Welcome to ISAserver.org

Switching from Checkpoint to ISA 2004

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Network Infrastructure >> Switching from Checkpoint to ISA 2004

Page: [1]

Message

<< Older Topic Newer Topic >>

Switching from Checkpoint to ISA 2004 - 1.Nov.2004 5:53:00 PM

Guest

Hello,

I am getting ready to replace my Checkpoint Firewall wuth ISA 2004...

The current config with CP is a 3-legged setup with static natting for the DMZ (DMS has primary DNS, Website, RRAS dial up server, POP server). LAN has 2 DC's both 2K3 one with Exchange 2k3 (with OWA setup for external access) the other a file server (setup as DC for redundancy) plus of course our worksations.

WAN: Public IPs
DMZ: 192.168.100.x Nat'ed to Public IP's
LAN: 192.168.77.x

Now as I understand I will have to re-configure the DMZ to use the public IP's that are currently Nat'ed...

question 1: Can I just use any spare public IP for the DMZ NIC on ISA?

question 2: Exchange (and the LAN) are using a .local domain is with DNS on the DC forwarding to our Public DNS for eveything else. IN the Public DNS there is a Public IP assigned to the OWA which is Nat'ed by CP to the internal LAN... How do I get ISA to publish OWA without a public IP? Just use the server publisher and set up a listener for owa.mydomain.com/exchange? What should be in the DNS? This one really has be stumped... "[Confused]"