Re: SBS 2003 Premium and ISA 2004

Tech-Archive recommends: Speed Up your PC by fixing your registry



Hi TR,

Just to clarify - these are consultants employed by your company rather than
'external' consultants, right? If so, I assume that either the company
provides their laptops or at the very least retains 'control' over the
laptops they themselves have?

*Anything* that connects to your company network should be controlled by
you. That goes for AntiVirus protection, group policy settings, whatever.
Such machines should be set-up on your LAN initially then configured for
remote usage. Therefore it shouldn't necessarily be an unacceptable risk
factor connecting such machines to your internal LAN when they are on-site.
It follows then that in an SBS Premium environment that they should indeed
have the ISA client installed on them [which with ISA 2004 is clever enough
to self-detect whether the client is connected to the ISA Server and disable
itself if not]. Such machines would simply be connected on the LAN side as
per your fixed desktops and would work fine.

If these are however the machines [personal or not] of 'external'
consultants, they have no place whatsoever on your internal business network
IMHO. The correct place for these machines is connected to the Router for
Internet access [remember that in a 2 NIC ISA scenario the Router can be
used as a DHCP Server also for such external machines]

HTH,


David


"TR" <tsomething@somewhere> wrote in message
news:OVvlyZfTGHA.5172@xxxxxxxxxxxxxxxxxxxxxxx
But do i have to install the ISA client on their personal laptops?

Thanks
TR

"Paul Bishop" <Newsgroup@xxxxxxxxxxx> wrote in message
news:eLrHqTfTGHA.5468@xxxxxxxxxxxxxxxxxxxxxxx
If you are happy with the security risks then you can open ISA managment,
Firewall Policy, and change SBS internet Access policy from SBS Internet
Users to ALL users.

That should let it work, however I have always used a 2 Nic setup with
any ISA configuration so there maybe something I am not expecting.


Good luck

"TR" <tsomething@somewhere> wrote in message
news:O%23pfsNfTGHA.792@xxxxxxxxxxxxxxxxxxxxxxx
We are using a router


"Joe" <joe@xxxxxxxxxxxxxx> wrote in message
news:dvsag7$8cg$1$8300dec7@xxxxxxxxxxxxxxxxxxx
TR wrote:
Not an easy task without segmenting the network. Any suggestions?

If you have ISA, you're using two NICs. Are you not using a
modem/router
for Internet connection?








.



Relevant Pages

  • Re: VLANS, subnets
    ... machines in there. ... The clients in VLAN1 all have ISA fw clients, ... Microsoft Internet Security & Acceleration Server: ...
    (microsoft.public.isa)
  • Re: SBS 2003 Premium and ISA 2004
    ... Just to clarify - these are consultants employed by your company rather ... factor connecting such machines to your internal LAN when they are ... should indeed have the ISA client installed on them [which with ISA 2004 ... Router for Internet access [remember that in a 2 NIC ISA scenario the ...
    (microsoft.public.windows.server.sbs)
  • Re: My computers cant see each other on the net
    ... Perhaps you might consider connecting to the internet through one of the PCs ... connected and you can disable the firewall on the PC that isn't connected ... > enabled on both machines, plus the firewall within the Belkin Router. ...
    (microsoft.public.windowsxp.network_web)
  • Re: SBS 2003 Premium and ISA 2004
    ... specific business and operational requirements. ... certainly not be connecting anything to my business network that I didn't ... If it is just Internet access that they need however, ... should indeed have the ISA client installed on them [which with ISA 2004 ...
    (microsoft.public.windows.server.sbs)
  • Two Links
    ... I have one Internet Link which is connected to ISA 2006. ... My remote branches are connecting to my Terminal Server ... address which is connected to the ADSL Router. ...
    (microsoft.public.isa.configuration)