Re: isaserver.org gets SBS friendly



I'm pretty dubious about that myself, since a well-known,
not-to-be-named-by-me MVP committed to security has said that Domain
Controllers and ISA Services DO NOT MIX. If isserver.org is really
committed to security, I don't see why they should support SBS unless
Microsoft has changed SBS to allow ISA to NOT run on the same box as the DC.


"Steve Flynn" <steve@xxxxxxxxxxxxxxxxxxxxx> wrote in message
news:e9omEuYqFHA.2076@xxxxxxxxxxxxxxxxxxxxxxx
> Hi all,
>
> There is a new article (and promised future series of articles) at
> http://www.isaserver.org/articles/200sbsinstallpart1.html on running ISA
> server 2004 on SBS 2004 SP1.
>
> Well worth a read for SBS admins, written by Tom Schinder, one of the top
> ISA gurus. It's interesting to get the view from a dedicated ISA/firewall
> person on the security compromises we have to live with in the SBS
> community running everything on the one box. Schinder admits that
> isaserver.org has not always been the friendliest place in the past for
> SBS and promises this will change in future, which is a good thing because
> isaserver.org has always been one of the best resources for ISA server
> related info and promises to be even more useful in future with more
> content on SBS/ISA scenarios.
>
> Regards
>
> Steve Flynn
> MCSE, MCDBA
>


.



Relevant Pages

  • Re: Security experts criticize an SBS installation
    ... If I had a dime every time some two bit "security expert" thought Microsoft products were insecure I'd have a lot of dimes and a lot of folks that haven't looked at Microsoft products since WinNT. ... I have a GSEC security credential, volunteer for the Center for Internet Security and know that my security of my network is based more on the lack of control of my workstations than it is with that ISA box. ... I cannot, to the best of my knowledge, remember a SBS box that has been hacked when the passwords are long/strong/secure, the box is patched, and the workstations are configured based on the risk of each person. ... But a SBS server ..even with that "so called" hacked in umpteen minutes ISA server ...Get him to tell you in details how he hacked into ISA server. ...
    (microsoft.public.windows.server.sbs)
  • Re: The difference between ISA and SBS. Where is the security?
    ... In a small buisness there isn't any need for high security, hence SBS. ... standalone ISA server. ... Also SBS is *Small* Business Server. ...
    (microsoft.public.isa)
  • Re: security for Exchange & SBS
    ... non-profit and have pulled these guys from the stone-age (P2P network over ... manually altered the rules in ISA in any way that lessens the security. ... collectively have hundreds or thousands of customers using SBS. ...
    (microsoft.public.windows.server.sbs)
  • Re: Connecting SBS to the internet sing 1 NIC
    ... Layered levels of security make for a better night's sleep. ... How to Configure a SBS for Full Time Internet Access with a Single Network ... I would run ISA ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: security for Exchange & SBS
    ... the rules in ISA in any way that lessens the security. ... collectively have hundreds or thousands of customers using SBS. ... Your configuration is essentially the same as mine, and it looks to me like ...
    (microsoft.public.windows.server.sbs)

Loading