Re: Retiring ISA Server 2000 in 10.0.x.x Network with two Routers

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Yes are technically correct with your descriptions of the ISA and
WatchGuard, but to be really exact our ISA is configured as a Firewall and
provides Proxy server services.

So from the rest of your reply, I just need to point all of my servers and
clients to the other default gateway (WatchGuard) and stop all of the ISA
services.

Neil



"Phillip Windell" <@.> wrote in message
news:u$qioLTNFHA.3228@xxxxxxxxxxxxxxxxxxxxxxx
> "Neil Hobbs" <neil.hobbs@xxxxxxxxxxxxxxxxxxx> wrote in message
> news:O14ARvRNFHA.4028@xxxxxxxxxxxxxxxxxxxxxxx
>> I have a 10.10.x.x/24 network which was originally running just a single
>> router (a Windows 2000 Server with three NICs and running ISA Server
>> 2000)
>> with the IP address - 10.10.x.1 (connecting to the Internet via an ADSL
>> connection) and now a second router in the shape of a WatchGuard router
> with
>> the IP address - 10.10.x.254 (connecting to the Internet using a 2MB
> Leased
>> Line) - yes two Internet connections.
>
> I know this is only a side issue [humor me for a few moments], but ISA and
> the Watchgaurd boxes are not Routers. ISA is a Proxy Server and the
> Watchgaurd box is a NAT-Firewall. The SOHO market has destroyed the
> dictionary when they started calling their cheap $50 NAT Devices,
> "routers",
> when what they really are is a lightweight NAT Firewall. It was a
> marketing
> decision, not a technical one. From a marketing standpoint it sells the
> Devices, but from a technical standpoint it is incorrect. This has
> severly
> hampered people's understanding of what different devices are for and what
> they do, especially people who are "new" to the industry.
>
>> Can I just reassign the default gateway on my servers and in the DHCP
> scope
>> for the clients to point to the WatchGuard (10.10.x.254) IP address and
> stop
>> the above three ISA services? Or is it not that simple?
>
> That,...and remove the "proxy settings" from the user's browser and remove
> the Firewall Client if it is installed. The Watchgaurd box will have to
> take over the VPN responsibilities.
> --
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>


.



Relevant Pages

  • Re: Blackberry Server + ISA Server
    ... Der Blackberry Server läuft schon und befindet sich hinter einem ISA Server. ... Der ISA Server wiederum befindet sich hinter einer Watchguard. ... Aber mit Blackberry hatte ich bisher noch keinen Kontakt. ...
    (microsoft.public.de.german.isaserver)
  • Re: Watchguard or ISA Server/Forefront
    ... Both Watchguard and ISA are good products with many overlapping features. ... The Watchguard is first designed as a packet filter and second as an application filter. ... One server is running Windows Server 2003 and Exchange Server 2003, the other Windows Server 2008 and no exchange. ...
    (microsoft.public.windows.server.security)
  • Re: S2S Verbindung: ISA 2004 SP2 mit Watchguard
    ... Die Watchguard steht auf einer Serverfarm und davor ist "nichts", ... Watchguard und am ISA richtig sind und zudem auf beiden Seiten die ... Hilfe & Infos rund um den ISA Server: http://www.msisafaq.de ... Bei einem Ping vom ISA kommt: ...
    (microsoft.public.de.german.isaserver)
  • Re: Bei Ping von ISA nach Remote, IP-Sicherheit wird verhandelt
    ... ISA zu koppeln, was aber letztendlich an der Watchguard lag. ... MVP ISA Server ... Tunnel, obwohle ISA und WG anzeigen das der Tunnel steht. ...
    (microsoft.public.de.german.isaserver)
  • Re: Bei Ping von ISA nach Remote, IP-Sicherheit wird verhandelt
    ... Netz an der WG angeben, ... Tunnel, obwohle ISA und WG anzeigen das der Tunnel steht. ... du musst in der Netzwerkdefinition des Remotenetzwerks in der Watchguard, ...
    (microsoft.public.de.german.isaserver)