RE: ISA 2004 with Exchange 2003 and Existing Firewall

From: GRhys (GRhys_at_discussions.microsoft.com)
Date: 01/23/05 

Date: Sat, 22 Jan 2005 23:15:01 -0800

Eric,
Almost ALL the microsoft documentation ASSUMES that you will be publishing
the Exchange Server (Static NAT), and there is little coverage on using it
just to pass through SMTP. If placing the ISA Server inline with your
appliance firewall, hen configure rules for SMTP and SMTP Server to Allow
communication between the Exchange server and the external appliance
Firewall, which should be configured to perform the NAT operation.

Exchange 2003 does a lot of the HTTP front-ending itslef, and doesn't depend
the same on the ISA - though i am not configuring to allow web access to
Exchangeso haven't tried this out. ISA could then just be used on the
appliance DMZ as a proxy, and forget the firewall functionality altogether.

Gareth
"Eric" wrote:

> We are currently using a Sonicwall Pro 200 Internet Appliance as our
> firewall. It does a super job with that regard. I would like to know what the
> best method is for using our existing Firewall and installing ISA 2004 to
> work with Exchange 2003. I have read numerous articles, guides, etc...about
> how well they work together but I cannot find anything as far as what is
> needed to configure ISA 2004 with an existing hardware firewall. Can this be
> done and is this recommended? Also what is the best approach as far as
> connectivity? Would You place the ISA 2004 in the Hardware Firewall DMZ and
> then create rules for ISA to access the internal network? Both the FE and BE
> Exchange Servers will reside on the internal LAN as this is the preferred
> config.
>
> I hope MS reads this and can point me in the right direction.
>
> Thanks!
>
> Eric

Relevant Pages

  • Re: One machine exchange server with ISA 2000
    ... You can also buy SBS without ISA. ... NIC and use a private address range for all of them and use NAT and the ... Firewall in either WIndows 2003 or ISA (depending on what features you ... I only want to protect the Exchange server. ...
    (microsoft.public.isaserver)
  • RE: One machine exchange server with ISA 2000
    ... you will not be able to use the Firewall ... Service in ISA, it would only be supported in Cache Mode Only. ... Microsoft Enterprise Network Support ... I am planning to deploy an Exchange Server 2003 under Windows 2003 SBS. ...
    (microsoft.public.isaserver)
  • Exchange Server / ISA / Firewalls
    ... Can the ISA Firewall be disabled but still use the ISA proxy? ... If I put a cisco firewall infront of the sbs2000 server (with ISA ... common method of securing exchange server with a hardware firewall? ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: ISA & Excahnge
    ... I'm going to try pointing the Exchange server directly to ... the ISP's DNS and see if that speeds things up. ... >Does your ISA being used for proxy or your only firewall? ...
    (microsoft.public.exchange.clients)
  • Re: CEICW fails - several errors
    ... The firewall isn't used when ISA is installed. ... On the WAN NIC of your server the DNS has to point to the LAN IP. ... I immediately checked and ISA Server ...
    (microsoft.public.windows.server.sbs)
Loading