Re: Back-to-Back Firewall Pix & ISA Server 2004

Tech-Archive recommends: Fix windows errors by optimizing your registry


"Habibalby" <hms__25@xxxxxxxxxxx> wrote in message
news:16107199-D48B-4E15-88EE-F9F207D7E473@xxxxxxxxxxxxxxxx
Since the ISA Server is a member of the Internal Domain, the Internal DNS
Server must be added to the Internal Interface in order to Authenticate
users
and Authenticate itself in the Domain.

How is the ISA supposed to fuction as a Domain Member when it is not on the
LAN? Your ISA is on the far side of the Back-to-Back DMZ,...it is "cut off"
from the LAN because you are running things backward.

Move the ISA to the Internal LAN's Edge between the LAN and the DMZ
Move the PIX to the DMZ Edge between the DMZ and the Internet
This is the only recommendation I am going to make, if someone else wants to
help with things the way you currently have it then they are welcomed to
join in, but I am not going to mess with that design.


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.mspx

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------


.

Relevant Pages

  • Re: The Web site cannot be found - errors
    ... problems connecting with the internet. ... Internet Connection Wizard from the server. ... > files and ISA cache on all ...
    (microsoft.public.windows.server.sbs)
  • RE: Internet Usage Reports
    ... There is no other application on the SBS server box that can monitor ... internet activities as your needs rather than ISA server. ... Microsoft Internet Security and Acceleration Server 2004 is the ... Microsoft is providing this information as a convenience to you. ...
    (microsoft.public.windows.server.sbs)
  • RE: ISA 2004 Rules
    ... internet website from the ISA server itself. ... All Users or SBS Internet Users ... Then can you access this problematic page from the workstation side this ...
    (microsoft.public.windows.server.sbs)
  • Re: Connect the SBS to a remote IIS for Internet Printing
    ... the server can access the Internet with no problems at all. ... Checking network connection, and after a few seconds it says The ... the problem is cause by the configuration of ISA. ...
    (microsoft.public.windows.server.sbs)
  • Re: Internet slow after SBS 2003 SP1 install
    ... you may found the root cause since DNS server is response to name ... resolution and help find destination site when you access internet. ... Microsoft CSS Online Newsgroup Support ... >> To enable ISA log: ...
    (microsoft.public.windows.server.sbs)