Microsoft® Internet Security and Acceleration (ISA)
Server 2006 Enterprise Edition supports connecting to an
alternate securely published Configuration Storage server in the
event the virtual private network (VPN) tunnel normally used to
connect to the Configuration Storage server is unavailable.
If the connection between the ISA Server array member and the
Configuration Storage server is through a site-to-site VPN
connection, you can define another method to connect to the
Configuration Storage server in the event the VPN connection is
unavailable. In this method, the array member connects to a
securely published Configuration Storage server over the Internet.
This enables the array member to continue to get configuration
updates from the Configuration Storage server. When the
site-to-site VPN connection has been restored, the array member
switches back and connects to the primary Configuration Storage
server through the site-to-site VPN connection.
The array member only uses the securely published Configuration
Storage server when all of the following criteria exist:
The primary Configuration Storage server is unavailable for 30
minutes.
The alternate Configuration Storage server is unavailable.
(This is true only if the alternate Configuration Storage server
has been configured on the Configuration Storage page.)
The option Over a VPN site-to-site connection is
selected on the Published Configuration Storage page.
The fully qualified domain name (FQDN) of the securely
published Configuration Storage server is entered in the
Alternate securely published Configuration Storage server
field.
Important
These configuration settings must be completed before the VPN
connection is broken to take advantage of the alternate securely
published Configuration Storage server.
For more information about how to securely publish a
Configuration Storage server, see Publishing Configuration
Storage Servers in ISA Server 2006 at the Microsoft
ISA Server TechCenter Web site(http://www.microsoft.com).
For more information about how to change the amount of time
that an array member will require before switching between the
primary Configuration Storage server and the alternate
Configuration Storage server, see Setting Configuration Storage
Server Delay Times in ISA Server 2006 at the Microsoft
ISA Server TechCenter Web site(http://www.microsoft.com).