Release Notes

Microsoft Internet Security and Acceleration Server 2004 Service Pack 2 Release Notes

2. Installation Notes for Enterprise Edition

6. Hotfixes Included in the Service Pack

1. Additional Resources

Service pack features are described in detail in the document ISA Server 2004 Service Pack 2.

ISA Server context-sensitive Help was not updated for this service pack. For information about specific Service Pack 2 features, use the F1 key to open ISA Server Help, and search for the relevant Help topic.

Important information about installation is available in the article How to install ISA Server 2004 hotfixes and updates. This includes instructions for creating a log file during installation, unattended mode installation, administrative installation, and important information about installation in ISA Server 2004 Enterprise Edition.

2. Installation Notes for Enterprise Edition

This update should be installed on the Configuration Storage server, as well as on each ISA Server array member.
ISA Server services may not start after installation or uninstallation of ISA Server updates, if the computer running the services is not synchronized with the Configuration Storage server. In this case, manually restart the services from the ISA Server Management Monitoring node.

Back to Contents

3. Installation

After you install the service pack, the new version number for ISA Server will not appear in the ISA Server Management details pane (under Configuration). You can view the correct version number in the Windows Add or Remove Programs dialog box, by clicking Click here for support information.
After installing this service pack, you may receive an alert indicating that the cache failed to initialize. You can safely ignore the alert. This alert will typically be followed by a second alert indicating that cache restoration has taken place, and the ISA Server cache will be fully functional.
If ISA Server services are installed, ISA Server will enter lockdown mode during installation. Following installation, the ISA Server computers or array members will have to be restarted
To be able to uninstall ISA Server 2004 Service Pack 2 after installation, Microsoft Windows Installer 3.0 must be installed before you install the service pack. This application is already installed with the latest Windows service packs. To determine whether the application is installed, verify that the version number of the file %windir%\system32\msiexec.exe starts with 3. Otherwise, download it from Windows Installer 3.0 Redistributable.
The Firewall Client update in this service pack is identical to the update in ISA Server 2004 Standard Edition Service Pack 1. If you have already applied that update, there is no need to apply it again.
If you install ISA Server 2004 with Service Pack 2 from a slipstream CD/share, clicking the Start menu shortcut ISA Server Performance Monitor may launch Setup in Repair mode. To avoid this issue, delete the shortcut from the Start menu.

Back to Contents

4. Uninstallation

During uninstall, the service pack installation source files are required (for example, the CD or the network location of the ISA Server Standard Edition installation files). If the files are not accessible, the Microsoft Firewall service may fail to start. In this case, either uninstall again, ensuring access to the installation source files, rerun the Service Pack 2 installation, or run ISA Server Setup in the Repair mode.
If you cancel the uninstallation of the service pack when you are not connected to the installation source files, ISA Server services will fail to start. If this happens, run the service pack installation again, run Repair, or uninstall again, allowing the uninstallation process to run to completion.
Before uninstalling Service Pack 2 from ISA Server 2004 Standard Edition, disable Routing and Remote Access.
If after you install Service Pack 2, you use the Modify mode of installation to install ISA Server 2004 services, uninstallation will not remove the Service Pack 2 Web filters. We recommend that in this scenario, before uninstalling ISA Server Service Pack 2, run ISA Server installation in Repair mode.

Back to Contents

5. Administration

Diffserv support is provided for Web proxy clients.
The use of BITS caching with servers other than Microsoft Update or Software Update Services servers is not supported.
If you upgrade the Firewall client this release, you will be prompted to restart the computer, and receive the popup error: "0x800706c6 - The array bounds are invalid". You can safely ignore the error, and should restart the computer. To avoid this issue you can either:
- Uninstall the Firewall client, restart the computer if required, and then install the new version.
- Close Microsoft Firewall Client Management (right-click on its tray icon and choose "Exit"), and stop the fwcagent service.
This table details the scenarios in which the import and export of confidential information is supported.

From	To	Support
ISA Server 2004 Standard Edition with Service Pack 2	ISA Server 2004 Standard Edition without any service pack installed	Not supported
ISA Server 2004 Standard Edition with Service Pack 2	ISA Server 2004 Standard Edition with Service Pack 1	Supported
ISA Server 2004 Standard Edition with Service Pack 2	ISA Server 2004 Enterprise Edition.	Not supported, wrong password error will be triggered
ISA Server 2004 Enterprise Edition with Service Pack 2	ISA Server 2004 Enterprise Edition	Supported

Back to Contents

6. Hotfixes Included in the Service Pack

Service Pack 2 addresses the following issues, and includes the following hotfixes.

