Re: network config question

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: JOlson (TJMCG) (jolson_at_tj-myers.com)
Date: 04/13/04 

Date: Tue, 13 Apr 2004 19:27:33 GMT

It is sad that they no longer include ISA on the standard ed. of SBS!

I know that with very careful hardening of Server/Exchnage you can
safely do what you're talking about -- as well as good patch
management. However, I feel much better using a application based
filter for my smtp/http/pop traffic. ISA does a good job of this
(IMHO). It would have no qualms about having both Sonicwall and ISA
between the internet and your SBS box.

Jason Olson
Solutions Mgr
www.tj-myers.com
TJ-Myers Consulting Group

On Tue, 13 Apr 2004 10:33:02 -0600, "rockymtntuna"
<stan9753@yahoo.com> wrote:

>I am setting up SBS2003 to replace old NT 4 domain with exchange 5.5. Have
>previously been using sonicwall and opening ports for SMTP mail to flow
>through firewall to Exchange.
>
>My question is would it be a good idea to add a second NIC to the SBS box
>and use SBS firewalling behind the sonicwall. So I would in effect be
>forwarding the mail ports from the sonicwall to the outside NIC of the SBS
>server and then creating another subnet using the internal NIC.
>
>I just have the standard addition so no ISA. It seems like kind of a
>security issue to have ports 25. 110, 80 open to the SBS server. Would
>appreciate your opinion.
>
>Thanks!
>

Relevant Pages

  • Re: ISA and SonicWall (was Cannot connect through ISA Server to www.microsoft.com)
    ... Sonicwall does not include application-layer filtering, and it doesn't directly integrate with Active Directory. ... My only knowledge of SBS 2008 is from what's been published, but I thought it was established that ISA was not going to be included or supported running on the SBS itself. ... Some of the better firewall features only come with their Enhanced firmware, ...
    (microsoft.public.windows.server.sbs)
  • ISA and SonicWall (was Cannot connect through ISA Server to www.microsoft.com)
    ... and wishing to learn more about SonicWall products. ... removing ISA from the SBS server. ... Personally I think it is a bad idea not to offer ISA Server with SBS ...
    (microsoft.public.windows.server.sbs)
  • Re: RWW Timing
    ... If you have installed ISA, ... Expand the server node and highlight ''Monitoring''. ... In the following website you can find many useful resources related to SBS ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Switching IP address ranges
    ... I very happy to be using ISA and a standard managed AV product like Sophos ... For this one site the security is vital and the fact another company is ... There is nothing that SonicWall can do better than ISA 2004 can and to add ... Even if you use SBS for email only, which you may not otherwise why SBS ...
    (microsoft.public.windows.server.sbs)
  • Re: Switching IP address ranges
    ... They claim that SonicWall uses deep packet inspection, ... ISA is a more complete ... Even if you use SBS for email only, which you may not otherwise why SBS ... Are you sure that the vendor with proper VPN requirements is not you? ...
    (microsoft.public.windows.server.sbs)