Welcome to ISAserver.org

2004/2000 front/back end

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> DMZ >> 2004/2000 front/back end

Page: [1]

Message

<< Older Topic Newer Topic >>

2004/2000 front/back end - 3.Jan.2006 1:10:43 PM

Phil Milburn

Posts: 12
Joined: 12.Jun.2001
From: uk
Status: offline

Hi,
we are wanting to setup a spam relay server and an exchange 2003 front end server in a back to back dmz. We have a licenced copy of both ISA 2000 and 2004. Which way round would be best to put the ISA servers.
Thanks

Post #: 1

Featured Links*

RE: 2004/2000 front/back end - 3.Jan.2006 4:20:53 PM

tshinder

Posts: 47644
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Phil,

You want to put the most secure firewall closest to the assets that need protection, so put the ISA2k firewall in front of the ISA 2004 firewall. Same model as when you have a PIX and an ISA firewall, you put the PIX in front, because you want the more secure firewall, the ISA firewall, closest to the assets requiring protection.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Phil Milburn)

Post #: 2