Welcome to ISAserver.org

Installing CSS on a DC

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Management >> Installing CSS on a DC

Page: [1]

Message

<< Older Topic Newer Topic >>

Installing CSS on a DC - 21.Feb.2006 7:44:09 PM

austinosuide

Posts: 3
Joined: 21.Feb.2006
Status: offline

Hi Guys,
Think I posted this to the wrong list initially.. appologies!
We are in the process of migrating our infrastructure from ISA 2000 to ISA 2004.
Our environment is already pretty large and our intention is to use our 62 Domain Controllers as CSS servers. The rational for this is as follows:
1. The Ent array config is currently stored in AD. We'd like to hold this info On the same boxes
2. The CSS's need as much physical & logical security as a DC. We'd like to keep these boxes to a minimum if possible.

I am aware that it is technically possible to install the CSS on a DC but would appreciate any real-life experience of doing this and if it is a sound way to progress.

regards,

Austin

Post #: 1

Featured Links*

RE: Installing CSS on a DC - 24.Feb.2006 12:59:44 AM

Jason Jones

Posts: 2154
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

I assume this number of DC's equates to branch offices? If this is the case then I think it is acceptable to place CSS on the DC's as this is a fair compromise - this approach is also highlighted in the MS enterprise docs if you have limited servers. http://www.microsoft.com/technet/prodtechnol/isa/2004/deploy/dgisaserver.mspx#E6F

Another option is to place the CSS on the ISA servers themselves in the braches.

I would also recommmend that for your head/main office that you ideally dedicate two servers for the CSS.

With this many CSS's you will also need to think about replication and ADAM sites (again see the deployment guide above) and also: http://www.microsoft.com/downloads/details.aspx?familyid=e4024852-077f-49c2-8e57-2a37d57b0aad&displaylang=en

Cheers

JJ

< Message edited by Jason Jones -- 24.Feb.2006 1:53:04 AM >

_____________________________

Jason Jones (MVP)

Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/

Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to austinosuide)

Post #: 2