Welcome to ISAserver.org

Multiple External Network (H.O-Branch)

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Network Infrastructure >> Multiple External Network (H.O-Branch)

Page: [1]

Message

<< Older Topic Newer Topic >>

Multiple External Network (H.O-Branch) - 16.Mar.2008 4:01:31 AM

mdwasim

Posts: 18
Joined: 18.Aug.2007
Status: offline

Hello Experts,

The confusion is related with Multiple External networks.
I have ISA installed and working perfectly at Head Office. All clients in H.O. are able to access published servers like exchange, DNS, without any problem.

Now, I have a branch which is connected via WAN to head office. and I want to bring Branch office clients on Domain and make them work the same way H.O. Clients are working.

Lets take an example of getting DNS server to be resolved from branch office clients.

Here in network diagram I have show things in detail.
I think onces these office clients can access DNS server then I can put them on domain.. right?
To do this we have routing and NATting.
and what and where exactly i will have to work. I am not really a good hand on networking.

Hope to get some guidance from you guys.

Thanks.

Regards,
Wasim.

Post #: 1

Featured Links*

RE: Multiple External Network (H.O-Branch) - 16.Mar.2008 4:04:11 PM

davidmask

Posts: 11
Joined: 17.Sep.2007
From: JHB, South Africa
Status: offline

How is the office connected? is this leased lines or site to site VPN?

If its leased, don't make the remote network external. Define an address range for it and use that to allow traffic between the ranges.

Also, no NAT involved if you are using AD, ad does not like NAT!

Re,
Dave.

_____________________________

David Maskell
CISSP, MCSSA, MBCS, CITP, WCE-WS, nCSE
MCSE: NT4, 2000,2003,Messaging,Security
MCTS:SQL 2005,Vista, Windows 2008, Forefront

(in reply to mdwasim)

Post #: 2

RE: Multiple External Network (H.O-Branch) - 17.Mar.2008 2:42:36 AM

mdwasim

Posts: 18
Joined: 18.Aug.2007
Status: offline

Hello David,

Thanks for your reply.
Branches are connected with leased line.

Actually I didnt get you, can you please elaborate your words a little bit.

Do you mean, I should create a "network" with network range 10.11.0.0 - 10.11.255.255
and Allow traffic from this range to domain controller (10.10.10.5) ?

I don't need to create any network rule?

(in reply to davidmask)

Post #: 3