RE: ISA
- From: v-edtian@xxxxxxxxxxxxxxxxxxxx (Edward Tian)
- Date: Wed, 20 Jul 2005 04:16:34 GMT
Hi Kiran:
Thank you for posting here.
>From your description, I understand that your ISA Server is connected to
the router and the local network through a single network adapter, like the
topology below:
ISA Server---|
|-----Router--Internet
Clients-------|
If I have misunderstood, please feel free to let me know.
Technically, there are two types of configuration scenarios. In one, the
server has two network adapters, one is connected on one side with a public
network adapter to the router, and on the other side to the private network
with a private network adapter, and the SBS server is acting as the
gateway. In the other, the SBS server is connected to the router and the
local network through a single network adapter.
In the single network adapter scenario, firewall service does not work
correctly, because the ISA Firewall service is designed to work only with a
dual network adapter configuration. ISA server may only be used for
restricted purpose, such as Web proxying, Web caching, etc.
The two network adapter scenario is much more secure due to the fact that
all network traffic is filtering through the ISA server, and the server has
better information about its own state and role in the network. So we
recommend you deploy two network adapters for you ISA server and configure
the server as the gateway. That makes your clients full protected by ISA
because all traffic and requests are sent to ISA (From both outside and
inside).
The following articles are for your reference if you want to know more
about the feature and configuration of ISA, you may have a look at your
convenience:
ISA Server Home
http://www.microsoft.com/isaserver/default.mspx
ISA 2004 best practices, Tips and Tricks:
http://www.isaserver.org/tutorials/2004bestpractices-p1.html
An ISA Server resource site:
http://www.isaserver.org/
Hope this helps, if you to use ISA firewall to protect your whole network
(Including all the clients), we recommend you use two network adapter
scenario for your ISA Server, that makes your network more efficient and
secure. If you have anything unclear, please feel free to let me know, I am
glad to be of assistance.
Have a nice day, Kiran!:)
Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Kiran" <kiran.vithal@xxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: ISA
| Date: 19 Jul 2005 10:27:11 -0700
| Organization: http://groups.google.com
| Lines: 17
| Message-ID: <1121794031.669241.309780@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 62.255.32.13
| Mime-Version: 1.0
| Content-Type: text/plain; charset="iso-8859-1"
| X-Trace: posting.google.com 1121794037 31236 127.0.0.1 (19 Jul 2005
17:27:17 GMT)
| X-Complaints-To: groups-abuse@xxxxxxxxxx
| NNTP-Posting-Date: Tue, 19 Jul 2005 17:27:17 +0000 (UTC)
| User-Agent: G2/0.2
| Complaints-To: groups-abuse@xxxxxxxxxx
| Injection-Info: f14g2000cwb.googlegroups.com; posting-host=62.255.32.13;
| posting-account=Crt7Lg0AAACbv9BNacSzZMkykbR_YiJH
| Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!news.glorb.com!postnews.google.com!f14g2000cwb.googlegroups.com!not-fo
r-mail
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:137091
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi
|
| I have got a network set up which uses a router to connect to the
| internet.
|
| Client machines are assigned a DHCP through the router.
|
| If i use the ISA firewall protect the whole server will it protect
| client machines or just the server? In theory its pooling files from
| the server so it would be that individual machines are covered but as
| they have direct access to the internet and they don't have internet
| connection through the server it could mean that they are protected?!!
|
| Thanks
|
| Kiran
|
|
.
- References:
- ISA
- From: Kiran
- ISA
- Prev by Date: Re: Multiple Internet Email Domains
- Next by Date: Re: DHCP not sending DNS server
- Previous by thread: ISA
- Next by thread: Benefits of disk defragmentation tools
- Index(es):
Relevant Pages
|
