Welcome to ISAserver.org

Three-homed ISA with packet filters

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> General >> Three-homed ISA with packet filters

Page: [1]

Message

<< Older Topic Newer Topic >>

Three-homed ISA with packet filters - 28.Jan.2001 11:43:00 AM

DSims

Posts: 5
Joined: 28.Jan.2001
From: springfield, illinois
Status: offline

I can't get the machines on the perimeter subnet access to my corporate network.

It seems the packet filters only apply to traffic between the external network and perimeter network or traffic originating from the internal network..???

I want to allow a perimeter web server to access an SQL box on the corporate network.

I've tried any combination of allowing all ip traffic and can't get it to work.

I'm used to applying filters in a Cisco environment to a specific interface. I don't see how to specify the Internal (corporate) interface.

Post #: 1

Featured Links*

RE: Three-homed ISA with packet filters - 29.Jan.2001 1:13:00 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

To allow you servers on the DMZ network to communicate securely with your internal database servers, public the database server on the internal (corporate) network, and in the publishing rule, configure it with a client address set that includes on your web server. In that way, the database server on the internal network is available to external networks (such as your DMZ), but the only client that can access the internal server will be the web server.

HTH,

Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/