Re: Using Windows server as an internet gateway

From: Steve Bruce, mct (swb_mct_at_msn.com)
Date: 09/06/04 

Date: Mon, 6 Sep 2004 18:30:13 -0500

I guess I was out in the sun too long this weekend. Why would you want the
SBSPremium when you already have invested in the Standard Version ???

The point still remains that a correctly configured software firewall on the
SBSServer is considered a reasonable security practice by Micorsoft and
everyone who uses SBS Premium.

You might conisider licencing the standard version of ISA to accomplish
this.

"Steve Bruce, mct" <swb_mct@msn.com> wrote in message
news:uSZhqiGlEHA.3392@TK2MSFTNGP14.phx.gbl...
> The SBS2003 Premium version comes with the ISA Server (firewall) which
> runs on the same computer. As a package SBS2003 server is intended to be
> everything you mentioned including the firewall.
>
> The difference in cost between the standard SBS Server (without ISA) and
> the Premium is less than the cost of a SOHO router/firewall and you get
> SQL thrown in too.
>
>
> "Danny L" <dliberty@gmail.com> wrote in message
> news:a4203544.0409061505.2df3ed79@posting.google.com...
>> Hi,
>>
>> We are a small office with 10 clients & a server running SBS 2003
>> which also functions as our Exchange server.
>> Currently we are using a simple Linksys router with a DSL connection
>> as our internet gateway. Recently we are interested in "upgrading" our
>> gateway so that users can connect remotely and also make sure a
>> firewall is running.
>> One of the options was purchasing a VPN/firewall enabled router, but
>> those are very expensive.
>> An option I had in mind was to use the SBS 2003 server as the internet
>> gateway (with 2 NIC interfaces - one to connect to the DSL modem &
>> another to the LAN). This is of course based on my assumption that SBS
>> 2003 can do NAT.
>> As far as I understood, I can use RAS to allow VPN connections to the
>> network and 3rd party gateway firewall application to protect the
>> connection (such as Interscan VirusWall SMB by TrendMicro).
>> This sounds like a nice setup to me, but I'm kind of concerned if this
>> is a "classic" solution considering the fact that the server is also
>> running Exchange & being used as our file server. Also I'm not sure if
>> it is safe to connect our main server directly to the internet.
>>
>> If anyone can advise on this solution or any other solutions, please
>> let me know.
>>
>>
>> -Danny
>
>

Relevant Pages

  • Re: SBS VPN setup?
    ... And if you have a hardware firewall you haven't flashed in years they just got in through a exploit. ... SBS plugs into a switch with the other computers and the switch is plugged into a firewall appliance with 2-nics. ... To compare apples to apples, let us assume there is a network setup as I outlined above...and the firewall appliance is an ISA server, such as those available from Celestix. ... > learn and test the RWW solution before deploying it. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS VPN setup?
    ... The 2-nic configuration is used when the SBS server will *also* act as your network's firewall. ... You purchase 2k3 PREMIUM and that comes with ISA to handle the firewall duties. ... To compare apples to apples, let us assume there is a network setup as I outlined above...and the firewall appliance is an ISA server, such as those available from Celestix. ...
    (microsoft.public.windows.server.sbs)
  • Re: Internet on nodes
    ... disabled state (someone please confirm this for SBS Standard, ... firewall service should result in 'ISA lockdown'. ... print' from both the server and a WS. ... Was not able to connect to the internet on the WS. ...
    (microsoft.public.windows.server.sbs)
  • Re: ceicw failure on e-mail config
    ... Merv Porter [SBS MVP] ... Ethernet adapter Server Local Area Connection: ... Call to Reading the firewall selection returned ok. ... Firewall Rule: SBS DHCP Client ...
    (microsoft.public.windows.server.sbs)
  • Re: Firewall on a single NIC SBS2003 Standard edition
    ... Frank McCallister SBS MVP ... > " Well, if you're wanting to run the firewall on a single NIC, you aren't ... Don't ask the server to do *everything*, ... > internet traffic from the workstations don't have to go through the SBS. ...
    (microsoft.public.windows.server.sbs)
Quantcast