Welcome to ISAserver.org

Config question

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Server Publishing >> Config question

Page: [1]

Message

<< Older Topic Newer Topic >>

Config question - 5.May2008 2:41:53 PM

cobritek

Posts: 6
Joined: 5.May2008
Status: offline

Below is the type of router Comcast gave me as part of their business class service. There is a feature called DMZ where you tell the router that a device on the lan side can be exposed to the internet but the external NIC on the ISA server does not show up when the router DMZ is turned on. Do I need to set a rule in ISA coming from my Router IP to my External NIC of ISA? Or

I am guessing I want to do a Port Forward to the External NIC of the ISA server since it is on the LAN subnet of the router and just open up the ISA server to the world?

Right now when I say turn on DMZ from the router it doesn't detect the ISA server but if I stick my laptop or some other PC, not firewalled it is recognized.

http://www.comcast.net/data/help/Comcast_Business_IP_Gateway_User_Guide.pdf

Thanks in advance!

Post #: 1

Featured Links*

RE: Config question - 5.May2008 4:12:56 PM

Rotorblade

Posts: 862
Joined: 27.Feb.2007
Status: offline

quote:

I am guessing I want to do a Port Forward to the External NIC of the ISA server since it is on the LAN subnet of the router and just open up the ISA server to the world?

Setting up a port forward would be necessary but I think I would hold off on the �open ISA to the world� bit ; at least until you read up on ISA�s Firewall, Web and Server publishing capabilities.

http://www.isaserver.org/tutorials/Configuring_ISA_Server_Interface_Settings.html
http://www.microsoft.com/technet/isa/2004/plan/publishingwebservers.mspx

http://www.isaserver.org/tutorials/Creating-Networks-ISA-2004-Part1.html
http://www.isaserver.org/tutorials/Creating-Networks-ISA-2004-Part2.html
http://www.microsoft.com/isaserver/techinfo/Guidance/2004/configuration.mspx

http://blogs.isaserver.org/shinder/2006/08/13/best-practices-for-creating-isa-firewall-networks/

http://www.microsoft.com/technet/isa/2004/plan/firewall_policy.mspx

HTH

RB

_____________________________

David Melvin
Ohio
MCSE: Security 2003, MCSA:Security 2003

(in reply to cobritek)

Post #: 2

RE: Config question - 5.May2008 5:43:13 PM

cobritek

Posts: 6
Joined: 5.May2008
Status: offline

Thanks for the reply. I have been using ISA for a while now just not in this configuration where it connects to an already NAT'ed address. My experience with it thus far has been in a SBS configuration connecting directly to a DSL or bridge.

I think I need to do a port forward from the lan of the router to the External NIC...

(in reply to cobritek)

Post #: 3