Welcome to ISAserver.org

Website publishing and packet filtering

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> Web Publishing >> Website publishing and packet filtering

Page: [1]

Message

<< Older Topic Newer Topic >>

Website publishing and packet filtering - 28.Jan.2004 10:36:00 AM

precious

Posts: 17
Joined: 31.Jan.2002
Status: offline

I want to publish my internal website available on ISA server(Win2003 std server).
I have enabled packet filtering on ISA Server. I created a packet filter to listern on inbound port 80. And IIS6 default website listern on EXTERNAL ip address. Now It works perfectly.

Somehow, I have problem when I use Server Publishing or Web publishing rule for the above setup. Therefore I prefer the above method (packet filtering and website listerning on external ip address).

I want to know, is there any disadvantage of this method of publishing compared to "web/server publishing rule"?
By this method, is it possible to get the source ip address of the user who tried to access my website?
Is there any security issues/risks involved?

If it is safe method to publish, I am planning publish ftp, terminal server in the same manner.

Thanks for any input.

J Justin

Post #: 1

Featured Links*

RE: Website publishing and packet filtering - 29.Jan.2004 1:20:00 AM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

Hi J,

Packet filtering is the least secure method of server publishing; it lowers the level of security to that you would get with a pix firewall.

You should always use Web Publishing rules to get the highest level of security, there's no reason not to do so, unless you MUST use the Web Proxy logs on the ISA firewall itself.

HTH,
Tom

(in reply to precious)

Post #: 2