Important:
We recommend that you back up your configuration, log files, and cache files before making any major changes to ISA Server 2004. This enables you to restore to your current configuration and import the exported configuration file if there is a problem with the upgrade.

The following procedure describes how to back up your ISA Server 2004 computer. Perform the following procedure on your existing ISA Server 2004 computer.

1. In the console tree of ISA Server Management, expand Microsoft Internet Security and Acceleration Server 2004, and then click Server_Name.

2. On the Tasks tab, click Backup this ISA Server Configuration.

3. In Save in, specify the folder in which the export file will be saved.

4. In File name, type a name for the exported file, and then click Backup.

5. In Password and Confirm password, type a password that will be required.

During the upgrade process, existing log and cache files are erased. ISA Server 2004 log files are not compatible with ISA Server 2006. However, ISA Server 2004 cache files are compatible with ISA Server 2006.

Log files

To back up ISA Server 2004 log files, copy the files to an alternate location. The default location for log files is C:\Program Files\Microsoft ISA Server\ISALogs.

MSDE log format

MSDE is installed and configured as the default log storage format. You must first detach the database from the current server and then copy the files to an alternate location.

To detach a database from the server, enter the following lines at a command prompt.

To detach an MSDE database from a server enter the following

1. OSQL - S computer_name \MSFW - E

2. sp_detach_db database_name

3. go

4. quit

Note:
database_name is the name of the .mdf and .ldf files without their extensions.

Now you can copy the .mdf and .ldf files to another location.

To reattach the database to the server, perform the following procedure.

To reattach an MSDE database to a server, type the following

1. OSQL -S computer_name\MSFW -E

2. sp_attach_dbs @dbname='database_name', @filename1='full_path_to_mdf_file', @filename2='full_path_to_ldf_file'

3. go

4. quit

Microsoft SQL Server log format

For instructions about how to back up a database in SQL Server, see the SQL Server product documentation.

File log format

To back up ISA Server log files that are configured in file format, copy the files to an alternate location. The default location for log files is C:\Program Files\Microsoft ISA Server\ISALogs.

Cache files

When you run the ISA Server 2006 Setup program, it detects an existing valid version of ISA Server 2004 Standard Edition and performs the upgrade.

Important:
If SMTP Message Screener or Firewall Client Share is currently installed, it must be uninstalled before upgrading, because these components are no longer supported in ISA Server 2006.

Note the following:

• During the upgrade, ISA Server services are not operational. We therefore recommend that you disconnect the ISA Server computer from the External network until the upgrade is complete.
  
• During the upgrade, ISA Server services are not operational and users will experience an interruption of services until the upgrade is complete. We recommend that you notify users before the upgrade that ISA Server services will be unavailable during the upgrade process.
  
• Monitoring applications, such as Microsoft Operations Manager (MOM) agent, use ISA Server files and may interfere with ISA Server setup and removal. To avoid issues, stop these applications before running Setup.
  

The following procedure describes how to run ISA Server 2006 Setup. Perform the following procedure on the existing ISA Server 2004 computer.

1. Insert the ISA Server 2006 Standard Edition CD into the CD drive, or run ISAAutorun.exe from the shared network drive.

2. In Microsoft ISA Server Setup, click Install ISA Server 2006 and follow the instructions in the wizard to upgrade to ISA Server 2006 as outlined in the following table

Before you begin the migration process, we recommend that you collect information about your existing ISA Server 2004 deployment.

This section describes the information that you should gather before beginning the migration process.

Networking

ISA Server services

The following table lists additional tasks that might need to be taken on the ISA Server 2006 computer after migration, if the following ISA Server 2004 features are currently being used.

ISA Server 2004 function	Required actions
Web publishing listening for HTTPS traffic	Export the existing Secure Sockets Layer (SSL) certificate on the ISA Server 2004 computer and import the SSL certificate on the new ISA Server 2006 computer. Note: If a new SSL certificate is installed, you will need to modify the affected Web listener and select the new SSL certificate.
VPN tunnel encryption with server certificates: Internet Protocol security (IPsec) tunnel mode Layer Two Tunneling Protocol (L2TP) over IPsec VPN client access using L2TP over IPsec	Install a new server certificate from the same internal certification authority (CA) that issued the server certificate for the ISA Server 2004 computer.
User account for: L2TP over IPsec Point-to-Point Tunneling Protocol (PPTP)	For a remote site to initiate a site-to-site connection, there must be a user account matching the remote network name. If the user account was created as a local user account on the ISA Server 2004 computer, you must create an account with the same user name and password on the ISA Server 2006 computer. The user account must be granted dial-in permissions.

