Internet Security and Acceleration (ISA) Server Service Pack 1 (SP1) provides the latest updates to ISA Server. ISA Server SP1 is a very important milestone. It includes fixes to provide an even higher level of reliability and stability to customers. Microsoft strongly encourages customers to install ISA Server SP1 on all ISA Server computers.
Before installing ISA Server SP1, see the ISA Server Support Web site for the latest information about ISA Server.
Notes:
ISA Server SP1 is the same for both Standard Edition and Enterprise Edition, and includes:
ISA Server SP1 may be installed only on a computer running a licensed version of ISA Server 2000. In addition, Windows 2000 Service Pack 2 must be installed on the server before installing ISA Server SP1. This service pack may be downloaded from the Windows 2000 Support Web site.
Notes:
ISA Server SP1 is downloaded from the Web using a self-extracting file (ISASP1.exe).
For SP1 installation to complete successfully, the computer will be restarted at the end of the installation process.
To install ISA Server SP1:
When the installation finishes, the ISA Server computer will reboot. After rebooting, ISA Server SP1 installation is complete.
Notes:
During installation, the program adds a new entry to the Add/Remove programs applet, enabling you to uninstall ISA Server SP1 and restore the system to its pre SP1 state.
To uninstall ISA Server SP1:
Notes:
SP1 provides the capability to individually uninstall hot fixes that are released and installed after the SP1 release.
To uninstall a hot fix:
Notes:
After you have saved Service Pack 1 files to your hard drive, you can run any of the SP1 command line switches from a command prompt. Command-line switches are provided to allow scripting ability.
| Command Switch | Description |
|---|---|
| -q | Installs the service pack in quiet mode, without any user interface. |
| -USP | Uninstalls the latest service pack |
| -UHFX | Uninstalls hot fix number X (where X is the number of the hot fix) |
Notes:
ISA Server SP1 enhances the stability of the Firewall Client. Therefore, it is recommended that ISA Server client computers be updated with the ISA Server SP1 client fixes.
The client setup must be run directly from the mspclnt share. Running the client reinstall by using the client Add/Remove programs CPL applet or running the client setup from any location other than the mspclnt share will not update the client with the SP1 fixes.
To upgrade the client to ISA Server SP1:
ISA Server SP1 Firewall Client bug fixes are described in the Knowledge Base (KB) articles. For details about the Firewall Client bug fixes, refer to KB article Q313249 which provides a complete listing of all the articles describing ISA Server SP1 bug fixes (KB numbers and titles).
ISA Server SP1 includes all ISA Server bug fixes released prior to SP1, as well as bug fixes released concurrently with SP1. These fixes are described in the Knowledge Base (KB) articles. KB article Q313249 provides a complete listing of the articles describing ISA Server SP1 bug fixes (KB numbers and titles).
Hot fixes released before ISA Server SP1 are included in ISA Server SP1. These hot fixes are described in the Knowledge Base (KB) articles.
