Red Line Software - we help you manage the efficiency of your office operations.

Overview

Microsoft Internet Security and Acceleration (ISA) Server 2006 provides a path for upgrading your ISA Server 2004 computers, from an existing deployment of ISA Server 2004 to a deployment of ISA Server 2006. During the upgrade process, the upgrade mechanism maps the ISA Server 2004 configuration to a valid ISA Server 2006 configuration.

Note
There is no direct upgrade path from ISA Server 2000 to ISA Server 2006.

Important
We recommend that you install the beta version of ISA Server 2006 in a non-production environment. If you have questions about the beta version of ISA Server 2006, post your questions to the Microsoft ISA Server newsgroups.

What Is in This Document

This guide includes an overview of the supported upgrade scenarios, upgrade requirements, and upgrade procedures for ISA Server Standard Edition and ISA Server Enterprise Edition. The following topics are covered:

• Requirements and Supported Upgrade Scenarios
• Upgrading Standard Edition
• Upgrading Enterprise Edition

Requirements and Supported Upgrade Scenarios

This section provides information about supported upgrade scenarios, supported import configuration scenarios, and upgrade requirements.

Supported Upgrade Scenarios

The following table lists the upgrade scenarios supported by ISA Server 2006.

Note the following:

• In addition to the product upgrade, ISA Server 2006 also supports a build-to-build upgrade. This allows you to upgrade a beta version of ISA Server 2006 to a new build of the same product. The following build-to-build upgrades will be supported:
• • Beta to Release Candidate
  • Release Candidate to Release to Manufacturing
  • Beta to Release to Manufacturing
• ISA Server and ISA Server Management console components can be upgraded. All other components, such as SMTP Message Screener and Firewall Client Share, must be uninstalled before upgrading, because these components are no longer supported in ISA Server 2006.
• During the upgrade, ISA Server services are not operational. We therefore recommend that you disconnect the ISA Server 2006 computer from the External network until the upgrade is complete.

Supported Import Configuration Scenarios

One method to upgrade ISA Server 2004 to ISA Server 2006 is to import your existing configuration to a clean ISA Server 2006 installation. The following table outlines the import paths supported by ISA Server 2006.

Upgrade Requirements

For an upgrade to complete successfully, the following must be installed on the ISA Server computer:

• Microsoft Windows Server 2003 with Service Pack 1 (SP1)
• ISA Server 2004

Upgrading Standard Edition

You can upgrade ISA Server 2004 Standard Edition to ISA Server 2006 Standard Edition. This section describes two methods for upgrading ISA Server 2004 Standard Edition while maintaining existing settings and configuration:

• In-Place Upgrade
• New Equipment

Upgrade In-Place

Upgrade An in-place upgrade upgrades your existing ISA Server 2004 computer to ISA Server 2006 on the existing equipment. The ISA Server 2006 installation process detects a valid version of ISA Server 2004 and performs an upgrade installation. Perform the following procedure on your ISA Server 2004 computer. To perform an in-place upgrade, follow these steps:

1. Back up your ISA Server 2004 configuration. We recommend that you back up your configuration before making any major changes to ISA Server 2004. This enables you to restore to your current configuration if there is a problem with the upgrade. To back up the configuration, follow these steps:
2. 1. In the console tree of ISA Server Management, expand Microsoft Internet Security and Acceleration Server 2004, and then click Server_Name.
   2. On the Tasks tab, click Backup this ISA Server Configuration.
   3. In Save in, specify the folder in which the export file will be saved.
   4. In File name, type a name for the exported file, and then click Backup.
   5. In Password and Confirm password, type a password that will be required.
3. Back up ISA Server 2004 log and cache files. During the upgrade process, existing log and cache files will be erased. Default location for log files is C:\Program Files\Microsoft ISA Server\ISALogs, and for cache files is \urlcache.
   Note
   ISA Server 2004 log files are not compatible with ISA Server 2006 log files. 
4. 
   