For information about how to export and import digital certificates, see "Digital Certificates for ISA Server" at the Microsoft TechNet Web site.

The following procedure describes how to back up your ISA Server 2004 configuration. Perform the following procedure on your existing ISA Server 2004 computer.

1. In the console tree of ISA Server Management, expand Microsoft Internet Security and Acceleration Server 2004, and then click Server_Name.

2. On the Tasks tab, click Backup this ISA Server Configuration.

3. In Save in, specify the folder in which the export file will be saved.

4. In File name, type a name for the exported file, and then click Backup.

5. In Password and Confirm password, type a password that will be required.

Note:
When exporting an ISA Server configuration that will be imported to an ISA Server 2006 firewall, you must have the Server_Name node selected when performing the export. ISA Server 2006 can only import an ISA Server 2004 exported file when the export was run from the Server_Name node.

Perform the following procedure to install ISA Server 2006 on the new computer.

1. Install Microsoft Windows Server 2003 with SP1 or Windows Server 2003 R2.

   Note:
   The internal network adapter must be connected and enabled to install ISA Server 2006. If the ISA Server computer will be connected to the same network as the ISA Server 2004 computer, a different IP address must be assigned to the ISA Server 2006 computer internal network adapter during ISA Server 2006 setup.

2. Install ISA Server 2006 Standard Edition. For more information, see the ISA Server 2006 Standard Edition Installation Guide.

Note:
If you have third-party filters installed on the ISA Server 2004 computer, you need to install the filters on the ISA Server 2006 computer. For specific instructions regarding upgrades, refer to the third-party vendor documentation.

Export the clean ISA Server 2006 configuration to a file. This enables you to restore to a clean ISA Server 2006 state, if any issues arise during the import of the ISA Server 2004 exported configuration file.

The following procedure describes how to export your ISA Server 2006 configuration. Perform the following procedure on your new ISA Server 2006 computer.

1. In the console tree of ISA Server Management, select Microsoft Internet Security and Acceleration Server 2006, and then click Server_Name.

2. On the Tasks tab, click Export (Back Up) this ISA Server Configuration.

3. Follow the on-screen instructions.

   Important:
   Select the following Export Preferences: Export confidential information and Export user permission settings.

The following procedure describes how to import your ISA Server 2004 configuration. Perform this procedure on the new ISA Server 2006 computer.

1. Copy the export file from the ISA Server 2004 computer to the ISA Server 2006 computer.

2. In the console tree of ISA Server Management, select Microsoft Internet Security and Acceleration Server 2006, and then click Server_Name.

3. On the Tasks tab, click Import (Restore) this ISA Server Configuration.

4. Follow the on-screen instructions.

   Important:
   Make sure the following Import Preferences are selected: Import server-specific information and Import user permission settings.

5. Click the Apply button in the details pane to save the changes and update the configuration.

Perform the following procedure to replace your ISA Server 2004 firewall with your new ISA Server 2006 computer.

Note:
During the swap procedure, ISA Server services are not operational and users will experience an interruption of services until the swap has been completed. We recommend that you notify users before the migration that ISA Server services will be unavailable when the swap is in progress.

1. Disconnect the ISA Server 2006 computer from all networks.

2. Make sure IP addresses on the ISA Server 2006 computer match the IP addresses on the ISA Server 2004 computer.

3. Turn off the ISA Server 2006 computer.

4. Mark the network cables on the ISA Server 2004 computer as External network, Internal network, and perimeter network.

5. Shut down and disconnect the ISA Server 2004 computer from the network.

6. Connect the ISA Server 2006 computer to the required networks and turn on the computer.

7. Check that functions and connectivity in ISA Server 2006 are working properly.