Re: back to back DMZ

Tech-Archive recommends: Fix windows errors by optimizing your registry

Yes, no problem at all.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

"jimi hendrix" <jimihendrix@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2585B15D-A250-43EE-BEDE-8C2AAFF6FE4E@xxxxxxxxxxxxxxxx
OKay I am out of that issue, one last question:

Can I use a Cisco ASA 5520 as external firewall and the ISA2006 as
internal
firewall
As in a back to back DMZ ISA configuration,..

thanks in advance

jimi

"Jim Harrison (ISA SE)" wrote:

See if this helps:
http://www.microsoft.com/technet/isa/2006/deployment/exchange.mspx

Ultimately, the decision to place a host in or behind the DMZ (or to
build a
DMZ at all) rests with you and your design skills.

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"jimi hendrix" <jimihendrix@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2B3FF357-0492-4DFD-858A-35D7EA90B849@xxxxxxxxxxxxxxxx
Okay fair, I got your points now,..
but what does microsoft say about this,
what does microsoft recommend,..?

"Phillip Windell" wrote:

"jimi hendrix" <jimihendrix@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:941D50CF-E147-4502-8D9C-B15E7CC6CFF8@xxxxxxxxxxxxxxxx
How secure is this , when the servers are on my LAN then a hacker is
right
in
my internal network,..
or does isa 2006 makes it work,..

Then what good is the DMZ? The Servers still have to talk to the
LAN,..if
he has control of the servers he can communicate with whatever they can
communicate with.

Your *real* security lies with the Servers being used,...not the
Firewall
making them available, or the DMZ you stick them in.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or
Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server
2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------







.

Relevant Pages

  • Re: CheckPoint + ISA2004 Nating
    ... servers.If those servers in DMZ segment have been nated then the Incomming ... You should modify the NATs on your Checkpoint so that all traffic is ... forwarded to the external interface IP of ISA instead of individual ...
    (microsoft.public.isa.configuration)
  • Re: back to back DMZ
    ... As in a back to back DMZ ISA configuration,.. ... The Servers still have to talk to the LAN,..if ... Microsoft Internet Security & Acceleration Server: ...
    (microsoft.public.isa)
  • Re: back to back DMZ
    ... The views expressed, are my own and not those of my employer, or Microsoft, ... As in a back to back DMZ ISA configuration,.. ... The Servers still have to talk to the ...
    (microsoft.public.isa)
  • Re: back to back DMZ
    ... DMZ at all) rests with you and your design skills. ... Jim Harrison (ISA SE) ... but what does microsoft say about this, ... The Servers still have to talk to the LAN,..if ...
    (microsoft.public.isa)
  • Re: back to back DMZ
    ... Can I use a Cisco ASA 5520 as external firewall and the ISA2006 as internal ... As in a back to back DMZ ISA configuration,.. ... The Servers still have to talk to the ...
    (microsoft.public.isa)