• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA 2006 to TMG branch office connection

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> Branch Office >> ISA 2006 to TMG branch office connection Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA 2006 to TMG branch office connection - 4.Mar.2011 12:38:25 PM   
NickP

 

Posts: 3
Joined: 4.Mar.2011
Status: offline
Hi guys,

We recently acquired a small consulting company (5 people now, but could grow) and we would like to make them into a branch office. Currently we have our own AD with a 3 DC's (2 2008 servers and 1 2003 server) and Exchange 2007, file servers, SQL servers, etc. and an ISA 2006 EE server. All works great.

So I'd like to setup a branch office connection between our main office and this branch office. I wanted to use ISA 2006 but it won't run on Windows 2008 so I'm going to go with TMG on Windows 2008 (64 bit of course). Is it possible to do the branch office VPN between an ISA 2006 server and a TMG server. I'm assuming it is but just wanted to check, and see if there is anything I should be aware of.

Also, I'm debating with whether to put a RODC at this branch office to handle their DNS, DHCP stuff. If I don't put a RODC I'm guessing I'd need to setup the branch offices DNS, DHCP to point to our local DNS, DHCP servers which seems like it might be a little bit slow.

Thanks in advance,
Nick
Post #: 1
RE: ISA 2006 to TMG branch office connection - 4.Mar.2011 1:36:40 PM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi Nick,

no problem to set up a VPN site-to-site between ISA and TMG.

About ISA/TMG on a DC, make sure to keep supportable by Microsoft: http://poliveirasilva.wordpress.com/2011/01/05/supportability-for-isatmg-co-location-with-a-dc/

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to NickP)
Post #: 2
RE: ISA 2006 to TMG branch office connection - 4.Mar.2011 4:19:18 PM   
NickP

 

Posts: 3
Joined: 4.Mar.2011
Status: offline
Hi Paulo,

Thanks for the information. Are there any howto guides here (isaserver.org) that describe how to setup an VPN site-to-site between ISA and TMG? I've found ISA to ISA but haven't found any for ISA to TMG.

And thanks for the info about TMG SP1. I was actually going to have a seperate machine be the RODC as I know that you originally couldn't install TMG on a RODC. But mabye now I'll just put both on the same machine. I know you aren't supposed to do that but it makes things simplier in terms of the number of machines that we have to deal with in the branch office.

Thanks,
Nick

(in reply to paulo.oliveira)
Post #: 3
RE: ISA 2006 to TMG branch office connection - 6.Mar.2011 12:43:37 AM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi Nick

the procedure does not differs much from ISA, you should have no problems to set it up.

About ISA/TMG co-location with a DC, it is not best practice, however, there are needs from customers to reduce cost and effort on branch offices. So, you can do it based on the policies I explained on my blog.

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to NickP)
Post #: 4
RE: ISA 2006 to TMG branch office connection - 7.Mar.2011 11:15:31 AM   
NickP

 

Posts: 3
Joined: 4.Mar.2011
Status: offline
Ok thanks for your help!

Nick

(in reply to paulo.oliveira)
Post #: 5
RE: ISA 2006 to TMG branch office connection - 10.Mar.2011 7:32:20 AM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Glad to help!

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to NickP)
Post #: 6

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> Branch Office >> ISA 2006 to TMG branch office connection Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts