• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Does ISA 2006 work with Single NIC???

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Web Proxy] >> Unihomed >> Does ISA 2006 work with Single NIC??? Page: [1]
Login
Message << Older Topic   Newer Topic >>
Does ISA 2006 work with Single NIC??? - 31.May2007 3:08:57 PM   
mathew2k

 

Posts: 20
Joined: 31.May2007
Status: offline
Guys,

Please advice Im planning to install ISA 2006 ENT.on a 2003 server which has only one NIC. Could you please advice is there any known issues if ISA installs on a Single NIC based Server? OR For Installation of ISA2006 2 NIC is Mandatory? If not how to configure the Internal and External Network in the Same NIC? Please advice

Regards
Mathew

_____________________________

Systems Administrator
EHL Management Service
U.A.E
Post #: 1
RE: Does ISA 2006 work with Single NIC??? - 31.May2007 3:11:41 PM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Yes , its possible but not recommended.

check this :

quote:

  
Configuring ISA Server with a Single Network Adapter Configuration
Problem: There are a number of issues associated with the configuration of ISA Server on a computer with a single network adapter.
Cause: The causes include:

Multi-network firewall policy. In single network adapter mode, ISA Server recognizes itself (the Local Host network). Everything else is recognized as the Internal network. There is no concept of an External network. The Microsoft Firewall service and application filters operate only in the context of the Local Host network. (ISA Server protects itself no matter what network template is applied.) Because the Firewall service and application filters operate in the context of the Local Host network, you can use access rules to allow non-Web protocols to the ISA Server computer. This has implications for running applications located on the ISA Server computer.

Application layer inspection. Application level filtering does not function, except for Web Proxy Filter for Hypertext Transfer Protocol (HTTP), Secure HTTP (HTTPS), and File Transfer Protocol (FTP) over HTTP.

Server publishing. Server publishing is not supported. Because there is no separation of Internal and External networks, ISA Server cannot provide the NAT functionality required in a server publishing scenario.

Firewall clients. The Firewall Client application handles requests from Winsock applications that use the Firewall service. In a single network adapter environment, this service is only available in the context of the Local Host network (protecting the ISA Server computer), and Firewall Client requests are not supported.

SecureNAT clients. SecureNAT clients use ISA Server as a router to the Internet, and SecureNAT client requests are handled by the Firewall service. In a single network adapter environment, this service is only available in the context of the Local Host network (protecting the ISA Server computer), and SecureNAT client requests are not supported.

Virtual private networking. Site-to-site virtual private networks (VPNs) are not supported in a single network adapter scenario. Remote client VPN access is supported in a single network adapter scenario.



Source: http://www.microsoft.com/technet/isa/2004/plan/unsupportedconfigs.mspx

HTH,
Tarek

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to mathew2k)
Post #: 2
RE: Does ISA 2006 work with Single NIC??? - 1.Jun.2007 7:41:40 AM   
mathew2k

 

Posts: 20
Joined: 31.May2007
Status: offline
Thank you Verymuch for your help,i understand the issues within single network enviornment.thanks for the source link also

_____________________________

Systems Administrator
EHL Management Service
U.A.E

(in reply to elmajdal)
Post #: 3
RE: Does ISA 2006 work with Single NIC??? - 1.Jun.2007 9:33:46 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Hi,

ISA Server is a Firewall, and a Firewall at least needs TWO Network Cards.

so its better to install your ISA Server with Two Network Cards, at least.

Thanks,
Tarek

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to mathew2k)
Post #: 4
RE: Does ISA 2006 work with Single NIC??? - 1.Jun.2007 11:26:01 AM   
mathew2k

 

Posts: 20
Joined: 31.May2007
Status: offline
Thank you for your reply tarek

Is there any problem if i install ISA on my DC?or any problem if i install on the same Server which is running my SMS 2003

_____________________________

Systems Administrator
EHL Management Service
U.A.E

(in reply to elmajdal)
Post #: 5
RE: Does ISA 2006 work with Single NIC??? - 1.Jun.2007 11:35:51 AM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Never Ever Install ISA Server on a DC !!

Its always better to Install ISA Server Alone without any other application ot it.

Only Install those 3rd party apps that works with ISA Server, such as webfilters and bandwidth controllers, etc..

You can Install all the software in the world on the ISA machine, but with each Software you install , different protocols needs to be opened for this App to function, as a result, you increase the surface of attack on ISA Server, on your FIREWALL !!!



HTH,
Tarek

< Message edited by elmajdal -- 1.Jun.2007 11:37:47 AM >


_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to mathew2k)
Post #: 6

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Web Proxy] >> Unihomed >> Does ISA 2006 work with Single NIC??? Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts