ISA Server 2004 Best Practices Analyzer Tool (IsaBPA)

re: ISA Server 2004 Best Practices Analyzer Tool (IsaBPA)

Marc Grote — Sun, 15 Jan 2006 10:57:38 GMT

Hi,

is it true that i found some bugs?

1) ISABPA reports ISA installed on Virtual PC but Virtual Server 2005 R2 is installed
2) It is not possible to run ISAINFO in ISABPA. ISABPA creates the ISAINFO XML file but nothing is displayed in ISABPA. YOu have to run ISAINFO manually. I tested it with ISABPA 2.5.3439.50 and configuration file 4.0.3440.277 english and german ISA)
3) ISA reports missing certificates but there are two certificates in the computer certificate store.
4) The link to the ISA Security Hardening Guide is wrong. The correct path is: http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/securityhardeningguide.mspx

Thanks Marc

re: ISA Server 2004 Best Practices Analyzer Tool (IsaBPA)

isablog — Sun, 15 Jan 2006 21:49:21 GMT

Hi Marc,

The IsaBPA can run the ISAInfo. You can find the output at the IsaBPA install directory at %programfiles%\Microsoft IsaBPA. To view this file at its best, you can also download the ISAInfo xml parser, which is not included in the IsaBPA package.

The certificates that the IsaBPA are looking for should have a corresponding private key as well as being located at the computer certificate store.

The other issues are known and will be fixed for next version.

re: ISA Server 2004 Best Practices Analyzer Tool (IsaBPA)

tshinder — Mon, 16 Jan 2006 18:20:48 GMT

Overall, I think the BPA at the point is more of a troubleshooting tool for those unquainted with the ISA firewall. But I have to say I didn't find much in terms of "best practices". Thanks! --Tom.

ISA BPA message: 'This ISA Server computer is not hardened'

Patrice — Fri, 17 Feb 2006 15:30:07 GMT

I have installed and tested ISA BPA on my ISA Servers.

The following message 'This ISA Server computer is not hardened' has been displayed in the report.

What are the criteria used to say that the ISA Server is not hardened?
Can we have the exact details of the tests performed?

Patrice

Re: ISA BPA message: 'This ISA Server computer is not hardened'

Seth — Thu, 02 Mar 2006 19:21:45 GMT

I too have run the SCW and BPA tool and still get the message that this server is not hardened. Kind of frustrating when the link it points to for hardening basically says to use the SCW if you have 2k3 SP1 and then not much else otherwise.

re: ISA Server 2004 Best Practices Analyzer Tool (IsaBPA)

isablog — Thu, 09 Mar 2006 22:04:14 GMT

This issue has been fixed in the next ISA Server 2004 Best Practices Analyzer version.
You are welcome to download it from the Microsoft Download Center.

re: ISA Server 2004 Best Practices Analyzer Tool (IsaBPA)

FLV to MP3 Mac — Tue, 09 Jun 2009 04:59:19 GMT

Kind of frustrating when the link it p.