Re: ISA won't be my main firewall
From: Andrew Mitchell (amitchell_at_removecasey.vic.gov.au)
Date: 01/22/05
- Next message: Ilia Adham: "Re: How to get rid of this ( SBS 2000 )"
- Previous message: Andrew Raison: "Error deleting information store in RSG"
- In reply to: Mark: "ISA won't be my main firewall"
- Next in thread: Mark: "Re: ISA won't be my main firewall"
- Reply: Mark: "Re: ISA won't be my main firewall"
- Messages sorted by: [ date ] [ thread ]
Date: Sat, 22 Jan 2005 04:54:21 -0800
"Mark" <mark@ihatespam.com> said
> Okay, my other posts were filling up and I decided to start a new one.
>
> I want to set up OWA for Exchange 2000, but I have a Pix firewall that
> will remain my primary firewall and I don't want ISA to stand between
> the Pix and my internal network or DMZ. This however, seems to be what
> Microsoft thinks everybody will do, so the topics I'm finding about
> setting up ISA and OWA are focused on that scenario.
>
> Basically, I have Exchange 2000 on my inside network. I have a DMZ with
> my various web servers. A Pix protects all of this. I'd like to set up
> OWA and if I need ISA, I'll install it, but I don't want it to guard my
> network - in other words, it won't be my main firewall.
>
> I've been to isaserver.org and can't find a simple way to set up OWA
> unless I decide to let ISA protect my whole network. Can somebody point
> me in the direction that I want to go? I mean, an article that assumes
> ISA is not your main firewall?
>
If you don't want to use ISA all you need to do is configure the NAT routing
on the Pix to port forward port 443 (https is recommended) on your public IP
address to your exchange server's IP.
If you decide to introduce ISA, install it in your DMZ and alter the NAT
routing on the Pix so that port 443 on the public IP is forwarded to port 443
on the ISA address, and port 443 on the DMZ interface address is forwarded to
your exchange server.
-- Andy.
- Next message: Ilia Adham: "Re: How to get rid of this ( SBS 2000 )"
- Previous message: Andrew Raison: "Error deleting information store in RSG"
- In reply to: Mark: "ISA won't be my main firewall"
- Next in thread: Mark: "Re: ISA won't be my main firewall"
- Reply: Mark: "Re: ISA won't be my main firewall"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
