Does UAG activation disconnect users?

A common question for all UAG administrators is if activating the configuration will affect users currently using the UAG.

Erez Ben-Ari (co-author of the books Microsoft Forefront UAG 2010 Administrator’s Handbook and Mastering Microsoft Forefront UAG 2010 Customization) have given a very clear answer to that question.

Normally, it does not. The exceptions are:

  1. SSL-VPN tunnels do get severed during an activation, so anyone using those will be disconnected and need to re-launch the tunnel.
  2. Occasionally, UAG might detect that IIS is not responding, and issue an IISRESET. That would effectively terminate all sessions. It’s pretty rare to happen, though.
  3. The labor involved with the process can make the servers less responsive to some degree. Usually, it’s barely noticeable, though.

Bottom line is that activating a new configuration should in normal case not affect the users running applications published in UAG.

2 Replies to “Does UAG activation disconnect users?”

  1. Cory

    When i activate all my sites go down when IIS is restarted… MS engineer told me the same thing as this blog; however, when I activate i cannot log into the portal.

    Am I missing something?

    • Kent Post author

      Well it seems like your are hitting no 2 in the exception list for some reason. I have found that if the UAG is operating under heavy load and lack resources IIS might be slow to respond making UAG think it needs to issue an “iisreset”.


Leave a Reply

Your email address will not be published. Required fields are marked *