Before I took over this blog, Tom used to talk about DirectAccess a bit. It you go back into the archives on the blog site, you’ll see that Tom really liked the idea of DirectAccess, but was pretty concerned about the complexity. I can tell you that when the subject came up during dinner that he often said “I hope MS didn’t come up with a way to ruin another great idea”. Of course, that was before he joined Microsoft and started working with the UAG DirectAccess Anywhere Access Team. more...
What happened to FWENGMON? You know, the tool we used to see what was going on with the ISA Firewall Engine. It’s gone. Well, it’s still in ISA, but you won’t find it in your TMG firewall anywhere. more...
If you haven’t visited our online forums you’ve been missing out. We have over 52,000 registered users and over 280,000 posts on the forums page! Check out the forums at http://forums.isaserver.org Tom asked me if I could get a new forum up on the site – this forum is dedicated to the UAG DirectAccess feature. more...
“The firewall engine (fweng.sys) and firewall service (wspsrv.exe) share an implementation of the rules engine (the component that decides if the current policy allows the traffic or not). When matching traffic to policy rules, some aspects cannot be matched by the firewall engine because performing blocked operations is not allowed in the kernel-mode context of the firewall engine. more...
Discuss your ISA Server issues with thousands of other ISA Server experts. Click here to join!