For information, see the following Microsoft Knowledge Base articles:

892144, "How to install ISA Server 2004 Standard Edition Firewall Client Service Pack 1"
894458, "When you configure the No Connectivity alert to send an e-mail notification to an SMTP server, only every second e-mail notification may reach the recipient in Internet Security and Acceleration Server 2004"
894483, "Users receive an "Error Code 502: Proxy error. The parameter is incorrect. (87)" error when they visit certain URLs after you configure HTTP content filtering based on signatures or on extensions in ISA Server 2004"
894485, "You cannot access an ISA Server 2004 Web site through a hardware balancer that is configured to use local triangulation"
894609, "An update is available to prevent Configuration Storage server account settings from expiring when you use certificate authentication in ISA Server 2004, Enterprise Edition"
894679, "Users who do not have the appropriate permissions can receive restricted content from ISA Server 2004"
895190, "The daily summary and the log report do not contain details of network traffic that passes through an ISA Server 2004 computer"
895202, "You may receive a blank page when your browser submits a POST request to an ASP Web page through ISA Server 2004"
895320, "After you turn off logging for a Web publishing rule, ISA Server 2004 continues to log entries that match the rule"
896055, "You cannot assign a static IP address for client computers in a site-to-site VPN connection in Microsoft Internet Security and Acceleration Server 2004"
896495, "The Firewall service may not start in Internet Security and Acceleration (ISA) Server 2004 after you select a certificate for a SSL listener"
897075, "Session state management may not work as expected when ISA Server 2004 accesses a Web site that uses the round robin feature of DNS to achieve load balancing"
897716, "RPC data may be blocked, and Outlook may not start in Windows Server 2003 with SP1"
897717, "Internet Security and Acceleration Server 2004 stops responding or performs slowly after you configure a Web listener to use OWA forms-based authentication"
898066, "FIX: You cannot use a different SSL certificate for each array member in an ISA Server 2004, Enterprise Edition-based array"
898553, "ISA Server 2004 may stop responding when IP addresses from multiple subnets are bound to the same adaptor"
898623, "Users who are connected to the Internet experience a delay when you create a new access rule or when you apply changes to an existing access rule in ISA Server 2004"
898717, "FIX: The "Maximum number of VPN clients allowed" value is reset when you install ISA Server 2004 Enterprise Edition and join the server to an existing array"
899137, "You cannot use the ISA Server administration COM objects to delete a rule in ISA Server 2004"
899476, "FTP commands do not work if the client computer connects to a downstream ISA Server computer where firewall chaining is configured"
900249, "When you try to re-authenticate the OWA client on the forms-based authentication page, you may receive an "Unknown Request" error message in ISA Server 2004"
900256, "w3pinet leaks 49 AFD endpoints for every FTP GET request when Passive FTP is used"
900919, "You cannot specify a path statement that ends in a wildcard character when you create a Web publishing rule in ISA Server 2004"
901109, "The dial-up connection to a remote network is continually dialed when a client computer makes a request for a URL that is not defined in any LDT in ISA Server 2004"
902414, "You cannot trace the details of the traffic that passes through the Web Proxy Filter in Internet Security and Acceleration (ISA) Server 2004"
903746, "Autoconfigure should not route internal requests to proxy server"
903940, "You cannot disable the "Web Browser" tab on a computer that is running Firewall Client for ISA Server 2004"
904825, "PPTP Publishing: GRE Packets are not modified based on Server Publishing settings"
905556, "The GetUserToken callback function does not return the User ID as you expect when an authenticated user connects from a firewall client to a remote site through ISA Server 2004"
905655, "A report displays at least one user after you configure the report to display zero users in ISA Server 2004"
905767, "The ReturnAuthRequiredIfAuthUserDenied property setting does not work if the access rules include a Content Type rule in ISA Server 2004"
908501, "Web proxy clients cannot access some Web sites through ISA Server 2004"
909062, "A client computer connection request fails, or the client takes a long time to connect to a secure Web site through a downstream ISA Server 2004 proxy server"

Back to Contents

Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the example companies, organizations, products, people, and events depicted herein are fictitious and no association with any real company, organization, product, person, or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation.

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.

Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries/regions.

Back to Contents