Re: 2 NIC to 1 Best Practice ?

Tech-Archive recommends: Speed Up your PC by fixing your registry

Hi,

Teneo, I'm uninstalling ISA 2004 because I need to implement a UTM solution
in addidtion to the IPSec VPN requirement - some of the legit websites that
my client has visited has tried to download unwanted executables - driveby
downloads etc. You are correct in that I can't support ISA on a SBS box but
then I'd be doing them a severe injustice saying that ISA can do what the
Watchguard Firebox is going to do for them. ISA on a domain controller,
although MS sold it as good, is not an ideal solution (hence the removal with
SBS 2008 - ISA on a separate box is ICSA certified, on SBS it's not). 2
enterprise class firewalls = grief. There's no need for the 'get someone
better' crap.

Regards Colin.

"Teneo" wrote:

I would ask WHY are you uninstalling... They have a terrific product and if
you cant support ISA then you are doing them an injustice by uninstalling.

You state 'they now require IPSec VPN' implying they cant have this with ISA
2004 ?

You uninstall ISA then you have made them LESS secure, keep ISA and add the
hardware firewall also.

Be honest with them, say you cant support ISA and will find them someone who
can.






"Dave" <please@xxxxxxxxxxxxxxxxxx> wrote in message
news:demdnaHLzscp2eTVnZ2dnUVZ_qvinZ2d@xxxxxxxxxxxxxxx
I recently moved from 2 NIC's to 1 and it was suggested that I first remove
the IP of the extenral NIC before I disabled it. I believe I also had to
change the gateway of the remaining SBS NIC to point to the internal NIC of
the edge fireall.

-Dave

"Colin" <Colin@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:3C90BF56-9F34-4269-AA08-C89D6FA20CC3@xxxxxxxxxxxxxxxx
Hi all,

I need to uninstall ISA 2004 from a client's SBS 2003 box and install a
hardware firewall instead (they now require IPSec VPN). Is there a 'Best
Practice' for doing this ? My plan is to backup, uninstall ISA (which
will
presumable take SP3 with it ?), reboot if required, disable the external
NIC,
re-run the CEICW and then implement the hardware firewall. This will all
be
done off line until the F/W is installed. Can anyone see anything I've
missed
here ? TIA.

Regards Colin.





.

Relevant Pages