Re: ISA Verses Cisco PIX in Exchange 2003 Front End - Back End Topolog

Can you take advantage of the features using the pix? I can't think why
not. But you'll have to do a lot more work to get there IIRC.
ISA is an application layer firewall that is made by the vendor of your
applications you want to publish. As such, it's expected that it would have
some advantage over the competition when it comes to publishing the
resources in question. I usually tell people that a pix and ISA are
complimentary technologies vs. competitive. The reason I do that is becuase
ISA's power comes from being able to integrate in a Microsoft environment.
But what if you have more than Microsoft products on your network? Not like
that could happen, but let's say it did for the sake of argument. ISA may
not be the best firewall or proxy for those platforms. ISA is a great
platform for publishing Exchange resources however and that's why I suggest
looking at ISA as an Exchange server (really an extension of the Exchange
infrastructure) vs. as a firewall device which has different connotations to
incumbent security folks.

Does that help, or did I skip around it too much?

Al




"AZNETPLUS" <AZNETPLUS@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:A4CFC144-EF08-47DE-AADE-F32AC86D5C7B@xxxxxxxxxxxxxxxx
> I'm in the process of setting up an Exchange 2003 Front End and Back End
> environment and have read several articles mentioning using an ISA server
> at
> the Perimeter Network (DMZ) in order to take advantage of all the features
> Exchange 2003 offers such as Outlook Mobile Activesync and Outlook 2003
> Client RPC-HTTP.
>
> My question is can't I take advantage of all the features using our
> existing
> Cisco PIX firewall?
>
> What are the benefits of using ISA for our Exchange 2003 rollout?
>
> Thank you,
>


.

Relevant Pages

  • Re: ISA Verses Cisco PIX in Exchange 2003 Front End - Back End Top
    ... pix, but with alot of trial and error, and how many holes in the firewall ... I like the way you put it "extension of the Exchange infrastructure" ... ISA 2004 Enterprise it is! ...
    (microsoft.public.exchange.setup)
  • Re: ISA wont be my main firewall
    ... > will remain my primary firewall and I don't want ISA to stand between ... > the Pix and my internal network or DMZ. ... > setting up ISA and OWA are focused on that scenario. ... I have Exchange 2000 on my inside network. ...
    (microsoft.public.exchange.admin)
  • Re: REPOST - Phillip Windell + ZVR Please take a look please! Any input ????
    ... DMZ2 in your scenario was reffering to a perimeter ... Yes in that case you can keep the Exchange FE ... > BackEnd Exchange Box behind ISA, ... > tough one actually because PIX doesn't handle very well RPC ...
    (microsoft.public.isa)
  • Re: ActiveSync
    ... I've made sure all certs are exported from Exchange to ISA box. ... Before ISA reboot, when ActiveSync starts syncing, nothing gets logged in ... The security certificate on the server is not valid. ...
    (microsoft.public.isa.configuration)
  • Re: Virtueller Speicher reicht nicht aus
    ... Exchange und den Provider in Verdacht gehabt. ... Rückblickend, nachdem der ISA Server durchgestartet wurde, und alles wieder ...
    (microsoft.public.de.german.isaserver)