Dr. Tom Shinderamp;#039;s Configuring ISA Server 1002004 [Electronic resources]

Performing an Upgrade Installation

If you are currently running ISA Server 2000, you have the option to:

• Perform an in-place upgrade, or

• Migrate current ISA Server 2000 settings to a clean ISA 2004 installation.

Migrating and upgrading from ISA Server 2000 is a complex topic, and there are a number of issues that you must be aware of before upgrading or migrating. A number of complexities are introduced during the upgrade or migration process because:

• The ISA 2004 networking model is completely different from the ISA Server 2000 networking model,

• Bandwidth rules are not supported in the new ISA firewall,

• Active caching is not supported in the new ISA firewall,

• Permissions are not migrated to the new ISA firewall,

• Logging and reporting configuration is not migrated,

• Packet-filter configuration is not migrated because the new ISA firewall does not have, nor does it require, a packet-filter configuration,

• Application filters and Web filters for ISA Server 2000 are not compatible with the new ISA firewall, and

• The ISA firewall's Routing and Remote Access functionality and integration is quite different than that used by ISA Server 2000.

These and other issues can make the upgrade process somewhat complex. We hate to read computer books that refer you to the Help file for more information, but we're going to do that here. You will need to refer to the ISA Server 2004 Help file for information on the procedures and considerations related to an upgrade installation. The Help file contains information on how the ISA firewall interprets ISA Server 2000 policy and information that is retained and dropped.

However, if you want to do what we do, document your ISA Server 2000 configuration, and then replicate your policy once you understand how the new ISA firewall works and how it interprets your previous ISA Server 2000 firewall policy.