Welcome to ISAserver.org

Why not install IIS on ISA Server machine

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Web Publishing >> Why not install IIS on ISA Server machine

Page: [1]

Message

<< Older Topic Newer Topic >>

Why not install IIS on ISA Server machine - 26.Apr.2007 11:56:13 PM

bayarsaikhan

Posts: 8
Joined: 26.Apr.2007
Status: offline

Hi all,

I have only one server pc where i have installed ISA Server. But i need also to install IIS to serve my web applications.

I am planning to host .NET Web Application on ISA Server. People say i shouldn't install IIS with ISA Server at same machine.

Can anybody tell me reasons why i shouldn't do it?

Thanks in advance

Post #: 1

Featured Links*

RE: Why not install IIS on ISA Server machine - 27.Apr.2007 12:19:28 PM

dantheman

Posts: 28
Joined: 29.May2006
Status: offline

Hi,
ISA should be treated as a blackbox install, as in, you install ISA on a server, then harden it down using SCW, GPO's, MBSA, tips from articles etc.. so all it can operate is ISA, that way you have an incredibly hardened machine with a very small surface area.
As soon as you start adding applications you widen the attack area of the ISA server, and whilst ISA code/kernel maybe secure you cant vouch for the other application which could be potentially exploited leading to disasterious consequences. Adding applications to the box will mean you would have to loosen the security configuration of the OS too, which is not advisable for a server which is going to protect your network.

Regards,

Dan

(in reply to bayarsaikhan)

Post #: 2

RE: Why not install IIS on ISA Server machine - 30.Apr.2007 2:31:42 AM

bayarsaikhan

Posts: 8
Joined: 26.Apr.2007
Status: offline

Hi.

You know about "GFI Web Monitor" which is advertisement on this website. This monitor is working at the same computer with ISA Server and it needs IIS and .NET Framework. Which is exactly opposite of your advice. am I wrong?

Thanks in advance.
Bayarsaikhana

(in reply to dantheman)

Post #: 3

RE: Why not install IIS on ISA Server machine - 30.Apr.2007 2:38:53 AM

elmajdal

Posts: 5106
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

quote:

ORIGINAL: bayarsaikhan

Hi.

You know about "GFI Web Monitor" which is advertisement on this website. This monitor is working at the same computer with ISA Server and it needs IIS and .NET Framework. Which is exactly opposite of your advice. am I wrong?

Thanks in advance.
Bayarsaikhana

Where have you read this wrong info ???
have u checked the product datasheet ?? http://www.gfi.com/webmon/webmonbrochure.pdf

check the system requirement, you wont find the word IIS ??!

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to bayarsaikhan)

Post #: 4

RE: Why not install IIS on ISA Server machine - 30.Apr.2007 2:43:36 AM

bayarsaikhan

Posts: 8
Joined: 26.Apr.2007
Status: offline

Sorry, oh there is no IIS.
But you are accessing to WebMon through web browser which means there are open port 80 on ISA which is serving all the webmon request and reports? Which is replacement of IIS.

Right?

< Message edited by bayarsaikhan -- 30.Apr.2007 2:47:16 AM >

(in reply to elmajdal)

Post #: 5

RE: Why not install IIS on ISA Server machine - 30.Apr.2007 2:51:50 AM

elmajdal

Posts: 5106
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Ofcourse NOT the SAME !!

GFI is a webfilter, you need more info , read the datasheet & the manual !

By the way, you can install IIS , if this is your wish , ofcourse we can not stop you, but we can recommend whats is best for you.

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to bayarsaikhan)

Post #: 6

RE: Why not install IIS on ISA Server machine - 30.Apr.2007 3:26:15 AM

bayarsaikhan

Posts: 8
Joined: 26.Apr.2007
Status: offline

As you see, i am a newby. Now i am seeing the difference. thanks for enlightening me in this subject.

So i can do my job using webfilter without installing IIS. I found examples in C++ to create Webfilter.

Can i create webfilter in VB.NET? Any examples online?

Thanks in advance.
Bayarsaikhan

(in reply to elmajdal)

Post #: 7

RE: Why not install IIS on ISA Server machine - 30.Apr.2007 3:43:26 AM

elmajdal

Posts: 5106
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hey Bayarsaikhan,

You are most welcome.

Sure you can install GFI without IIS, not need for it at all.

Regarding the creating of webfilters, actually i am not that good in programming

so i dont know in which language you can create webfilters !

Thanks,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to bayarsaikhan)

Post #: 8

RE: Why not install IIS on ISA Server machine - 1.May2007 8:40:29 AM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Tarek,

Web filters are very similar to IIS ISAPI filters. The details are in the ISA SDK.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to elmajdal)

Post #: 9

RE: Why not install IIS on ISA Server machine - 1.May2007 9:45:07 AM

elmajdal

Posts: 5106
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline

Hi Tom,

quote:

Ofcourse NOT the SAME !!

But Not risky as if you installed IIS on the ISA Server

Thats the comparison i was poiting to.

Will check the SDK.

Thanks,
Tarek

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to tshinder)

Post #: 10

RE: Why not install IIS on ISA Server machine - 1.May2007 9:26:07 PM

bayarsaikhan

Posts: 8
Joined: 26.Apr.2007
Status: offline

quote:

ORIGINAL: elmajdal

But Not risky as if you installed IIS on the ISA Server

Hi all,

Thanks for the discussion. I am lookin' for vb.net webfilter examples and guides for days, but i am not able to find any clue that i can implement webfilter in vb.net. It looks like only c++ is the language(which i am not familiar with it) to create webfilter. Am i wrong? Please guide me how to create webfilters in VB.NET. I dont want to install IIS on ISA as you suggested.

Even if someone installs IIS on ISA, it will not work on standart HTTP port 80 yeah? I have to choose another port for IIS, since webfilter of ISA is already consuming requests on port 80.

Regards
Bayarsaikhan

(in reply to elmajdal)

Post #: 11