Re: server on DMZ

Tech-Archive recommends: Fix windows errors by optimizing your registry


Andy Wolsten wrote:
Hi,

We are trying to setup ISA on a DMZ network, seperated by firewal

What i need to know is, what ports do i need to open so that the ISA server
can communicate network information.

Do we need to browse the server from the internal network or should we just
stick it out there and block everything.


advice on configuration would be appreciated

It depends on how you want to use ISA server. The easiest way is to
make it your firewall, and loose the "network" firewall. Do not be
concerned, all features in the "network" firewall are in ISA, and
better!

If you want to use ISA with AD integration, there should be a number of
ports open on the DMZ-firewall to make it possible.

You could also look here:
http://www.microsoft.com/isaserver/prodinfo/casestudies.mspx but those
documents may seem to be a bit too much....

Greetz,

Trumpeteer

.

Relevant Pages

  • Re: Root exploit for FreeBSD
    ... for two ports to my FreeBSD portscluster nodes. ... and it gives the firewall ... US this is also quite common, at least with regards to University ... if your computer is going to connect on our network it must be configured in certain ways and behave "normally" or you won't get a connection. ...
    (freebsd-questions)
  • Re: Root exploit for FreeBSD
    ... for two ports to my FreeBSD portscluster nodes. ... and it gives the firewall ... US this is also quite common, at least with regards to University ... if your computer is going to connect on our network it must be configured in certain ways and behave "normally" or you won't get a connection. ...
    (freebsd-current)
  • Re: SBS R2 ISA2004 Dark Arts
    ... ISA in SBS as intended or you'll get into trouble. ... I have to get the back firewall configuration to work with the ... network in the rules/policies. ...
    (microsoft.public.windows.server.sbs)
  • Re: Outgoing VPN Error 619
    ... I've checked in local network rules and I do have a rule called VPN clients ... PPTP clients are configured to use ISA as a hop to the Internet ... SecureNAT Clients while still trying to have Web and Firewall Client ...
    (microsoft.public.isa.vpn)
  • Re: SBS R2 ISA2004 Dark Arts
    ... Right now the front firewall is not an ISA ... NIC-2 faces the internal "Live" network. ... I have to get the back firewall configuration to work with the ...
    (microsoft.public.windows.server.sbs)