Welcome to ISAserver.org

Placing ISA into Existing Network

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> Installation and Planning >> Placing ISA into Existing Network

Page: [1]

Message

<< Older Topic Newer Topic >>

Placing ISA into Existing Network - 4.Nov.2008 1:21:47 PM

jbasra

Posts: 2
Joined: 4.Nov.2008
Status: offline

Hello All,

I am new to this forum, i want to integrate ISA2006 into my existing network my network looks like this

Internet Router
          |
   |
   |
   Public IP
Sonic wall Firewall
   Internal Network 192.168.1.xxx (DMZ is Unused), I use NAT turned on on my firewall
   |
   |
   |
   |
   |
SMTP Relay server, Exchange Server, SQL Server, Files servers, Internal DNS and DPM server

   |
   |
   |
   |
Client PC's

i want to add ISA as a back end firewall and i need your help in this matter from the very beginning i am new to ISA.
thank you in advance.

Jimmy

Post #: 1

Featured Links*

RE: Placing ISA into Existing Network - 4.Nov.2008 9:09:01 PM

pwindell

Posts: 1646
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

Internet Router
|
Sonic wall Firewall
|
(create new subnet)
|
ISA Server
|
LAN

_____________________________

Phillip Windell
www.wandtv.com

(in reply to jbasra)

Post #: 2

RE: Placing ISA into Existing Network - 6.Nov.2008 11:35:52 AM

jbasra

Posts: 2
Joined: 4.Nov.2008
Status: offline

thanks for the reply.

but i want to keep subnet 192.168.1.xxx for my LAN another thing what rule i should create in sonicwall to talk to ISA and LAN.

should i put DNS and publish my SMTP through ISA and if yes what rules i need to create on ISA

thanks again.

(in reply to pwindell)

Post #: 3

RE: Placing ISA into Existing Network - 6.Nov.2008 11:46:47 AM

pwindell

Posts: 1646
Joined: 12.Apr.2004
From: Taylorville, IL
Status: offline

Look at the diagram,..you are creating a Back-to-Back DMZ,...think it through,...most of your questions have obvious answers.

The Sonicwall will no longer communicate wit the LAN and it is not expected to.

I never suggested changing the LAN IP subnet

You don't do anything with DNS.

SMTP uses a a Mail server Publishing Rule based on SMTP on the ISA followed by a Static NAT (Reverse NAT) config on the Sonicwall with SMTP.

_____________________________

Phillip Windell
www.wandtv.com

(in reply to jbasra)

Post #: 4