Before you begin installation, consider the topology of your Microsoft ISA Server 2006 Enterprise Edition infrastructure.
Consider the following:
- Will you deploy ISA Server in a workgroup or in a trusted
domain environment? For more information, see "ISA Server
Enterprise Edition in a Workgroup" at the Microsoft
TechNet Web site.
- Where will the Configuration Storage servers be installed?
- Will all the Configuration Storage servers be installed in the
same site? For more information about multi-site installations, see
"Deployment Guidelines for ISA Server Enterprise Edition" at the
Microsoft TechNet Web site.
- How many arrays will you install in the enterprise?
- How many members are in each array?
- Will you manage the enterprise remotely?
- How many remote management computers will you install?
Before you set up ISA Server, review ISA Server EE Installation Requirements earlier in this document. Then, deploy the computers in this order:
- Install a Configuration Storage server. The Configuration
Storage server must be available to install the ISA
Server 2006 component. When you install a Configuration
Storage server, you can join the server to an existing enterprise.
Alternatively, you can create a new enterprise. For the most
effective deployment, we recommend that you create a single
enterprise in your organization. With a single enterprise, you can
manage all the arrays in your organization from a single ISA Server
Management MMC snap-in.
- (Optional) Create arrays, enterprise network rules, and
enterprise policies on the Configuration Storage server. When you
begin installing array members, as described in the next step, you
can join them to arrays that already exist.
- Install ISA Server services on one or more computers. When you
install a computer running ISA Server services as the first member
of a new array, you will specify addresses in the Internal network.
For information about the Internal network, see the product
documentation.
Important: Because the Internal network must include an IP address that is defined on a network adapter that is currently connected and enabled, you can continue past the Internal Network setup page only if the internal network adapter is connected, enabled, and has the correct IP address assigned.
Note the following:
- As part of the installation process, ISA Server modifies the
TCP/IP driver's dynamic port range, setting it to 65,535.
- When you select to install the Advanced Logging component
(MSDE) during ISA Server Setup, several .dll files are installed,
including Ds16gt.dll, and Odbc16gt.dll. The Advanced Logging
component (MSDE) is an optional component, installed by
default.
Stopping and Disabling Services
As part of the installation process, the following services are disabled:
- Internet Connection Firewall or Internet Connection Sharing
- IP Network Address Translation
In addition, the following services are stopped during installation:
- SNMP service
- FTP Publishing service
- Network News Transfer Protocol (NNTP)
- IIS Admin service
- World Wide Web Publishing service
These services are restarted after installation completes.