RE: DMZ Setup With ISA 2004



Sorry....I hit the enter button too soon:


Hello;

I've been tasked to create a new ISA server to isolate the traffic going
into our webserver; unfortuntely this is all new to me :)

BackGround:
Anyways, we have an existing ISA 2004 server which is configured as a edge
firewall (which is connected to a T1 line) and provides firewall and VPN
services to our internal LAN.

Just recently we had another T1 line installed as we want to isolate the web
(web server is internal) traffic from the internal LAN due to expected an
huge increase to our website.

Each of the ISA servers has 3 NICs installed:

ISA1 (Existing Production)
NIC1 - External Access
NIC2 - Interal Access
NIC3 - Cross Connect to ISA2 IP address set to 192.168.1.1

ISA2
NIC1 - External Access
NIC2 - DMZ
NIC3 - Crossover Connect to ISA1 IP address set to 192.168.1.2

My Questions are:

1) How to I configure the second ISA server using the cross over
connection(which Firewall rules, network settings) to communicate with ISA1,
to route incoming traffic to the internal webserver

2) Are the alternatives to the cross over connection to get the same results
I want to achieve?

Thanks for all your help




"Jack of all IT trades :|" wrote:

Hello;

I've been tasked to create a new ISA server to isolate the traffic going
into our webserver; unfortuntely this is all new to me :)

BackGround:
Anyways, we have an existing ISA 2004 server which is configured as a edge
firewall (which is connected to a T1 line) and provides firewall and VPN
services to our internal LAN.

Just recently we had another T1 line installed as we want to isolate the web
(web server is internal) traffic from the internal LAN due to expected an
huge increase to our website.




.