Suraj Singh's information Security Blog

For people who work on information Security.

Migration from ISA server 2006 to TMG 2010

Migration from ISA server 2006 to TMG 2010

  • Comments 10
  • Likes

For migration from ISA server 2006 to TMG 2010 one very usefull document is http://technet.microsoft.com/en-us/library/dd440994.aspx

Still we have to make sure we are doing couple of things right e.g. when we install TMG 2010 following the wizards we might end up creating a web access policy rule. This is because wizards let admin to create a web access rule to allow web access through TMG just after the TMG installation.

 After creating that rule if we then try to do server level import of the ISA configuration which we exported earlier from our ISA server 2006. This import would fail.

 So if we have planned to migrate from ISA server 2006 to TMG 2010. Then we should not create the web access rule just after the installaton using the intitial configuration wizard. We need to make sure that TMG is without any rules and is plain vanilla, before Importing the ISA server configuration on it.

 

Comments
  • Are rules from ISA 2006 compitable with TMG 2010?

    I want to do a clean install and import rules out 2006 to TMG, only i must know if the rules have the same functional level..

  • yes they are compatible and you can import configuration from ISA 2006 and put it on TMG 2010.

    For complete migration: Make sure you are doing a clean install of TMG2010 and not creating any initial rules at the time of TMG2010 installation as it allows you to create initial web access rules as initial configuration wizard.

  • In our company we have 2 ISA 2004 servers and 1 ISA 2006. this with 3 internet connections.

    I must migrate the servers to 1 with Xen as OS system.

    Can i do this, thers not much information about this area.

    Do you have any experience with TMG on Citrix Xen level?

  • you are planning to migrate from ISA 2006 to TMG or is it from ISA 2004 to TMG? for both you should refer to this article http://technet.microsoft.com/en-us/library/dd440994.aspx

    TMG server should be installed on a 64 bit windows 2008 server,it could be on a physical or virtual server.

  • Can refer this URL for your all such quest :-

    technet.microsoft.com/.../ee796231.aspx

  • yes ashok, that what is mention in my very first blog post blogs.technet.com/.../troubleshooting-isa-server-issues.aspx

    it talks about the unsupported scenarios

  • if i have made clean installation of TMG 2010 and run getting started wizard and made a new rule,can i  import configurations from ISA 2006

  • i have three site in which i am running ISA 2006 now i have installed one EMS server and on three side i have have standalone TMG machine but they are the part of EMS array if i have to import the policies which i have exported from ISA 2006 so where i need to export on EMS or on indivuall site EMS please reply it to me ...my email address is arsalanbaig84@hotmail.com

  • i wish to generate a report for the logs og tmg 2010 on isa 2006. Is it possible?

  • No, TMG reporting works in a very different way,which is combination of MSDE components and ISARS components which is not present on ISA 2006

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment