Welcome to ISAserver.org

Traffic filtering

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Network Infrastructure >> Traffic filtering

Page: [1]

Message

<< Older Topic Newer Topic >>

Traffic filtering - 13.Oct.2004 9:33:00 PM

Rievax

Posts: 40
Joined: 13.Oct.2004
Status: offline

Hello,

My question is regarding the best ôMicrosoft wayö to achieve the following.

Our branch office has 2 routers configured for VPN access to the corporate site using private addresses. Both routers can also connect to the Internet.

We are planning to configure all the clients in the branch with Terminal Server to access some corporate applications.

1- With ISA 2004, can we configure clients in the branch to automatically route all RDP traffic to router #1 and all other traffic (corporate mail, intranet and Internet) to router #2?

2- Or is it a better idea to use some static routing if we can isolate the subnet of our Terminal Servers?

3- Is there a full Microsoft way to do this (only using Windows 2003 Server, ISA 2004à)

Thank you for any suggestions.

Post #: 1

Featured Links*

RE: Traffic filtering - 15.Oct.2004 4:52:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Rievax,

You can create access rules on the site to site VPN link between the ISA firewalls so that only RDP and other required protocols are allowed by the hosts you want to access the Terminal Server. You can even enhance the security by requiring user authentication and have this logged on the branch office ISA firewall.

HTH,
Tom

(in reply to Rievax)

Post #: 2

RE: Traffic filtering - 15.Oct.2004 5:58:00 PM

Rievax

Posts: 40
Joined: 13.Oct.2004
Status: offline

Hi Tom,

Thank you for reply.

I'm not using the ISA server for VPN. Our 2 VPN connections are done with the hardware routers.

My real question was: if the clients in the branch are using an ISA 2004 server as their default gateway, can this server be able to send RDP traffic to router #1 and all other traffic to router #2? This is what I meant by 'splitting' traffic.

Thank you for your time...

Xavier.

(in reply to Rievax)

Post #: 3