Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
ISA Installation behind a SCM McAfee
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
ISA Installation behind a SCM McAfee - 7.Oct.2007 12:10:50 PM
|
|
|
gtorrecilla
Posts: 7
Joined: 3.Sep.2007
Status: offline
|
Hello, i've installed several times ISA server 2004, but this time i have problems with an specific topology.
I'm trying to this:
INTERNET --> ASA (firewall cisco) --> SCM McAfee --> ISA
This is the physical topology:
http://www.gigasize.com/get.php?d=w6lt2dzt93b
1 ethernet card for the ISA server, and 1 ethernet card for the SCM McAfee
The SCM McAfee works with the mails and HTTP protocol. If i configure in any client the SCM IP Address in
Tools --> Internet options --> connection --> lan settings
the client can use internet.
If i apply this configuration in the server, the iexplorer works ok, reaching the internet throught the SCM --> ASA.
In the server, in the ethernet card, the firewall is the default Gateway (right now), and the DNS are the external DNS. It works OK and the clients reach internet, but throught this way ISA --> ASA.
i mean the primary connection to internet is through the firewall.
If i change the default gateway (for the SCM IP Address) it just don't work.
is there any way to configure the ISA for using another configuration to reach the internet? i.e. using the Iexplorer configuration?
I've been looking for information in technet and other stuff but i couldn't make it work.
Should i change the topology? using 2 ethernet cards for the ISA Server and the SCM Appliance? something like this:
Internet --> ASA --> SCM (Transparent Bridge) --> ISA (back to back or edge) --> clients?
Regards
< Message edited by gtorrecilla -- 7.Oct.2007 12:34:38 PM >
|
|
|
|
|
RE: ISA Installation behind a SCM McAfee - 24.Oct.2007 2:01:53 AM
|
|
|
gtorrecilla
Posts: 7
Joined: 3.Sep.2007
Status: offline
|
2 things
1- Isa server configured with one interface doesn't work as a firewall, just like a proxy server?
2- The ASA isn't connected direct to the internet, the full topology is something like this:
INTERNET -- IPS&IDS -- ASA --SCM WEBSHIELD -- ISA -- CLIENT
even that it's more expensive, it's more secure
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
Don't forget to turn on Windows Firewall on your clients!!! 
, so why are you use more processor % in one server if you can do some work in another one?