5. Run ISA Server 2006 Setup. The Setup program detects an existing valid version of ISA Server 2004 Standard Edition and performs the upgrade. To run ISA Server 2006 Setup, follow these steps:
6. 1. Insert the ISA Server 2006 Standard Edition CD into the CD drive, or run ISAAutorun.exe from the shared network drive.
   2. In Microsoft ISA Server Setup, click Install ISA Server 2006 and use the wizard to upgrade to ISA Server 2006 as outlined in the following table.
      

      Page	Field or property	Setting
      Welcome	None	Click Next.
      License Agreement	License Agreement	Select I accept the terms in the license agreement, and click Next.
      Customer Information	User Name Organization Product Serial Number	Enter user name. Enter organization name. Enter product serial number.
      Upgrade Checklist	Review the upgrade checklist.	Click Next.
      Destination Folder	Shows the folder location.	Click Next to accept the default folder location.
      Services	Warning Review services that will be stopped and services that will be disabled if you continue.	Click Next.
      Ready to Install the Program	None	Click Install.

      
      
7. After the upgrade is complete, if you want to invoke ISA Server Management immediately, select the Invoke ISA Server Management check box, and then click Finished.
8. Check that functions and connectivity in ISA Server 2006 are working properly.

New Equipment Upgrade

This scenario enables you to export your existing ISA Server 2004 configuration to a new computer with a clean installation of ISA Server 2006.

Exporting the Configuration of the Existing ISA Server 2004 Computer

Perform the following procedure on the existing ISA Server 2004 computer. To export the ISA Server 2004 configuration to a file, follow these steps:

1. In the console tree of ISA Server Management, expand Microsoft Internet Security and Acceleration Server 2004, and then click Server_Name.
2. On the Tasks tab, click Backup this ISA Server Configuration.
3. In Save in, specify the folder in which the export file will be saved.
4. In File name, type a name for the exported file, and then click Backup.
5. In Password and Confirm password, type a password that will be required.

Importing the Configuration to a New ISA Server 2006 Computer

Perform the following procedure on the computer that will be the new ISA Server 2006 computer. To import the configuration to a new computer, follow these steps:

1. Install Microsoft Windows Server 2003 with SP1.
   Important
   If you are publishing Web sites with ISA Server 2004, you must export the existing Secure Sockets Layer (SSL) certificates from the ISA Server 2004 computer and import the SSL certificates on the computer that will be the ISA Server 2006 computer
2. 
   
3. Install ISA Server 2006 Standard Edition. For more information, see the ISA Server 2006 Getting Started Guide.
4. Export the clean ISA Server 2006 configuration to a file. This enables you to restore to a clean ISA Server 2006 state, if any issues arise during the import. Follow these steps:
5. 1. In the console tree of ISA Server Management, select Microsoft Internet Security and Acceleration Server 2006, and then click Server_Name.
   2. On the Tasks tab, click Export (Back Up) Array Configuration.
   3. Follow the on-screen instructions.
      Important
      Select the following Export Preferences: Export confidential information and Export user permissions settings.
   
   
6. Copy the export file from the ISA Server 2004 computer to the ISA Server 2006 computer.
7. Import the ISA Server 2004 export file into the new ISA Server 2006 Standard Edition computer. Follow these steps:
8. 1. In the console tree of ISA Server Management, select Microsoft Internet Security and Acceleration Server 2006, and then click Server_Name.
   2. On the Tasks tab, click Import (Restore) Array Configuration.
   3. Follow the on-screen instructions.
      Important
      Make sure the following Import Preferences are selected: Import server-specific information and Import user permission settings.
   
   
9. Click the Apply button in the details pane to save the changes and update the configuration.
10. Check that functions and connectivity in ISA Server 2006 are working properly.

For information about how to export and import digital certificates, see "Digital Certificates for ISA Server 2004" at the Microsoft TechNet  Web site.

Note
If you have third-party filters installed on the ISA Server 2004 computers, you need to install the filters on the new ISA Server 2006 computers. For specific instructions regarding upgrades, refer to the third-party vendor documentation.

