Site-to-site VPN suggestions

Hi,

I have two networks with two level of firewall, one hardware firewall and
one software firewall (ISA server 2004 as a part of SBS2003).
Now I have bought 2 PBX/IP and I want to establish a VPN site to site to
connect the 2 LAN and to pass through the VoIP calls.

HW Firewall
|
| Isa external network card
ISA Server
| Isa external network card
|
LAN
| PC + PBX/IP

My questions are :

a) I think it is preferible to create the site to site VPN through the
hardware firewalls. In this case how do I have to configure the ISA Servers
?

b) If I connect my PBX/IP to my lan switch, every time I restart my ISA
server calls hangup. How can I bypass ISA Server so that my voip calls can
pass through only the hardware firewall ?

Any suggestions on the best configuration ?

Thanks,

Stefano L.



.

Relevant Pages

  • Re: When to use ISA
    ... If you have already purchased SBS Premium, then it would be advantageous over a hardware appliance. ... Otherwise the Hardware Firewall is the way to go. ... Cris Hanna [SBS-MVP] ... Should an ISA server be setup for this type of configuration? ...
    (microsoft.public.windows.server.sbs)
  • Re: Pros/Cons of Single/Dual NIC Card Topology?
    ... Dave Nickason [SBS MVP] wrote: ... you can take advantage of ISA Server. ... old hardware firewall in between the WAN connection and the SBS if you wish, ...
    (microsoft.public.windows.server.sbs)
  • Re: Clean Uninstall of ISA Server 2004
    ... I have a hardware firewall between my ISP and my ADSL Modem. ... software and once the techies at the AV support hear about my ISA firewall ... How do I do a clean uninstall of ISA Server 2004? ...
    (microsoft.public.windows.server.sbs)
  • WUS and ISA server - no go
    ... We have got a new W2003 network with a 2 NIC ISA server as a front end ... firewall (behind a hardware firewall.) ... I just cannot get the update site to work from the ISA server after doing it ...
    (microsoft.public.windowsupdate)
  • re: Hardware Firewall VS ISA Server
    ... Is your Exchange model going to be a FE/BE or are you intending to just publish an OWA server through a firewall? ... Hardware Firewall VS ISA Server ...
    (microsoft.public.windows.server.security)