ISA 2000 and the 04-039 patch

On November 12, 2004, in Security, by

Heads up folks, it appears that the issue we’ve been seeing in the newsgroups about ISA 2000 and the 04-039 patch is only on machines that are NOT [let’s repeat that] NOT on ISA 2000 service pack 2.  If you are still on Service pack 1, it looks like you might be hit with this issue of spiking CPU and webproxy shutting down.


So here’s my advice…..



Quite honestly if you do those steps, you’ll be fine.


Remember this is for SBS 2000 with ISA installed and SBS 2003 Premium with ISA installed.  This does not affect ISA 2004…which… we are going to be getting we just have to wait for Windows 2003 sp1 as the SBS 2003 sp1 bundle is piggy backing on that.  Remember that AT THIS TIME, ISA 2004 is not supported by “Mothership Charlotte, Los Colinas, Shanghai or Redmond” on our SBS boxes.  If you are a consultant, I’d probably be putting ISA 2004 on a virtual server and start playing… it’s a learning curve that I think you need to be ahead of before it SBS 2003 sp1 comes out.  But DO NOT put it on your client’s boxes at this time nor are your clients licensed for it.


So, to recap….



  • Apply ISA 2000 sp2
  • Apply 04-039 patch

Quite honestly, I nearly didn’t realize that ISA 2000 sp2 came out.  The SP was released about the time of ISA 2004 and I didn’t see it myself until later.


P.S.  You can also do the following – but quite honestly, I’d much rather everyone be on SP2



  1. remove the patch

  2. apply the workaround in http://support.microsoft.com/kb/889189

  3. wait for the patch to be re-released.

 

If you enjoyed this article, please consider sharing it!
Facebook Twitter Delicious Digg

 

4 Responses to ISA 2000 and the 04-039 patch

  1. Tobias Redelberger says:
    November 14, 2004 at 7:02 am

    Hi SBS "Diva",

    i’m sorry, but this time you aren’t right.

    On my testing SBS 2003 Premium with ISA 2000 + SP2 (+ allother SPs, Fixes and Patches concerning SBS2003) webproxy service is still chrushing after serveral hours unter load with (german) re-released 04-039 patch

    ISA says: 3.0.1200.365 SP2

    Windows says: 5.2 (3790)

    Exchange says: 6.5 (Build 7226.6: Service Pack 1)

    WINNT says:

    $NtUninstallKB819696$

    $NtUninstallKB822132$

    $NtUninstallKB822742$

    $NtUninstallKB822743$

    $NtUninstallKB822744$

    $NtUninstallKB822745$

    $NtUninstallKB822925$

    $NtUninstallKB823182$

    $NtUninstallKB823353$

    $NtUninstallKB823559$

    $NtUninstallKB823980$

    $NtUninstallKB824073$

    $NtUninstallKB824105$

    $NtUninstallKB824139$

    $NtUninstallKB824141$

    $NtUninstallKB824146$

    $NtUninstallKB824151$

    $NtUninstallKB825117$

    $NtUninstallKB825119$

    $NtUninstallKB826238$

    $NtUninstallKB826936$

    $NtUninstallKB828035$

    $NtUninstallKB828741$

    $NtUninstallKB830352$

    $NtUninstallKB831464$

    $NtUninstallKB832894$

    $NtUninstallKB833987$

    $NtUninstallKB833992$

    $NtUninstallKB834707$

    $NtUninstallKB835732$

    $NtUninstallKB835734$

    $NtUninstallKB837001$

    $NtUninstallKB837272$

    $NtUninstallKB839645$

    $NtUninstallKB840315$

    $NtUninstallKB840374$

    $NtUninstallKB840374_0$

    $NtUninstallKB840987$

    $NtUninstallKB841356$

    $NtUninstallKB841533$

    $NtUninstallKB842933$

    $NtUninstallKB843539$

    $NtUninstallKB867460$

    $NtUninstallKB867801$

    $NtUninstallKB873376$

    $NtUninstallKB883935$

    $NtUninstallKB885881$

    $NtUninstallQ828026$

  2. Susan says:
    November 14, 2004 at 7:05 am

    Then CALL PSS and get them the info. At this time the only thing reported is pre SP2. PLEASE help out!

  3. Susan says:
    November 14, 2004 at 7:08 am

    Also there is an issue with the German patch separate from the English one. Please contact PSS so that this can be identified properly.

  4. ObiWan says:
    November 16, 2004 at 10:03 am

    Here’s what I’m using here; and ISA works fine

    isasp1-ENU.exe

    isahf174.exe

    isahf177.exe

    isafp1.exe

    isafp1sd.exe

    isafp1ur.exe

    isahf256.exe

    isahf257.exe

    ISA2000-KB816456-x86.exe

    ISA2000-KB816459-x86.exe

    ISA2000-KB816458-x86.exe

    isasp2-ENU.exe

    ISA2000-KB888258-X86-ENU.exe

    maybe some of the above patches aren’t really needed

    but I thought the above may be of help, just ensure you

    have all those patches in place, I’ve listed them in date

    order (so you’d better apply them in the above order)

    notice that the "isafp1.." files belong to ISA feature pack

    1 so those files aren’t really mandatory (imho)

    Regards