Re: Running ISA 2004 and SBS 2003 on a network



Thanks. SBS Premium is fully operational.

Do you know why you don't use the CA Authority on the SBS box besides SBS
taking care of it for IIS? Do you know if this same Certificate generated
for IIS is or can be used for my other services then? And copied to the ISA
Server to secure my internal communications?

I'm thinking of buying a Commercial Cert to play with but I'd like to be
able to set clients up for internal users to be able to access their networks
securely without a Commercial Cert which is one reason why I chose this route
for my own installation.

Thanks Again Susan for the Reply.

P.S. As for the 5 clients and separate servers you can see my other responce
in this thread.

"Susan Bradley, CPA aka Ebitz - SBS Rocks" wrote:

> 5 clients? And for this you have a separate ISA and server?
>
> Get SBS 2003 premium...use the wizards..we use a self cert and we don't
> install the CA authority on the SBS box.
>
> Have you run the Wizards to set up the SBS?
>
> adam@xxxxxxxxxxxx wrote:
> > I am configuring the following:
> >
> > 1 - ISA 2004 Server Running on Windows Server 2003 Enterprise
> > -2 NICs - 1 internal as part of the SBS network and 1 external adjacent to
> > the current router.
> >
> > 1 - SBS 2003 Premium Server - 1 NIC - Connected to linksys Router
> > -Exchange - Email
> > -IIS - Website
> > -Domain Controller
> > -DHCP (Functioning but with no Clients because all are Static)
> > -OWA - Wish to Implement Now
> >
> > 5 - Clients - Currently Connected to SBS 2003 and the Router.
> >
> > First I'm not sure which order to do things in. I've joined my SBS domain
> > with my ISA Server as a Member Server and Through ISA Granted all internal
> > clients External Access(Though I don't have any clients through the ISA
> > yet).
> >
> > Now I wish to publish the necessary rules before I switch the network to the
> > ISA Server. Meaning I want to publish my IIS, Exchange, and OWA through ISA
> > before I get rid of the router as the access point for these services and
> > have clients run through ISA.
> >
> > I am hung up at Certificate Services:
> >
> > I tried installing the Certificate Authority on the SBS box to generate
> > Certificates for ISA and IIS. I got lost and couldn't replace my IIS
> > Certificate with the one I generated and still connect from a client via
> > SSL.
> >
> > I'm not sure if I need just one certificate in one location on each server
> > for everything - Exchange, OWA, RWW and IIS through ISA.
> >
> > I'm also not sure if I need to use the External IP(If Allowable) or Domain
> > Name on the Certificate I generate and if my own Certificate Authority from
> > the internal network can provide this once the ISA Server is in place.
> > Please Advise here too.
> >
> > Also, Which Publishing Wizards should I run and in which order to publish
> > All of it, the Exchange, OWA, RWW, and IIS(with SSL).
> >
> > I'm about 4+ hours into Certificate Research and 25+ Hours into the ISA over
> > multiple days and am not making great progress right now so your assistance
> > will be greatly appreciated. Should I post any of these questions to
> > another Group?
> >
> > Thanks,
> > Adam
> >
> >
>
> --
> An open letter to the Security Community::
> http://msmvps.com/bradley/archive/2004/12/12/23540.aspx
>
.



Relevant Pages

  • Re: RWW Timing
    ... If you have installed ISA, ... Expand the server node and highlight ''Monitoring''. ... In the following website you can find many useful resources related to SBS ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: Error on page in RMonitoring report
    ... IIS settings? ... Do you have any issue when you visit SBS backup node in the Server ... since you still receive the monitoring report of ...
    (microsoft.public.windows.server.sbs)
  • Re: DHCP Issues. Very strange
    ... default order of rule in ISA 2004. ... Windows SharePoint Services intranet site, ... server certificate on Web server name column and then click Next. ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS VPN setup?
    ... The 2-nic configuration is used when the SBS server will *also* act as your network's firewall. ... You purchase 2k3 PREMIUM and that comes with ISA to handle the firewall duties. ... To compare apples to apples, let us assume there is a network setup as I outlined above...and the firewall appliance is an ISA server, such as those available from Celestix. ...
    (microsoft.public.windows.server.sbs)
  • Re: Companyweb will not load.
    ... When you install SBS, do the complete installation to the point of getting ... An application error occurred on the server. ... so it sounds like IIS and the SharePoint instance are ok so far.. ... of the companyweb site in the IIS mmc.. ...
    (microsoft.public.windows.server.sbs)

Loading