Welcome to ISAserver.org

Security

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> General >> Security

Page: [1]

Message

<< Older Topic Newer Topic >>

Security - 8.Jun.2006 10:05:05 PM

wasserja

Posts: 56
Joined: 4.Dec.2002
Status: offline

Currently we have an ISA server behind a linux firewall (i.e. two firewalls). We currently forward port 80 through the linux firewall to the ISA server. Does this pose any greater security risk than if we would move the linux firewall out of the way and just use the ISA server?

Post #: 1

Featured Links*

RE: Security - 13.Jun.2006 9:33:32 AM

jonsauter

Posts: 66
Joined: 8.Jul.2005
From: Dallas, TX
Status: offline

I'll tell you first off that the only responses you'll get to a question like that are a whole lot of opinion. There are many who would say not to trust a Microsoft product alone to perform a security function. There's also probably some validity to the argument that every added level of firewall (especially a different brand/configuration) increases the difficulty of an attacker getting inside your network. There's also a more substantial argument to be made for having a hardware device in front of the ISA firewall for the high performance in packet-level inspection.

Performance aside, however, the ISA Firewall (if properly configured) is completely capable of protecting your network from external threats. The Linux firewall out in front of it does not significantly lower the security risk, nor would removing it substantially increase the risk.

(in reply to wasserja)

Post #: 2