Re: Any reason for 2nd NIC w/hardware firewall?

Tech-Archive recommends: Fix windows errors by optimizing your registry

Yes, it would be redundant. But then again so is having two power supplies
and redundant disks ;-).

About the only circumstance where you'd purposely avoid two nics would be if
you're using your hardware device as a VPN endpoint. You don't *have* to go
with two nics, but it does give you some additional flexibility, such as an
internet connection point that's outside your lan - which is handy in quite
a few circumstances.

--
Les Connor [SBS Community Member - SBS MVP]
-----------------------------------------------------------
SBS Rocks !
----------------------
"Tell me and I'll forget. Show me and I'll remember. Involve me and I'll
understand." - Confucius


"Daveinfla" <Daveinfla@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:483EFD95-8392-486F-984C-3565DA6C51CF@xxxxxxxxxxxxxxxx
Got it, with this in mind using 2 NIC's and the basic firewall (Standard
Edition) behind a Firebox would be redundant?

"SuperGumby [SBS MVP]" wrote:

a firewall does not just open/close ports, it inspects traffic travelling
through open connections and only allows them to remain open if defined
criteria are met. One of the reasons I prefer SBS Premium is due to ISA
'Application layer' traffic filtering. This means that you can control
not
only the type of traffic but exactly which process requests it. Opening a
port is not necessarily opening a port :-)

"Daveinfla" <Daveinfla@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:644E279C-963B-4F19-A1B1-0CF37BFD8C24@xxxxxxxxxxxxxxxx
It's a firebox, but can you elaborate a bit on the difference?

I know a True firewall gives added protection, but opening a port is
opening
a port NAT or no NAT, isn't it?

And what does the 2 NIC option provide behind a NAT firewall?

Thanks,



"SuperGumby [SBS MVP]" wrote:

The desirability for a 2 NIC setup depends largely on the capabilities
of
the 'firewall' device.

If it is a true firewall device there is little benefit in running a
two
NIC
solution. (Read WatchGuard FireBox, Cisco PIX or similar)

If it is a simple NAT router (which many incorrectly refer to as a
firewall)
a 2NIC solution is desirable.

"Daveinfla" <Daveinfla@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B9A64BB6-E454-4123-B2E9-6D66E52E83A8@xxxxxxxxxxxxxxxx
Setting up a new SBS 2003 Standard server (is that redundant?),
which
has
two
NIC's, however the 2nd is currently disabled since it's behind a
hardware
firewall/VPN router.

Plans are to allow OWA, and possibly host a website in the future;
all
other
traffic will be via VPN.

Is there any reason to use the 2nd NIC and the built-in firewall on
SBS?

Thanks










.

Relevant Pages

  • Re: do i need a new router
    ... Standard SBS ... > uses IPSec, NAT and port forwarding, Premium SBS includes all that plus ... I've never had a firewall or an appliance ... public connection and always tucked them ...
    (comp.security.firewalls)
  • Re: Dual Nic vs. Single Nic
    ... I never like to hook an SBS server ... I also agree with that router you would be better ... served with more firewall capabilities such as packet filtering. ... A simple NAT router in front of either ...
    (microsoft.public.windows.server.sbs)
  • Re: Any reason for 2nd NIC w/hardware firewall?
    ... Their using a Firebox x700. ... and I'll encourage them to not put it on the SBS. ... NAT routers) and their more 'normal' product. ... And what does the 2 NIC option provide behind a NAT firewall? ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 Connects to Internet/Clients Do Not
    ... "firewall features" with SBS Premium Edition that has ISA Server which has ... Your SBS Basic does not have any "firewall", ... ability to operate as a NAT Device using RRAS. ... if you have static IP#s on both Nics. ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA 2004 and SBS websites
    ... And that one if left enabled will keep the firewall service ... Call to Reading hardware selection returned ok. ... Call to Reading web publishing selection returned ok. ... Call to Notifying client setup for Default gateway as the SBS server ...
    (microsoft.public.windows.server.sbs)