Welcome to ISAserver.org

Using ISA 2004 with existing CISCO Firewall

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Network Infrastructure >> Using ISA 2004 with existing CISCO Firewall

Page: [1]

Message

<< Older Topic Newer Topic >>

Using ISA 2004 with existing CISCO Firewall - 5.Oct.2004 7:35:00 PM

TDISURFER

Posts: 2
Joined: 5.Oct.2004
Status: offline

We currently have an existing CISCO Firewall and router with an DMZ and Internal environment. We obviously do not want to rip out what we currently have but do want to take advantage of ISA 2004. I would like to know how to publish an internal Windows 2003 server using CISCOs ACLS from internal to isa in the dmz to the outside world. Any documentation would be helpful. Looking forward to the release of your book Tom any firm date yet?

Post #: 1

Featured Links*

RE: Using ISA 2004 with existing CISCO Firewall - 10.Oct.2004 7:38:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi TDI,

Thanks! The book should be ready in November.

When publishing a Web server, you just need to forward everying coming in on TCP 80/443 to the Cisco box to the ISA firewall's external addresses. The ISA firewall can take care of itself very well, so there's no worry there.

In fact, I typically simplify things they allowing everything inbound to the ISA firewall and not worry about having the front end router do any filtering. However, if you have a really big pipe, its worthwhile to offload some filtering by limiting what gets to the ISA firewall's external interface.

HTH,
Tom

(in reply to TDISURFER)

Post #: 2

RE: Using ISA 2004 with existing CISCO Firewall - 11.Oct.2004 7:30:00 PM

TDISURFER

Posts: 2
Joined: 5.Oct.2004
Status: offline

Thanks for the response, perhaps I should have given you more information. What about publishing non-webserver (eg. windows 2003 Terminal Server) which would be inside our network and using ISA 2004 in the DMZ to allow access from the outside world?

(in reply to TDISURFER)

Post #: 3

RE: Using ISA 2004 with existing CISCO Firewall - 18.Oct.2004 6:57:00 AM

nico

Posts: 2
Joined: 28.Jan.2004
Status: offline

TDISurfer,
this URL should sort you out. I was just reading it.In regards to Windows 03 Terminal Server.

http://www.isaserver.org/articles/2004pubts.html

As far as Cisco ACL's
I suggest you read "Cisco Access Lists field guide" (Gil Hunt) or do a search on the CCO.

(in reply to TDISURFER)