FamilyID=aff5a290-ecae-46a4-b846-0ec703c0e748&DisplayLang=en
New KB’s
ISA
Authentication fails when client computers use Internet Explorer 7 to authenticate with an upstream ISA Server computer through a downstream ISA Server computer that does not require authentication
https://support.microsoft.com/kb/927265
ISA Server 2004 and ISA Server 2006 do not support traffic redirection
https://support.microsoft.com/kb/888042
Error message when you use the IncludeNetworkIpRangeSet property of the FPCClientAutoScript object: "Object doesn't support this property or method"
https://support.microsoft.com/kb/932945
Microsoft Internet Security and Acceleration (ISA) Server performance may be reduced if the Exchange Server 2003 server is processing unusually heavy traffic
https://support.microsoft.com/kb/842438
How to maintain additional local address table entries for an ISA firewall client
https://support.microsoft.com/kb/268326