New setup confirmation

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

I really need some help here.

I am about to get a fight with the Checkpoint guys :-)

So I am new to this company.
There is already a Checkpoint setup has our primary firewall. (I know
nothing about CheckPoint)
and the CP guys have setup a new ISa 2004.

CP :
3 interface:
1 - Internet (public address)
2 - DMZ : crosscable to the ISA 2004 (192.168.60.x)
3 - LAN (192.168.69.x

ISA 2004
2 interfaces:
1 - DMZ : crosscable to a ISA 2004 (192.168.60.x)
2- Connected to a switch (private DMZ) where our Web server is located.
(192.168.50.x)

Now, my question will be simple:

Can I do server publish in that scenario?
I have tried Web publish and secure Web publish, and I works GREAT.
But could I use ISA for mail server publising for example. The mail server
(exchange 2003) is in the LAN (192.168.69.x) and not in the ISA DMZ

Remember, that only the CP firewall is connected to the LAN.

Thanks for any help

Regards

JP




.

Relevant Pages

  • New Setup validation
    ... There is already a Checkpoint setup has our primary firewall. ... 2- Connected to a switch (private DMZ) where our Web server is located. ... But could I use ISA for mail server publising for example. ... is in the LAN and not in the DMZ ...
    (microsoft.public.isaserver)
  • Wohin mit dem ISA?
    ... ISA Server in die DMZ: der ISA muss dann, ... Zugriff auf Benutzer- und Gruppenobjekte im AD benötigt, ... und ich müsste an der Checkpoint entsprechend den Zugriff für den ... ISA Server im LAN: ich stelle den ISA ins LAN, ...
    (microsoft.public.de.german.isaserver)
  • Re: Wohin mit dem ISA?
    ... ich eine CP FW-1 und einen ISA 2004. ... FW-1, mit dem anderen im LAN. ... Verzichten möchte ich Checkpoint ...
    (microsoft.public.de.german.isaserver)
  • Re: ISA Server versus Checkpoint Firewall
    ... Also, there is more to "stateful" than you describe; it goes all the way to L7, something Checkpoint doesn't yet do. ... Checkpoint is only recently starting to realize the value of application-layer filtering; something ISA has had for years. ... ISA Server can be fairly easy to just plug in, ... Unfortunately that can often be a bad thing as it is very easy to misconfigure a firewall and the ...
    (microsoft.public.isa.enterprise)
  • Re: CheckPoint + ISA2004 Nating
    ... "There is no NATing to DMZ from Checkpoint. ... By default ISA will NAT everything to its external IP address, ... You will have to publish the servers on ISA. ...
    (microsoft.public.isa.configuration)