Re: ISA Verses Cisco PIX in Exchange 2003 Front End - Back End Top

That helped out alot,
I was thinking the same thing that I could probably get it to work with the
pix, but with alot of trial and error, and how many holes in the firewall
would I have to open up to take advantage of the Exchange 2003 features using
the pix.
I like the way you put it "extension of the Exchange infrastructure"
ISA 2004 Enterprise it is!

Thank you for your input


"Al Mulnick" wrote:

> Can you take advantage of the features using the pix? I can't think why
> not. But you'll have to do a lot more work to get there IIRC.
> ISA is an application layer firewall that is made by the vendor of your
> applications you want to publish. As such, it's expected that it would have
> some advantage over the competition when it comes to publishing the
> resources in question. I usually tell people that a pix and ISA are
> complimentary technologies vs. competitive. The reason I do that is becuase
> ISA's power comes from being able to integrate in a Microsoft environment.
> But what if you have more than Microsoft products on your network? Not like
> that could happen, but let's say it did for the sake of argument. ISA may
> not be the best firewall or proxy for those platforms. ISA is a great
> platform for publishing Exchange resources however and that's why I suggest
> looking at ISA as an Exchange server (really an extension of the Exchange
> infrastructure) vs. as a firewall device which has different connotations to
> incumbent security folks.
>
> Does that help, or did I skip around it too much?
>
> Al
>
>
>
>
> "AZNETPLUS" <AZNETPLUS@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:A4CFC144-EF08-47DE-AADE-F32AC86D5C7B@xxxxxxxxxxxxxxxx
> > I'm in the process of setting up an Exchange 2003 Front End and Back End
> > environment and have read several articles mentioning using an ISA server
> > at
> > the Perimeter Network (DMZ) in order to take advantage of all the features
> > Exchange 2003 offers such as Outlook Mobile Activesync and Outlook 2003
> > Client RPC-HTTP.
> >
> > My question is can't I take advantage of all the features using our
> > existing
> > Cisco PIX firewall?
> >
> > What are the benefits of using ISA for our Exchange 2003 rollout?
> >
> > Thank you,
> >
>
>
>
.

Relevant Pages

  • Re: Changing ISPs
    ... If you are familiar with the firewall, and changing the ip on the external nic, you might get it working with the present ISP. ... I suggest you go first just change the ip address on the SBS external nic to match the settings the new ISP gives you and run the CEICW and get that to work. ... Then install the edge device but leave ISA in place. ... SMTP mail for Exchange will not be held anywhere, so a POP connector will not retrieve it. ...
    (microsoft.public.windows.server.sbs)
  • Re: Is this ISA server setup right or wrong?
    ... > pix 501 and a vpn between the sites. ... > to implement an ISA server behind the pix firewall at the ... The remote VPN subnets (private IP ...
    (microsoft.public.isa)
  • Re: Exchange implementation
    ... Publish Exchange through ISA. ... ISA is as stable and secure a firewall as anything else out ... there ain't no such thing as a 'hardware' firewall. ...
    (microsoft.public.exchange.setup)
  • Re: ISA wont be my main firewall
    ... > will remain my primary firewall and I don't want ISA to stand between ... > the Pix and my internal network or DMZ. ... > setting up ISA and OWA are focused on that scenario. ... I have Exchange 2000 on my inside network. ...
    (microsoft.public.exchange.admin)
  • RE: Firewall recommendations?
    ... Hi at my current job we use checkpoint, and I personally love that firewall ... I am not a big fan of the pix and I have never played with the ISA ...
    (Security-Basics)