Article ID: 982902 - Last Review: October 5, 2011 - Revision: 7.0

ISA/TMG Server Virtualization

System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.
Expand all | Collapse all
Microsoft Professional Advisory Services is a support option that provides short-term, proactive, consultative support beyond break-fix product maintenance needs. This includes working with the same technician for assistance with issues like product migration, code review, or new program development and is a remote, phone-based support option. This service is typically used for shorter engagements, and is designed for developers and IT professionals who do not require the traditional onsite consulting or sustained account management services that are available from other Microsoft support options.

For additional information on Microsoft Advisory Services, including on how to engage, refer to this Microsoft web page:

http://support.microsoft.com/gp/AdvisoryService (http://support.microsoft.com/gp/AdvisoryService)

Microsoft Advisory Services Engagement Scenario - ISA/TMG Server Virtualization

Virtualizing your existing ISA or TMG Server Deployment.

Virtualization of server workloads has become an increasingly popular method for making more efficient use of computer hardware and the supporting infrastructure. Virtualization provides many advantages to the data center administrator, while necessarily changing the way they create and manage their deployments. Both ISA server and TMG server are capable of being hosted in a virtual environment as long as the virtualization platform is SVVP certified.

The Pro Advisory scenario will entail a support engineer going over current ISA/TMG setup to understand the present deployment. They will help the customer size the virtual deployment and move the configuration to a virtual deployment. Once the configuration is migrated the support engineer will then perform testing from limited clients to ensure all previous features and scenarios that were configured and working with the physical ISA/TMG server also work with the new virtual deployment.

If a customer needs to implement or set up a brand new ISA or TMG server in a virtualized environment, or move from a present physical setup to a virtual environment, support for the same will be provided as ADVISORY by CSS Security. If the customer already has a virtual setup which has been working in non-test environment handling user load and no new variables have been introduced then support would be provided as break-fix.

Microsoft Advisory Services Engagement

Statement of Work for this Scenario

ISA/TMG Server Virtualization

Included with Scope
  • Review present ISA/TMG infrastructure and settings
  • Review present ISA/TMG policies
  • Testing ISA/TMG virtualization in lab
  • Test all scenarios that were configured and worked with physical ISA/TMG Server
  • Provide Best practices for future projects
Out of Scope
  • ISA/TMG Hardware must meet system requirements
  • This deliverable will not include any customization
  • This deliverable will not include work on any extra scenario that wasn’t configured with ISA/TMG previously
  • This deliverable will not include hardware troubleshooting like work on switches or routers and the customer has to fix his base networking issues if any himself.
  • This deliverable does not include load testing
  • This deliverable will not include troubleshooting the base OS issues on which TMG will be installed
  • This deliverable does not include ISA 2000
  • This deliverable will not include support for non SVVP validated platforms

Self-Help resources for this scenario


Below is a list of self-help resources for this scenario. Microsoft Support Engineers may also use these resources during an Advisory Services engagement.

Security Considerations for Forefront Edge Virtual Deployments
http://technet.microsoft.com/en-us/library/cc891502.aspx (http://technet.microsoft.com/en-us/library/cc891502.aspx)

Virtualization for ISA and TMG Chalk Talk
http://edge.technet.com/Media/Virtualize-your-ISA-or-Forefront-TMG-servers/ (http://edge.technet.com/Media/Virtualize-your-ISA-or-Forefront-TMG-servers/)
Server Virtualization Validation Platform
http://www.windowsservercatalog.com/svvp.aspx (http://www.windowsservercatalog.com/svvp.aspx)
Forefront Edge Security Forums
http://social.technet.microsoft.com/Forums/en-us/category/forefrontedgesecurity (http://social.technet.microsoft.com/Forums/en-us/category/forefrontedgesecurity)
How to build an ISA firewall lab in Virtual PC
http://www.isaserver.org/articles/VPC2004_ISAlab.html (http://www.isaserver.org/articles/VPC2004_ISAlab.html)

APPLIES TO
  • Microsoft Internet Security and Acceleration Server 2004 Standard Edition
  • Microsoft Internet Security and Acceleration Server 2004 Enterprise Edition
  • Microsoft Internet Security and Acceleration Server 2006 Standard Edition
  • Microsoft Internet Security and Acceleration Server 2006 Enterprise Edition
  • Microsoft Forefront Threat Management Gateway 2010 Enterprise
  • Microsoft Forefront Threat Management Gateway 2010 Standard
Keywords: 
kbproadvisory kbinfo kbsurveynew kbtshoot kbnomt kbproforefront kbprowindowsserver KB982902