Welcome to ISAserver.org

Publishing servers in a back to back ISA Server 2004 environment

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> DMZ >> Publishing servers in a back to back ISA Server 2004 environment

Page: [1]

Message

<< Older Topic Newer Topic >>

Publishing servers in a back to back ISA Server 2004 en... - 12.May2005 4:19:00 PM

future2000

Posts: 35
Joined: 26.Feb.2004
From: Guildford
Status: offline

I have an ISA server 2004 environment in a back to back DMZ. It's a project which I've found really difficult to get working due to the lack of information and advice when running this setup. It seems unless your using a Trihomed Single ISA server then your going to have to figure things out for yourselves. Anyway here is my environment

Front End ISA (External NIC xxx.xxx.xxx.xxx)
Front End ISA (DMZ NIC 172.16.1.1/16)
Back End Isa (DMZ NIC 172.16.1.100/16)
Back End Isa (Internal Network NIC) 10.20.1.3/16)

I was going to use IP addresses in the 172.16/16 range for servers in my DMZ, and then publish them on the front end isa.

I've pretty much got everything working and have published my VPN server on the back end ISA sucesfully and tested, it works (thanks to Tom.S article!)! I can see how publishing serves in the DMZ itself will be easy but how can I publish servers on my internal network?!?! If I setup server publishing rules on the external (internet) facing ISA server computer for an internal network computer that traffic won't reach it as obviously it need to bypass the internal or back end isa server?

Also I've got a Lotus Notes mail server which sits internally and at the moment our old hardware firewall listens on two (public) ip addresses and forwards the traffic to the relevant server) can ISA server do this?

Any help would be greatly appreciated!

Thanks

Tom "[Frown]"