Welcome to ISAserver.org

Setup for a hoster

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Network Infrastructure >> Setup for a hoster

Page: [1]

Message

<< Older Topic Newer Topic >>

Setup for a hoster - 14.Sep.2006 10:08:08 PM

LogIQ

Posts: 3
Joined: 14.Sep.2006
Status: offline

I have a couple of questions regarding use of ISA server 2006 for our hosted setup.

We have a WAN connection with 2 seperate subnets. How do we attach all our 32 (16 from each subnet) to ISA servers WAN?

We need to be able to have servers use their public IP directly, but we would also like them to be firewalled, how do we come about that?

The ISA server will need to NAT some of the WAN IP's to a LAN IP, and if possible, some of the WAN IPs' transparently transported to the server, so the server will have the WAN IP as IP.

We also want to provide hosted exchange, sharepoint, etc.

We do have redundant ethernet cable to our server rack, so would it be possible to use them both as a failsafe? For instance we could bridge 2 network adapters for this...

We want to make the best possible design for this setup. We will have webservers, mailservers, MSSQL servers, Exchange servers, VMware virtual servers and a wide variety of servers, both windows and linux. Can you point to some best practises for similar networks?

Also could we run an ISA server as a virtual server? Is there any documentation how to do this?

Post #: 1

Featured Links*

RE: Setup for a hoster - 15.Sep.2006 2:19:07 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Log,

Yes, you can do this, but I don't know if anyone has documented the process.

You can have custom NAT and Route relationships for each machine behind the ISA firewall, but you need to be aware of the Interaction between those relationships and the Network Rule that controls those relationships and order the Network Rules accordingly.

Even if a route relationship, you will benefit from firewalling.

Regarding Route relationships and Web Publishing Rules, you should check out the following to see how it works:

http://www.isaserver.org/articles/2004pubdmzservers.html

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to LogIQ)

Post #: 2