A common question for all UAG administrators is if activating the configuration will affect users currently using the UAG.
Erez Ben-Ari (co-author of the books Microsoft Forefront UAG 2010 Administrator’s Handbook and Mastering Microsoft Forefront UAG 2010 Customization) have given a very clear answer to that question.
Normally, it does not. The exceptions are:
- SSL-VPN tunnels do get severed during an activation, so anyone using those will be disconnected and need to re-launch the tunnel.
- Occasionally, UAG might detect that IIS is not responding, and issue an IISRESET. That would effectively terminate all sessions. It’s pretty rare to happen, though.
- The labor involved with the process can make the servers less responsive to some degree. Usually, it’s barely noticeable, though.
Bottom line is that activating a new configuration should in normal case not affect the users running applications published in UAG.
When i activate all my sites go down when IIS is restarted… MS engineer told me the same thing as this blog; however, when I activate i cannot log into the portal.
Am I missing something?
Well it seems like your are hitting no 2 in the exception list for some reason. I have found that if the UAG is operating under heavy load and lack resources IIS might be slow to respond making UAG think it needs to issue an “iisreset”.