Welcome to ISAserver.org

SecureNat vs Web Proxy

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> SecureNAT Client >> SecureNat vs Web Proxy

Page: [1]

Message

<< Older Topic Newer Topic >>

SecureNat vs Web Proxy - 8.Nov.2007 1:25:18 PM

jchoponis

Posts: 1
Joined: 8.Nov.2007
Status: offline

I have a all windows xp/server2003 network on a single subnet behind an ISA 2004 server.

In the past, I had a rule to have all HTTP/HTTPS traffic authenticate with active directory. This was done to log traffic (set web proxy settings in group policy).

The isa server also happens to be the default gateway.

I now have a web filtering appliance that will do all of the web logging with user names that I require - i don't think I really need to log traffic with the ISA.
So...I was considering dropping the web proxy settings and just having all clients be secureNat clients.
OR
I would leave all clients as web proxy clients but have the web access rule apply to all users instead of AD.

Other background info - i have a split-brain dns, internal dns servers forward all requests to outside lookup servers.

I think either way will work fine, but i wanted to figure out the best way (security/performance balance).

Thanks for any input.