Welcome to ISAserver.org

Where to Place ISA 2004

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> General >> Where to Place ISA 2004

Page: [1]

Message

<< Older Topic Newer Topic >>

Where to Place ISA 2004 - 7.Sep.2005 11:52:00 AM

kdickinson

Posts: 23
Joined: 31.Aug.2005
From: Oxford, England
Status: offline

All

We have purchased ISA to initially publish OWA and other exchange services and for Web caching and proxying.

At the moment we have a Watchguard Firewall and have a DMZ and LAN. There are no plans to replace the Watchguard at the moment.

Where should I place the ISA server? in the DMZ or the LAN? I am useing it in Single NIC mode at the moment, however the server does have two NIC's (one is dissabled).

If I were to use 2 Nics and use the ISA server as a backend server again where should I place it. The DMZ or the LAN?

In two NIC mode Would I place it in the DMZ with an External NIC address of 192.168.2.X in the DMZ range and the Watchguard NAT'ing all appropriate external traffic to the External address of the ISA Server and would I give the internal NIC a 10.0.0.X address on the LAN.

Would this be correct?

The Exchange server is on the LAN.

Could someone please advise me on the most appropriate setup.

In the Future we may look to use the VPN properties of the IAS Server. At the moment we use the Watchguard VPN clients but are running out of licenses.

Thanks in advance for any help.

Best regards

Kevan