| KB Article | Title |
|---|---|
| Q283213 | Blocking and Logging Traffic on ISA Server Internal Interfaces |
| Q292010 | High Memory Consumption by SMTP Message Screener Under Stress |
| Q292013 | Unregistered Fltrsnk1.dll Starts with Inetinfo.exe |
| Q285812 | Cannot Configure or Use the SMTP Filter if the Decimal Symbol is not a Period |
| Q285807 | Rule Fields in Firewall Log are Sometimes Not Logged Properly |
| Q288247 | Access Violation in Mspadmin.exe with ISA Server with Multiple IP Addresses on an External Interface |
| Q292014 | Deleting Disabled SMTP Filter Attachment Rule Leaves Corrupted Rule |
| Q291427 | Only the First Web Site is Returned Using Web Publishing for Multiple Sites |
| Q292017 | Content-Type Value Should be Stripped from Parameters Before Check |
| Q292018 | Slow Response from Downstream ISA Server Using Web Proxy Chaining |
| Q292545 | Autodetection Does Not Work for Chinese and Korean Versions of Browsers |
| Q290731 | Firewall Service (Wspsrv.exe) Problems with High S-NAT Client Load |
| Q291000 | External MAPI Clients Cannot Connect with RPC |
| Q292546 | Firewall Service (Wspsrv.exe) Hangs When Handling RTSP Streams |
| Q293161 | "STOP 0x000000D1" When Passing Fragmented Packets Without NAT |
| Q293863 | Multiple Overdue Tasks Are Run and Alerts Are Issued for a Short Period |
| Q295279 | Web Proxy Service Crashes If URL Requests a Specifically Malformed Argument |
| Q295090 | Access Violation in W3proxy.exe Because of HTTP VARY Header Processing |
| Q297080 | Incomplete HTML Pages and Random Authentication Prompts If ISA Server Is Chained to Upstream Proxy |
| Q301425 | ISA Server Does Not Cache Responses that Contain the Location Header |
| Q297324 | Multiple Authentication Dialog Boxes Are Displayed When You Use Access Control |
| Q300707 | Invalid Content-Length Header May Cause Requests to Fail Through ISA Server |
| Q295386 | PDF Files Are Not Returned from the ISA Server Cache |
| Q294722 | Proxy Error 502 Is Returned by ISA Server Under Heavy Stress |
| Q301380 | Some Server Variables are not Fully Implemented in ISA Server |
| Q303379 | Firewall Client Conflict with Third-Party Layered Service Providers Causes Connectivity Problems |
| Q295389 | Scripts Can Be Run in the Error Page that is Returned by ISA Server |
| Q289503 | Memory Leak in ISA Server H.323 Gatekeeper Service and Winsock Proxy Service When Decoding Malformed Packets |
| Q304340 | The ISA Server Response to Client Options Requests is Limited to a Predefined Set |
| Q305204 | Clients That Use an Automatic Configuration Script May Not Work Because of Proxy Authentication |
| Q295388 | Access Violation Occurs in Firewall Client under High Load |
| Q307784 | Server Publishing Rules Intermittently Fail |
The following are known issues when running ISA Server on Windows .NET Standard Server or Enterprise Server Beta 3 (build 3590) or higher:
Notes:
Please note the following with regard to ISA Server online documentation:
| Topic | Current text... | Should read... |
|---|---|---|
| ISA Server control service | "Net stop mspadmin" | "Net stop isactrl" |
| Service Permissions | HKLM\CurrentControlSet\Services\ W3Proxy\Parameters |
HKLM\SYSTEM\CurrentControlSet\Services\W3Proxy\Parameters |
| Configuring outgoing Web request properties | "By default, ISA Server listens on port 8080 for all HTTP requests and, if selected, on port 443 for all SSL requests." | "By default, ISA Server listens on port 8080 for all HTTP requests and, if selected, on port 8443 for all SSL requests." |
| Bandwidth rules | "Bandwidth rules are available in all installation modes." | "Bandwidth rules are available in firewall and integrated modes. Bandwidth rules are not available in cache only mode. |
| Site and Content Rules | ISA Server may ignore any path specified in the destination set, for particular clients or protocols used. | ISA Server may ignore the site rule if the destination set contains a path, when using certain clients and protocol combinations. |
| How to... Run unattended client installation |
Path\Setup /v " /qn | Path\Setup /v"/qn |
| Configuring Destination Sets | You can also indicate specific paths on a computer that can or cannot be accessed by clients. The path can also include an asterisk as a wildcard. | Note: When creating a destination set for external SSL sites, a path of /* results in inability to access the site. |
| How to... Start a service |
"To start all services, in the console
tree, right-click Services and then click Start all services." |
This note is no longer valid |
| How to... Back up a configuration |
The backup file can be saved to any drive on the local computer. It cannot be saved to another computer. |
This note is no longer valid |
| How to... Configure redirect SSL requests |
"If you select HTTP requests, then ISA Server terminates the secure control channel." |
This note is no longer valid |
Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the example companies, organizations, products, people, and events depicted herein are fictitious and no association with any real company, organization, product, person, or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation.
Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.
© 2001 Microsoft Corporation. All rights reserved.
Microsoft and Windows are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries/regions.