ISA and Exchange 2007

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

I have been doing Exchange work for about 8 years now and during that time I
have never felt the need to incorporate an ISA server into an environment.
And here is my take on why I have not. ISA is just another level of
security. The reason I say this is that if you setup OWA correctly and use
SSL you are already connecting back to the organization using a secure
method. I'm a believer in keeping it simple therefore I have always seen ISA
as adding another level of complexity. Therefore my typical recommendation
is to keep your FE and BE server internal to the network. Setup the firewall
to allow ports 25 and 443 only to the front end servers. Setup SSL on the FE
servers. Now if you are a company or goverment agency that performs
extremely sensitive work then I can agree with incorporting an ISA but if you
are an ordinary company that doesn't deal with sensitive information when
what would be compelling reason to incorporate ISA? I've never used ISA so
that is why I'm here to get other people's take on this. It is my
understanding that you can do load balancing with an ISA server. However,
you can also setup Network Load Balancing to do this as well which I have
done in the past. I'd be happy to hear everyone's opion on this. Perhaps I
can be persuaded to use/recommend ISA or just reaffirm my current belief.
Thanks,
Mark

.

Relevant Pages

  • PIX501 ISA SBS2003 Network Setup Thoughts
    ... This was the setup I was handed. ... ports pointing to 3 windows 2000 server boxes and 1 pointing to the SBS ... install ISA set it as the default gateway and leave it be, however, by ...
    (microsoft.public.windows.server.sbs)
  • Re: Static Routes in VPN
    ... I wouldn't install ISA on the 2nd office and simply do the ... same setup as the other post. ... What is the purpose of the remote server? ... > able to take there laptops to the second site and connect ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: HTTP trouble in 2004
    ... > understand is why can't I ping the public address of the DC. ... >> separating the DC role from the ISA Server role. ... >>>I appear to be an ISA dummy and have a small problem. ... My nics are setup with teh DC being the DNS server and my IE ...
    (microsoft.public.isaserver)
  • Re: Help with SBS2003 New installation and networking
    ... My modem does not have a setup option to allow forwarding of ip addresses. ... And I haven't been able to get ISA setup properly. ... internal private IP in Small Business Server 2003? ...
    (microsoft.public.windows.server.sbs)
  • RE: Sercond ISA on SBS Member Server
    ... ISA on a SBS member server. ... Without a good backup, it's difficult to have the server ... - This is often used for ISA server configuration recovery. ...
    (microsoft.public.windows.server.sbs)