Re: Can you tell me about the firewalls and Belkin



What we do here is to have things set-up like this:

Internet
Broadband Router [acting as DHCP Server] > WiFi Access Point > WiFi Clients
External NIC on SBS
ISA 2004
Internal NIC on SBS
LAN Switch > LAN Clients [wired]

*you could obviously use your Broadband Router with WiFi instead of the
separate devices noted above*

This keeps the [less secure by its nature, regardless of how you configure
it] WiFi side of things external to the actual SBS network. Any users using
WiFi can simply VPN into the SBS network from the external side and work
exactly as if they were wired to the network. Guests can 'jump onto' your
wireless network for Internet access if you give them the corresponding key.
This way even if someone gets onto your WiFi side, your busines network is
still kept secure behind ISA.

>From your previous posts, it sounds like you already have 2 NICs in your
Server so you really just need to run the CEICW accordingly. Obviously, the
Internal and External networks need to be on different IP ranges/subnets but
all you'll need to do on that side is to ensure that the Router is on a
different range to the Server's internal NIC. CEICW will do all the rest...

HTH!

David







"Leythos" <void@xxxxxxxxxxx> wrote in message
news:MPG.1dad7e1c9ff3001998a1ce@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> In article <1128507908.831406.232840@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>,
> jaffa_brown@xxxxxxxxxxx says...
>> >well to be honest you have the wrong hardware to do what you want to do
>> >with >SBS
>> >You should have gotten a wireless access point hung off a switch...
>> >99% of the time...wireless clients have problems logging directly into
>> >the domain >via wireless.
>>
>> So do you think I should be taking the router back to PC world and
>> changing for two seperate units, or are you saying that with the 99%
>> thing, that wireless is a waste of time?
>
> Most wireless devices in laptops don't connect UNTIL the user logs into
> the network - which means they can't log into the domain until they get
> a wireless connection, which means they can't log into the domain until
> they've logged into their workstation.
>
> --
>
> spam999free@xxxxxxxxxx
> remove 999 in order to email me


.



Relevant Pages

  • Hey Neighbor, Stop Piggybacking on My Wireless
    ... Stop Piggybacking on My Wireless ... the wireless Internet connection Christine and Randy Brodeur ... Many home network ...
    (alt.gathering.rainbow)
  • Re: Networking Question - VLANs on SBS 2003 Premium SP1
    ... Finally was able to get some network downtime to make the change in routers ... wireless router, but - once connected to the SBS box and I've run CEICW, the ... I ran the ISA and SBS BPA's and didn't see anything. ... I put the old router back in service so I could work on this some more. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 (no SP) - file saving over network suddenly very slow
    ... > resources turn to be slow in SBS 2003 environment. ... > the SBS server box? ... > Norton Internet Security, Norton System Works, and Norton Anti-Virus etc. ... > II Please ensure proper binding order of the network adapter cards. ...
    (microsoft.public.windows.server.sbs)
  • Re: Non-domain connection problem
    ... You said that you "hard coded the DNS server to a known DNS on the internet: ... Connect to Internet from Internal Network ... NSLOOKUP always looks for the SBS as the default gateway. ...
    (microsoft.public.windows.server.sbs)
  • Re: Perhaps the most OBVIOUS question you will ever see.
    ... I am not saying it is a good idea to run an open wireless access ... Internet firewall in place, I would worry more about the threat from ... Packets to and from machines on the wired network are not ...
    (microsoft.public.security)

Loading