Pingback from  "Windows Essential Server Solutions family of products" announcement - David Overton's Blog

Pingback from  Windows Essential Business Server Announcement - David Overton's Blog

Pingback from  SBS 2008 - Officially Essential « Andys Techie Blog

Pingback from  Help and Advice  » Blog Archive   » Small Business Server 2008 (formally known as Cougar) announcement

After posting on SBS 2008 the other day I've had a few questions, so here are some answers Can the

Pingback from  Small Business Server 2008 (formally known as Cougar) announcement | Event Management Security

[updated 23rd Feb 2008] After posting on SBS 2008 the other day I've had a few questions, so here

uak! no kind of web access repor/control...! at least could come some revamped RRas with hourly-timed group-defineable uri-wildcard-supporting access FILTER and some text log so one could exctract info... I can't undertand why is so hard to get MS deliver some RRas URI filter, a mostly wanted feature since 2k betas...

Where's ISA Server?

Hi David,

If ISA is no longer to be included - and we always implement ISA at every SBS site - is the client going to require a full cost implementation of ISA 2006 when moving from SBS2K3 Premium, or will there be an upgrade path? This impacts me now as I was literally about to phone a client who is needing a server upgrade and I was going to recommend he waits for SBS2K8, but he uses ISA2004...

Thanks

Alistair

No ISA!? - We deploy ISA with every SBS implementation we ship and this will therefore negativly impact every "upgrade" we undertake.

When moving from SBS2k3 Premium to SBS2K8 will there be any upgrade path for those who are losing their ISA Server functionality?

We have for example a client running SBS2K3 and ISA with an ftp server in their DMZ and using ISA: what will the implications be for them? - Any ideas?

I know they have an additional server licence - but with Dell for example, you can't buy a bare system, so you can't utilise that license there and whatever happens, clients are still going to need an additional expensive lump of server to use it on. It certainly appears less attractive than the previous offering as it stands.

Cheers

Alistair

Hi David,

Thanks for the reply.

No they are not on SA - as a rule we find the SMB market is not sold on the idea as they perceive it as expensive.

I do think that Microsoft needs to look at this: we could look at firewall devices, we use a Celestix job with embedded ISA, but this is very expnesive for the SMB marketplace and we would therefore look to supply non-Microsoft solutions such as Smoothwall, however this forces us to forge additional relationships with other partners and it is far easier if Microsoft fills that marketplace.

Also, clients do grow, as we did, and again the larger end of the WES market will surely be in the frame for ISA; but if they already have a third party solution they are not going to need to change.

It does seem a retrograde step to me and I'll not enjoy telling our customer that they're losing ISA when they upgrade with no incentive on offer.

Time will tell I guess!

Best wishes

Alistair

No ISA - shocking. We always without fail implement ISA server at our SBS clients. All our customers have SA so hopefully there will be an upgrade path (SBS2003->2008 and seperate ISA 2004->)? Bad news for us anyway.

I am happy to see ISA server go.  We recommend and use external firewall/proxy solutions for every implementation of SBS my company deploys. We feel is is simply too dangerous to have the core server also reside at the perimeter of the network.  In our opinion, this is not a best practice, and dangerous for any business, especially small businesses where the local administrator has no comprehension of network security.

I've been implementing SBS server since the Back Office days. It was smart then to use a Firewall apliance and its even smarter now to use a firewall apliance. The server configuration is much simpler without ISA in the mix sticking it's nose into everything. I personally have used the Sonicwall apliances which are perfect for a small business and for a 25 user environment only add a cost of about 1500.00 for purchase and configuration. Most of my small business server clients are in the 10 user range and that ends up being even cheaper. I won't miss the ISA server one bit.

re ISA.  I'm in the camp that likes it...despite all the seemingly logical arguments of how dangerous it is to have SBS directly connected to the internet, i've done just that for at least 5 years by the grace/effectiveness of ISA.  

I currently run 8 different websites, not including the standard SBS sites on SBS behind ISA.  No problems other than the occasional hacker who unsuccessfully runs a dictionary attack on RWW.

I am very dissappointed that ISA is taken from SBS.  It will be just one more hurdle for me and my clients that will delay SBS 2008 rollouts.

Bummer!

Curious: those proclaiming the dangers of ISA on SBS ... any actual stories of SBS's being compromised because of ISA other than seriously botched configurations?

I deploy loads of sbs 2000,2003 2003 R2 servers i have never installed isa on any customer site even when we purchased the premium version

Hardware firewall and VPN solution for the site to site branch office is the best way to go

Why make a server work harder by implementing ISA when you can install a Cisco router with firewall feature set as standard.  Uncomplicated and simple is best!

No ISA, no interest.  No reason to even consider moving away from SBS 2003.

For my needs, it is just that simple.

Keith

Good, no ISA server - never liked it anyway. How about a drastically scaled down email solution. Exchange maybe great for corporate clients but its way over the top for small businesses. And its terrible to troubleshoot and rescue mail if exchange goes down. Something simpler is required, possibly built along the lines of a supercharged Pop manager.

Cheers, Jon