Welcome to ISAserver.org

Web Browsing through 3rd NIC

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> General >> Web Browsing through 3rd NIC

Page: [1]

Message

<< Older Topic Newer Topic >>

Web Browsing through 3rd NIC - 19.Jun.2007 12:24:04 AM

mkleinpaste

Posts: 21
Joined: 19.Apr.2007
Status: offline

Hi,

I just started setting up my new ISA Server 2006 Standard for our edge network. It's gone pretty well so far, however, I have run into a stumbling block I was hoping you experts could help me with.

Here's the scenario. We have your normal web services going through a bonded T-1 connection along with our Uber important VPN connections to our 50+ client sites. However, we also have a cable modem that we have historically used for "Web Browsing", etc. (the fun stuff) to minimize the amount of bandwidth we use from our more expensive T-1 for "Non-Business" activities that we allow to keep moral up such as YouTube.

I would like to do the same with the ISA Server. I have it connected the ISA Server to our Internal LAN, our External T-1 and our Cable Modem. The LAN and T-1 are static addresses while the Cable Modem runs on DHCP and has successfully obtained an IP Address. I tried creating a new network using the "Cable Modem" NIC and applying an Access Rule that allows the "Fun Stuff" from Internal Network to the Cable Modem Network.

Alas, this did not work, so obviously I'm missing something here. If anyone has some insight into making this work please let me know. Otherwise I'll scrap the Cable Modem and at least we'll save a few bucks a month without it.

Thanks in advance to whomever brings the successful resolution of this!

Michael

< Message edited by mkleinpaste -- 19.Jun.2007 12:32:01 AM >

Post #: 1

Featured Links*

RE: Web Browsing through 3rd NIC - 19.Jun.2007 5:53:26 PM

marcus2v

Posts: 78
Joined: 28.Oct.2001
From: Reading, UK
Status: offline

You'll need to put a router which supports policy based routing in front of the ISA firewall. Something like the Cisco 1800 series will do the trick and are relatively inexpensive.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12cgcr/qos_c/qcpart1/qcpolicy.htm

Although not shown that clearly in the above link you can configure matching ACLs so say all http, https, and ftp is sent via the cable modem and all other traffic via the T1 connection

(in reply to mkleinpaste)

Post #: 2

RE: Web Browsing through 3rd NIC - 26.Jun.2007 3:31:21 AM

alex3299

Posts: 44
Joined: 19.Mar.2003
From: Portugal
Status: offline

You don�t have to buy any additional hardware to put this working, the ISA server in this case must have 3 NICS, 1 for the T1, 1 for the cable modem and 1 for the internal LAN, when you install ISA you define your internal network, and all the other nics are members of the External network, now you just have to create another external network, use the cable modem nic and allow the traffic based on protocol, FQDN, IP, on it...

If you don�t set the Network Rules on the Configuration\Networks, your network will not work.

(in reply to marcus2v)

Post #: 3

RE: Web Browsing through 3rd NIC - 28.Jun.2007 3:29:02 AM

mzakir

Posts: 151
Joined: 2.Apr.2007
Status: offline

Hi Alex,

Can you describe this solution in details? If possible pls show us snapshot..

Thanks

_____________________________

Malek Zakir
MCP,MCSA:Security,MCSA:Messaging,MCTS,CCNA,DCH

(in reply to alex3299)

Post #: 4

RE: Web Browsing through 3rd NIC - 25.Jul.2008 2:27:07 PM

mkleinpaste

Posts: 21
Joined: 19.Apr.2007
Status: offline

Hi Alex,

How did you accomplish this. I found where you can add an adapter as an external network in the "Networks" tab.

How did you route all the internal traffic that you don't want heading to the main line to the secondary line? Details would be great!

Thanks.

(in reply to alex3299)

Post #: 5

RE: Web Browsing through 3rd NIC - 27.Jul.2008 6:08:50 PM

royh

Posts: 284
Joined: 23.Feb.2007
From: Lebanon
Status: offline

Hi Guys,

Keep in mind that ISA doesn't support mutliple gateways!!! You can't use your T1 line and cable modem together.

Thanks -

_____________________________

Roy Haddad,M.Sc
CCNA, MCSE 2003 Messaging & Security,C|EH

(in reply to mkleinpaste)

Post #: 6