Welcome to ISAserver.org

Tutorial on setting up Tri-Homed ISA2004 ?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> DMZ >> Tutorial on setting up Tri-Homed ISA2004 ?

Page: [1]

Message

<< Older Topic Newer Topic >>

Tutorial on setting up Tri-Homed ISA2004 ? - 10.Mar.2004 12:07:00 PM

AgentASP

Posts: 2
Joined: 10.Mar.2004
Status: offline

Hi

Does anyone have a tutorial on how to setup ISA 2004 on a Windows server 2003 with 3 Nic's, I have several public IP's and would like to publish websites that need access to SQL servers. My idea was to put the webserver (and maybe email server?) in the DMZ and the SQL server in the LAN. Any help would be greatly appreciated.
Thanks

[ March 10, 2004, 12:09 PM: Message edited by: AgentASP ]

Post #: 1

Featured Links*

RE: Tutorial on setting up Tri-Homed ISA2004 ? - 10.Mar.2004 3:55:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Agent,

I haven't done one on this yet, but I'll put it on the list. I've noticed a few people mention this one, so I'll move it up on the list.

Thanks!
Tom

(in reply to AgentASP)

Post #: 2

RE: Tutorial on setting up Tri-Homed ISA2004 ? - 10.Mar.2004 6:12:00 PM

AgentASP

Posts: 2
Joined: 10.Mar.2004
Status: offline

Thanks

(in reply to AgentASP)

Post #: 3

RE: Tutorial on setting up Tri-Homed ISA2004 ? - 11.Mar.2004 12:16:00 AM

Lambera

Posts: 40
Joined: 5.Mar.2004
From: Washington
Status: offline

I have one but because of an NDA I cant post it but, its not to hard if you are fimilar with ISA 2004.

Use the 3 leg network template. Have 3 netowork cards : Internal, 3rd leg, external, pick a policy and create additonal access policies as needed. Also read Toms other guide on deploying an Edge Tempalte works just about the same.

AJ

(in reply to AgentASP)

Post #: 4

RE: Tutorial on setting up Tri-Homed ISA2004 ? - 11.Mar.2004 11:12:00 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hey guys,

One thing worth mentioning is the routing relationships set by the Network Rules by the trihomed DMZ template.

I've recommended to them that they change this so that the DMZ->External is NAT and the DMZ->Internal is Route. Right now, the template sets it up as:

DMZ->External = Router
DMZ->Internal = NAT

The template's default depends on you using public addresses in the DMZ, which is less likely than using private addresses.

HTH,
Tom

(in reply to AgentASP)

Post #: 5

RE: Tutorial on setting up Tri-Homed ISA2004 ? - 6.Oct.2004 7:18:00 AM

arburns

Posts: 16
Joined: 1.Mar.2001
From: UK
Status: offline

I have setup this scenario but cannot get DNS or ping to work from the DMZ to the Internal LAN even after creating thr rules. Ideally I want to be able to allow all traffic from the DMZ to the internal Network is this possible and how.

I realise the security implications but this is just fro testing

Adrian

(in reply to AgentASP)

Post #: 6