Welcome to ISAserver.org

Some newbie help? ISA Backend Configuration

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Network Infrastructure >> Some newbie help? ISA Backend Configuration

Page: [1]

Message

<< Older Topic Newer Topic >>

Some newbie help? ISA Backend Configuration - 8.Dec.2004 8:36:00 PM

Tim Kovaleski

Posts: 1
Joined: 8.Dec.2004
Status: offline

Hello,
I have been scouring the net for any help I can find on setting up ISA 2k4 as a back firewall. We are using a hardware firewall appliance that I love, but we have a scenario at work that I need to resolve very soon.

Right now (no ISA server).
Setup is as follows:

Right now we have 2 public IP addresses. I have an alias set up so our web server uses the one public address, and our in-house network uses another. Actually have three networks on the firewall.
.50.x is on the trusted, (IP Addy 1)
.100.x is on optional, (IP Addy 1)
.101.x is on optional, (IP Addy 2) WEB

The .101.x is where our webserver is located. File transfers are available from the trusted to optional. You cannot access trusted resources from optional. Unless a given port is specified in the firewall.

The other network, .100.x is on the optional side as well. Is there any way to block all access from the 101.x network to the 100.x?

It's kind of weird how it is set up, but it's the only way I could get it to work, now I want to make sure I disable access between the two networks on the optional side.

Anyone have any ideas? Or need me to elaborate some more?

What would an ISA server get me in this scenario?

Could I still use my hardware firewall and then have the ISA behind it? Being able to route the traffic as necessary?

Now it seems since we are moving that the cable company is giving us 2 seperate cable modems. (one for each IP since we host our own web/ftp)

This is just getting better by the minute!

[ December 08, 2004, 08:43 PM: Message edited by: thatguy ]

Post #: 1

Featured Links*

RE: Some newbie help? ISA Backend Configuration - 9.Dec.2004 12:39:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi TG,

A network diagram would really help figure out what's going on here, and how an ISA firewall can improve your security.

Thanks!
Tom

(in reply to Tim Kovaleski)

Post #: 2

RE: Some newbie help? ISA Backend Configuration - 9.Dec.2004 7:57:00 PM

Guest

I have a question.. Is it possible to set up ISA to be a proxy for web pages and at the same time do web publishing for OWA? We already have web publishing for OWA and there are 2 nics one to the internal network, and one to the DMZ. The internal nic doesn't have a gateway configured so that the web publishing will work (microsoft recommended). But because there isn't a gateway on the internal nic, remote branches that have different subnets are not able to use the web proxy. Any advice?

Thanks!

(in reply to Tim Kovaleski)

Post #: 3