Welcome to ISAserver.org

Square one

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Web Publishing >> Square one

Page: [1]

Message

<< Older Topic Newer Topic >>

Square one - 2.Sep.2004 5:48:00 PM

skjellyfetti

Posts: 2
Joined: 2.Sep.2004
From: Milwaukee, WI
Status: offline

Greetings,
our original project list had an extranet collaboration site scheduled for spring of '05, but of course one of the execs here promised a major client that it would be up and running September 1st. Oy, just shoot me now (actually just shoot him now!). No time to learn the product; can you say fly-by-the-seat-of-your-pants?
Anyway, I've been trying to get ISA working for the past two days with a few different configurations, all to no avail. I think it would be best if I could just pick a config and go from there. I'm sure it's just a routing issue that I'm dealing with,but I'm just confusing myself by changing the setup.
Here is the scenario. I have an IIS server sitting internally (172.16.x.x) behind a three legged Checkpoint firewall (Internal, DMZ and External). We have our domain authority DNS in the DMZ.
I want to publish the web site to external users. I've tried the Front Firewall, Single Network Adapter and I think I even fiddled with the 3-leg Perimeter. I have up to three NICS available on the ISA server, and I do not want to connect it directly to the internal network.
Which configuration option would be the best?
Thanks in advance for your help.

Post #: 1

Featured Links*

RE: Square one - 3.Sep.2004 10:56:00 PM

skjellyfetti

Posts: 2
Joined: 2.Sep.2004
From: Milwaukee, WI
Status: offline

Well I've elected to use the Front Firewall config, but just cannot get this to work. I know it's a routing issue, but I am stumped.
I am trying to publish an internal web site to external users.
DMZ and External are separate subnets.

ISA - two nics connected to DMZ and External
Checkpoint firewall - three nics DMZ, Internal and External
Internal Webserver (172.16.0.114)

If I assign the internal ip range to the Perimeter Network(DMZ), I can call up the web site from the ISA server, but regardles of how else I try to configure ISA, I always end up being routed to the ISA server's IIS when I try to access the Web proxy from an external source.

This configuration should work shouldn't it?

(in reply to skjellyfetti)

Post #: 2