ISA Server 2004 Configuration Guide 79
Introduction
ISA Server 2004 includes a new and enhanced backup and restore feature set. In ISA Server
2000, the integrated backup utility could back up the ISA Server 2000 firewall configuration.
That backup file could be used to restore the configuration to the same installation on the
same machine. However, if the operating system or hardware experienced a catastrophic
problem requiring disaster recovery, the backup file could not be used to restore the firewall
configuration.
In contrast, the ISA Server 2004 backup utility allows you to back up the entire firewall
configuration or just selected elements. You can restore the configuration to the same ISA
Server 2004 firewall installation on the same machine, or restore it to another ISA Server
2004 firewall on another machine. Backups should be done after performing one or more of
the following procedures:
Changing cache size or location
Changing firewall policy
Changing rule base
Changing system rules
Making changes to networks, such as, changing network definition or network rules
Delegating administrative rights or removing delegation
The import/export feature allows you to export selected components of the firewall
configuration and use them on the same machine at another time, or install those
components to another machine. The import/export functionality can also be used to export
the entire configuration of the machine as a method of cloning for more widespread
distribution.
It is a good practice to perform a backup operation immediately after installing the ISA Server
2004 firewall software. This makes it easier to restore the firewall components to their post-
installation state in the event that you want to completely remove an existing configuration
and start from the beginning without reinstalling the software.
In this ISA Server 2004 Configuration Guide section, we will describe the following
procedures:
Backing up the Firewall Configuration
Restoring the Firewall Configuration from the Backup File
Exporting Firewall Policy
Importing Firewall Policy