Welcome to ISAserver.org

Placement and IP addressing of ISA server for edge setup

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Installation >> Placement and IP addressing of ISA server for edge setup

Page: [1]

Message

<< Older Topic Newer Topic >>

Placement and IP addressing of ISA server for edge setup - 30.Mar.2008 8:26:48 AM

krazibone

Posts: 8
Joined: 17.Mar.2008
Status: offline

Good evening/afternoon all

I am currently in the process of building a new ISA server (standard) for my company and i am confused on where to place the ISA server well IP wise anyway. The setup i want is just a basic edge network where the ISA is the first line of defence and it is seperating the internal network from the internet.

Currently i have a fortinet router that has two WAN connections (ADSL and BDSL)
which is the gateway to the internet. The thing i want to know is where to place the dam thing

1. behind or in front of the router whats best?
2. If in front of the router do i need an additional NIC to create two external connections?

e.g.

BDSL \
            ISA server --- Router ---- Internal network
ADSL /

3. If behind do i have to create another subnet between the router and ISA?

e.g

BDSL \
            Fortinet Router --------------ISA Server -------------- Internal Network
ADSL /
                                             ^                                    ^
                                       10.0.254.0/24?                 10.0.1.0/24

I've read numerous articles but most diagrams depict the isa with one external(internet) NIC when it sits at the edge of the network. Any help would be greatly appreciated. Very confused at the moment.

Post #: 1

Featured Links*

RE: Placement and IP addressing of ISA server for edge... - 30.Mar.2008 8:08:37 PM

royh

Posts: 284
Joined: 23.Feb.2007
From: Lebanon
Status: offline

Hi,

ISA doesn't support multiple WAN connections. You have to use your ISA behind your Fortinet router in a double NAT configuration.

What's the model of your fortinet router?

_____________________________

Roy Haddad,M.Sc
CCNA, MCSE 2003 Messaging & Security,C|EH

(in reply to krazibone)

Post #: 2

RE: Placement and IP addressing of ISA server for edge... - 30.Mar.2008 8:40:56 PM

krazibone

Posts: 8
Joined: 17.Mar.2008
Status: offline

Hi Royh

Thanks for the reply, the router i have is a fortigate 60

http://www.fortiwall.com/productcart/pc/viewCat_P.asp?idCategory=76

I found one of shinders articles that might help others scenario is similar to mine.

http://www.isaserver.org/tutorials/2004isapixdmz.html

< Message edited by krazibone -- 30.Mar.2008 11:13:25 PM >

(in reply to royh)

Post #: 3

RE: Placement and IP addressing of ISA server for edge... - 31.Mar.2008 5:07:31 AM

royh

Posts: 284
Joined: 23.Feb.2007
From: Lebanon
Status: offline

Ur Welcome...Used to work on fortinet firewalls and set up multiple scenarios using them with ISA. Let me know if u need further assistance!

Thanks -

_____________________________

Roy Haddad,M.Sc
CCNA, MCSE 2003 Messaging & Security,C|EH

(in reply to krazibone)

Post #: 4