Welcome to ISAserver.org

Managing many ISA2004 servers...

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Management >> Managing many ISA2004 servers...

Page: [1]

Message

<< Older Topic Newer Topic >>

Managing many ISA2004 servers... - 21.Jun.2004 9:45:00 AM

rickday

Posts: 10
Joined: 21.Jun.2004
From: Sydney, Australia
Status: offline

I've recently been brought in on a project to do with security at our 200-odd stores. I've come to the conclusion that I need to implement a small firewall at each of these stores. As discussed in Tom Shinder's Firewall Fairy Tales document, I'm looking at a very low bandwidth (10Mb/s) combined Ring 1 to Ring 3 firewall. The problem I want to solve is managing 200 plus firewalls many-to-one. If there is a change required on all firewalls, I don't want to have logon/attach to each ISA server to implement this change.

I've been looking at available documentation for ISA2004 and can not find anything about many-to-one management, either its not there, or I have missed it.

So does anyone know about this? Is it possible? Where can I find more about it?

Post #: 1

Featured Links*

RE: Managing many ISA2004 servers... - 21.Jun.2004 6:27:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Rick,

The enterprise version of ISA 2004 will support entprise policies. When a change is made to the enterprise policy, the changes are made to all machines that load the enterprise policy. EE is due out later this year.

An alternative with ISA 2004 Standard Edition is to script the changes and puch the script to the remote hosts. Now that config management is done via .xml files, its easy.

HTH,
Tom

(in reply to rickday)