Welcome to ISAserver.org

Why is joining ISA to the domain good or is it not?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Network Infrastructure >> Why is joining ISA to the domain good or is it not?

Page: [1]

Message

<< Older Topic Newer Topic >>

Why is joining ISA to the domain good or is it not? - 13.Apr.2005 2:37:00 PM

DeReD

Posts: 37
Joined: 10.Mar.2004
Status: offline

Ive been having massive problems with Radius when my cahe is enabled and Mr Shinder recommended that i join it to the domain.

Please could anyone point me to some articles or enlighten me as to why joining my EDGE firewall to the domain is ok?

Ive been keeping my ISA outside and using webproxy clients to authenticate via Radius... All works well but as soon as i enable cache.. all hell breaks loose...

So guys.. please let me know..

Thanks..

Fernandes

[ April 13, 2005, 02:40 PM: Message edited by: DeReD ]

Post #: 1

Featured Links*

RE: Why is joining ISA to the domain good or is it not? - 15.Apr.2005 12:54:00 PM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Fernandes,

You're asking the WRONG question. The correct question is to ask why joining the ISA firewall to the domain is bad.

Now, don't listen to "sky is falling" so-called "security experts". What you need is proof that a compromised domain member firewall will cause more problems than a compromised non-domain member firewall.

HINT: you won't find it because once the box is owned, domain member of not, it won't matter.

BTW -- no one has ever compromised a properly configured ISA 2000 or ISA 2004 firewall.

HTH,
Tom

(in reply to DeReD)