MS09-008 may affect ISA Server or Forefront TMG Deployments

Last year Rayne Wiselman wrote in the ISABlog about the Windows Server 2008 DNS Block Feature and how this behavior can impact ISA Server deployments. With MS09-008 applied, the wpad and isatap blocking behavior is now present in Windows XP Professional (x64), Windows Server 2000 (SP4) and Windows Server 2003 (SP1 and SP2).  Microsoft knowledgebase article 968732 describes these changes and provides a FAQ section which (among other things) describes how to disable this functionality globally and per entry.

Gabriel Koren,

TMG Server Test Team