Re: Two nics or firewall appliance if a dynamic ip address?
- From: "kj" <kj@xxxxxxxxxxx>
- Date: Wed, 8 Mar 2006 21:53:31 -0700
ISA really needs a static IP which an appliance will provide.
--
/kj
"Owen Williams" <Owen@xxxxxxxxxxxxxxxxxx> wrote in message
news:MPG.1e797ab88b8acc9698971b@xxxxxxxxxxxxxxxxxxxxx
Ray:
You will get a variety of opinions about this because there is no one
"right" way. If you use 1 NIC on the server, you absolutely must have
an external firewall. If you use two NICs and have SBS Premium with
ISA, theoretically you can get away without an external firewall, but
most SBS practitioners still recommend as a layered defense.
I have used both configurations. My early ones were single-NIC and I
have lately been moving to two-NIC. Functionally (from the standpoint
of the average user) they almost indistinguishable. However, the two-
NIC approach does offer a few advantages in addition to enhanced
security, such as more extensive Server Usage Reports with either Basic
or ISA firewall enabled. (You can't enable these in a 1-NIC scenario.)
-- Owen Williams
In article <1141876898.182491.195470@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>,
walker18720@xxxxxxxxx says...
Hi all,
I'm a relative SBS newbie (a lot of book learnin' but not a lot of
real-world..) and have come into an SBS 2003 Standard with:
* one nic
* only NAT on the router as a "firewall"
* users (5) using pop
* a dsl service that includes a *dynamic* ip address (could move up to
static for $40 more per month - ouch)
I want to give them a real firewall solution and set the users up with
Exchange.
To get around the dynamic ip address I plan to use the DNS2Go Dynamic
DNS service.
I read the great posts here on switching from pop to Exchange which I'm
going to follow.
I was considering adding a nic and setting this box up the "SBS way"
with the included firewall. But would the two nic solution work with
the DNS2Go Dynamic DNS service?
Or should I just use a hardware firewall like a SonicWALL instead of
the two nic solution in this case?
Thanks in advance for any ideas!
Ray
.
- References:
- Two nics or firewall appliance if a dynamic ip address?
- From: jr1
- Re: Two nics or firewall appliance if a dynamic ip address?
- From: Owen Williams
- Two nics or firewall appliance if a dynamic ip address?
- Prev by Date: Re: dns resolving internal instead of external
- Next by Date: Re: Can't VPN to local LAN
- Previous by thread: Re: Two nics or firewall appliance if a dynamic ip address?
- Next by thread: Re: Two nics or firewall appliance if a dynamic ip address?
- Index(es):
Relevant Pages
|
