Welcome to ISAserver.org

ISA - domain or workgroup member in DMZ?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> DMZ >> ISA - domain or workgroup member in DMZ?

Page: [1]

Message

<< Older Topic Newer Topic >>

ISA - domain or workgroup member in DMZ? - 12.Jul.2007 1:37:26 PM

clarkeyi

Posts: 22
Joined: 11.Jan.2007
Status: offline

Hello

I am hoping for a quick answer to this Q.
Can I have an ISA FW in a Workgroup to accomplish 2 factor authentication:
Inital log on is to SecurID server and scondly being authenticated to an external AD domain also within the DMZ to access a published MOSS portal.
Or is it safe enough to just make the ISA server a donain member for ease?

Cheers

Post #: 1

Featured Links*

RE: ISA - domain or workgroup member in DMZ? - 12.Jul.2007 2:16:33 PM

ferrix

Posts: 369
Joined: 16.Mar.2005
Status: offline

If your AD is "in the dmz" too, then in my personal opinion there's no benefit to making ISA a workgroup machine.

If you want to anyway: with ISA 2006 you can use LDAP as an authenticator and get many of the same benefits as if it was a domain member.

I have not used SecureID so I won't comment on that part of your question.

(in reply to clarkeyi)

Post #: 2