Upgrading Enterprise Edition

You can upgrade ISA Server 2004 Enterprise Edition to ISA Server 2006 Enterprise Edition. This section describes three methods for upgrading ISA Server 2004 Enterprise Edition, while maintaining all existing settings and configuration:

• In-Place Upgrade of Test Deployment
• ISA Server 2006 Deployment Based on ISA Server 2004 Configuration
• Stand-Alone Configuration Upgrade

In-Place Upgrade of Test Deployment

You can upgrade a single ISA Server 2004 Enterprise Edition Configuration Storage server and an array, on the existing equipment, while maintaining existing settings and configuration. In this scenario, you first upgrade the ISA Server 2004 Configuration Storage server, and then upgrade the array members.

Upgrading the Configuration Storage Server

Perform the following procedure on the existing ISA Server 2004 Configuration Storage server. To upgrade the Configuration Storage server, follow these steps:

1. Export the ISA Server 2004 configuration to a file. Follow these steps:
2. 1. In the console tree of ISA Server Management, select Microsoft Internet Security and Acceleration Server 2004.
   2. On the Tasks tab, click Export (Back Up) Configuration to start the Export Wizard.
   3. Follow the on-screen instructions.
      Important
      Select the following Export Preferences: Export confidential information and Export user permissions settings.
   
   
3. Uninstall ISA Server 2004 from the computer with the primary Configuration Storage server. (The remaining ISA Server computers will fail over to the secondary Configuration Storage server for the array if it has been defined. Otherwise, the computer will use the last known configuration it received from the Configuration Storage server.)
   Note
   You can also install a new Configuration Storage server, if you want to keep your ISA Server 2004 Configuration Storage server as a backup.
4. 
   
5. Run ISA Server 2006 Setup. For more information, see the ISA Server 2006 Getting Started Guide.
6. Export the clean ISA Server 2006 configuration to a file. This enables you to restore to a clean ISA Server 2006 state, if any issues arise with the import.
   Important
   Do not overwrite the exported configuration file that you exported in step 1.
7. 
   
8. To export the file, follow these steps:
9. 1. In the console tree of ISA Server Management, select Microsoft Internet Security and Acceleration Server 2006.
   2. On the Tasks tab, click Export (Back Up) Configuration to start the Export Wizard.
   3. Follow the on-screen instructions.
      Important
      Select the following Export Preferences: Export confidential information and Export user permissions settings.
   
   
10. Import the ISA Server 2004 exported configuration file. Follow these steps:
11. 1. In the console tree of ISA Server Management, select Microsoft Internet Security and Acceleration Server 2006.
    2. On the Tasks tab, click Import (Restore) Configuration to start the Import Wizard.
    3. Follow the on-screen instructions.
       Important
       Make sure the following Import Preferences are selected: Import server-specific information and Import user permission settings.
    
    
12. Click the Apply button in the details pane to save the changes and update the configuration.

Upgrading the Array Member

Perform the following procedure on the existing ISA Server 2004 array members. Note the following:

• If you have more than one array, you must perform this procedure on all array members in all arrays. The ISA Server 2006 Configuration Storage server can only manage ISA Server 2006 array members.
• If you installed a replica Configuration Storage server on an array member, you must uninstall the replica Configuration Storage server before proceeding with the array member upgrade. After the upgrade is complete, you can add the replica back.

To upgrade an array member, follow these steps:

1. Run ISA Server 2006 Setup. The Setup program detects an existing valid version of ISA Server 2004 Enterprise Edition and performs the upgrade. To run ISA Server 2006 Setup, follow these steps:
2. 1. Insert the ISA Server 2006 Enterprise Edition CD into the CD drive, or run ISAAutorun.exe from the shared network drive.
   2. In Microsoft ISA Server Setup, click Install ISA Server 2006 and use the wizard to upgrade to ISA Server 2006 as outlined in the following table.
      

      Page	Field or property	Setting
      Welcome	None	Click Next.
      License Agreement	License Agreement	Select I accept the terms in the license agreement, and click Next.
      Customer Information	User Name Organization Product Serial Number	Enter user name. Enter organization name. Enter product serial number.
      Upgrade Checklist	Review the upgrade checklist.	Click Next.
      Destination Folder	Shows the destination folder.	Click Next to accept the default folder location.
      Locate Configuration Storage server	Configuration Storage Server	Enter the fully qualified domain name (FQDN) of the Configuration Storage server.
      Services Warning	Review services that will be stopped and services that will be disabled if you continue.	Click Next.
      Ready to Install the Program	None	Click Install.

3. After the upgrade is complete, if you want to invoke ISA Server Management immediately, select the Invoke ISA Server Management check box, and then click Finished.
4. Check that functions and connectivity in ISA Server 2006 are working properly.

ISA Server 2006 Deployment Based on ISA Server 2004 Configuration

In this scenario, you export your existing ISA Server 2004 Configuration Storage server and array members to new computers in your existing production environment, while maintaining all existing settings and configuration. All new computers will have different computer names than what is currently configured on your ISA Server 2004 Configuration Storage server and array members. This enables you to test ISA Server 2006 with your existing configuration without the need to set up a separate laboratory environment and does not interfere with your production environment.

Exporting (Backing Up) the Configuration of the Existing ISA Server 2004 Configuration Storage Server

Perform the following procedure on the ISA Server 2004 Configuration Storage server. To export the ISA Server 2004 configuration to a file, follow these steps:

1. In the console tree of ISA Server Management, select Microsoft Internet Security and Acceleration Server 2004.
2. On the Tasks tab, click Export (Back Up) Configuration to start the Export Wizard.
3. Follow the on-screen instructions.
   Important
   Select the following Export Preferences: Export confidential information and Export user permissions settings.

Install the New ISA Server 2006 Configuration Storage Server

Perform the following procedure on the computer that will be the ISA Server 2006 Configuration Storage server. To install the new Configuration Storage server, follow these steps:

1. Install Windows Server 2003 with SP1 on the computer that will be the ISA Server 2006 Configuration Storage server.
2. Install ISA Server 2006 Enterprise Edition. For information, see the ISA Server 2006 Getting Started Guide.
3. Export the clean ISA Server 2006 configuration to a file. This will enable you to restore to a clean ISA Server 2006 state, if any issues arise during the import. Follow these steps:
4. 1. In the console tree of ISA Server Management, select Microsoft Internet Security and Acceleration Server 2006.
   2. On the Tasks tab, click Export (Back Up) Configuration to start the Export Wizard.
   3. Follow the on-screen instructions.
      Important
      Select the following Export Preferences: Export confidential information and Export user permissions settings.
   
   
5. Create a new array with the same name as the ISA Server 2004 array. For more information, see the ISA Server 2006 Getting Started Guide.
   Note
   Perform this step for each array that was configured in ISA Server 2004.
6. 
   
7. Click the Apply button in the details pane to save the changes and update the configuration.

Installing New Array Member

Perform the following procedure on the computer that will be the new ISA Server 2006 array member. If you have multiple arrays, you will need to install at least one array member in each array before importing the configuration. To install a new array member, follow these steps:

1. Install Windows Server 2003 with SP1 on the computer that will be the ISA Server 2006 array member. If you are publishing Web sites with ISA Server 2004, you must export the existing SSL certificates from the ISA Server 2004 array member and import the SSL certificates on the computer that will be the ISA Server 2006 array member.
2. Run ISA Server 2006 Setup. Follow these steps:
3. 1. Insert the ISA Server 2006 Enterprise Edition CD into the CD drive, or run ISAAutorun.exe from the shared network drive.
   2. Follow the instructions in the ISA Server 2006 Getting Started Guide to install ISA Server 2006.

For information about how to export and import digital certificates, see "Digital Certificates for ISA Server 2004" at the Microsoft TechNet Web site.

If you have third-party filters installed on the ISA Server 2004 array members, you need to install the filters on the new ISA Server 2006 array members. For specific instructions regarding upgrades, refer to the third-party vendor documentation.

