Welcome to ISAserver.org

TMG on Server 08 Core?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Threat Management Gateway (TMG) Beta] >> General >> TMG on Server 08 Core?

Page: [1]

Message

<< Older Topic Newer Topic >>

TMG on Server 08 Core? - 10.Oct.2008 12:28:18 PM

AdamS_EFP

Posts: 2
Joined: 10.Oct.2008
Status: offline

Howdy all,

I am wondering if it is possible to install the TMG Beta on a Core install of Server '08, with the intention being of reducing the possible attack surface (yes, I know it would be an extremely small reduction, if any, but I have a narrow-minded co-worker who has trouble putting anything aside from a dedicated firewall appliance directly on the 'net, and this would help to alleviate his paranoia.) Obviously I would expect to manage it remotely with the management application.

Is this possible?

Post #: 1

Featured Links*

RE: TMG on Server 08 Core? - 12.Oct.2008 9:15:30 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

On the surface, it seems like a good idea. The problem with server core applications is that remote management requires DCOM access from the network, which makes the solution more insecure than a full Windows installation where DCOM access isn't required.

I know the type of person you're talking about re: your co-worker. Old school, model-T type of thinking, no aware of what the actual security issues are and where resources should be applied. Some of them are teachable, some are so set in their ways you just have to stand back and wonder how the world turns on its axis every day

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to AdamS_EFP)

Post #: 2

RE: TMG on Server 08 Core? - 13.Oct.2008 10:01:38 AM

AdamS_EFP

Posts: 2
Joined: 10.Oct.2008
Status: offline

I see...makes sense. Thanks a lot for the response, Tom.

And yes, he has been working IT for about 15 years now, and is a Linux guru (although he doesn't even like to put his Linux servers public facing). So to him, the idea of putting a Windows server directly on the web scares the heck out of him :-) He isn't too old-fashioned though...if you can prove to him something works and he can see the benefit of doing it the new way, he'll accept it.

(in reply to tshinder)

Post #: 3

RE: TMG on Server 08 Core? - 14.Oct.2008 7:54:13 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Very good! Then showing him the security history of the ISA firewall and how the ISA firewall secures both inbound and outbound access, while protecting itself very effectively, might just bring him into the light :)

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to AdamS_EFP)

Post #: 4