Importing the Configuration to the New ISA Server 2006 Configuration Storage Server

To import the configuration to the new ISA Server 2006 Configuration Storage server, follow these steps:

1. Copy the export file from the ISA Server 2004 computer to the ISA Server 2006 computer.
2. Import the ISA Server 2004 exported configuration file. Follow these steps:
3. 1. In the console tree of ISA Server Management, select Microsoft Internet Security and Acceleration Server 2006.
   2. On the Tasks tab, click Import (Restore) Configuration to start the Import Wizard.
   3. Follow the on-screen instructions.
      Important
      Make sure the following Import Preferences are selected: Import server-specific information and Import user permission settings.
   
   
4. Do not click the Apply button.
5. Delete all ISA Server 2004 array members from the ISA Server 2006 arrays. Leave the array member you just installed. Follow these steps:
6. 1. In the console tree of ISA Server Management, select Microsoft Internet Security and Acceleration Server 2006.
   2. Expand Arrays, and expand the Array_Name from which you want to delete the ISA Server 2004 array members.
   3. Expand Configuration and select Servers.
   4. Select the applicable server in the array and on the Tasks tab, click Delete Selected Server.
   5. Repeat step 4 for each server you want to delete.
7. Delete any arrays that you will not be testing.
8. Click the Apply button in the details pane to save the changes and update the configuration.
9. Check that functions and connectivity in ISA Server 2006 are working properly.

After an array member has been deleted from the array, an in-place upgrade cannot be performed on the array member to upgrade to ISA Server 2006.

Stand-Alone Configuration

Upgrade In this scenario, you upgrade an ISA Server 2004 stand-alone configuration. A stand-alone configuration is a deployment of ISA Server Enterprise Edition with both the Configuration Storage server and Microsoft Firewall service installed on the same computer. To upgrade a stand-alone configuration, follow these steps:

1. Export the ISA Server 2004 configuration to a file. Follow these steps:
2. 1. In the console tree of ISA Server Management, select Microsoft Internet Security and Acceleration Server 2004.
   2. On the Tasks tab, click Export (Back Up) Configuration to start the Export Wizard.
   3. Follow the on-screen instructions.
      Important
      Select the following Export Preferences: Export confidential information and Export user permissions settings.
   
   
3. Write down the name of the existing array. In the console tree of ISA Server Management, select Microsoft Internet Security and Acceleration Server 2004, expand Arrays, and write down the name of the array.
4. Uninstall ISA Server 2004 from the computer.
5. Install ISA Server 2006 Enterprise Edition. For information, see the ISA Server 2006 Getting Started Guide. During the installation, on the Setup Scenarios page, choose Install both ISA Server services and Configuration Storage server.
6. Export the blank ISA Server 2006 configuration to a file. This will enable you to restore to a clean ISA Server 2006 state, if any issues arise during the import. Follow these steps:
7. 1. In the console tree of ISA Server Management, select Microsoft Internet Security and Acceleration Server 2006.
   2. On the Tasks tab, click Export (Back Up) Configuration to start the Export Wizard.
   3. Follow the on-screen instructions.
      Important
      Select the following Export Preferences: Export confidential information and Export user permissions settings.
   
   
8. Confirm that the new array name matches the old array name from step 2. Follow these steps:
9. 1. In the console tree of ISA Server Management, select Microsoft Internet Security and Acceleration Server 2004, expand Arrays, and compare the name with the name of the array from step 2. If the names match, continue with step 7.
   2. If the names do not match, select the Array_Name, and click Configure Array Properties on the Tasks tab. On the General page of the Array_Name properties, change the Name field to match the old array name, and then click OK.
   3. Click the Apply button in the details pane to save the changes and update the configuration
10. Import the ISA Server 2004 exported configuration file. Follow these steps:
11. 1. In the console tree of ISA Server Management, select Microsoft Internet Security and Acceleration Server 2006.
    2. On the Tasks tab, click Import (Restore) Configuration to start the Import Wizard.
    3. Follow the on-screen instructions.
       Important
       Make sure the following Import Preferences are selected: Import server-specific information and Import user permission settings
    
    
12. Click the Apply button in the details pane to save the changes and update the configuration
13. Check that functions and connectivity in ISA Server 2006 are working properly.

Author: Microsoft