Welcome to ISAserver.org

Will ISA work as Firewall from within a VMWare virtual Machine?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> General >> Will ISA work as Firewall from within a VMWare virtual Machine?

Page: [1]

Message

<< Older Topic Newer Topic >>

Will ISA work as Firewall from within a VMWare virtual ... - 24.Jun.2005 12:37:00 AM

Gurnster

Posts: 4
Joined: 23.Jun.2005
Status: offline

Dear All (or Tom as the case usually is)

Any chance ISA will work as a proxy/firewall if it's installed on a vmware guest virtual server? This would mean I have only 1 nic in the Host (XP) box, but 2 or 3 virtual nics in the w2k3 guest vm.

The traffic would come in through my router, which owns the only real single publicly routable IP address, which would direct all traffic to the the xp vmware box, BUT I could direct all ports to the virtual ip address of the ISA server installed in the w2k3 VM?

The ISA server would then work it's magic on the packets and pass them to it's other virtual nic to my internal network, or back out to the internet.

So the edge router would/should keep any traffic from going to any address but the ISA server address.

Is this deceitfully logical?

Love,

Gurn

Post #: 1

Featured Links*

RE: Will ISA work as Firewall from within a VMWare virt... - 24.Jun.2005 7:51:00 AM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Gurn,

Don't know about that. It will work if you bind each VMware interface to a physical NIC on the host machine. Then assign an invalid address to the external physical NIC on the host machine.

HTH,
Tom

(in reply to Gurnster)

Post #: 2

RE: Will ISA work as Firewall from within a VMWare virt... - 24.Jun.2005 3:22:00 PM

Gurnster

Posts: 4
Joined: 23.Jun.2005
Status: offline

Hi Tom,

Yes, exactly what I meant. By (invalid address to external physical NIC on the host) you mean a non-routable ip address, as is common on most internal networks right?

For instance, I am using 192.168.1.100

Man...if this works this way, an active firewall from within a virtual machine, it will be truly phenomenal!

Virtual machines are so great in that if you ever make a mistake, you can just go back to a recent snapshot - in seconds!

Thanks for your help Tom!

-Gurn

(in reply to Gurnster)

Post #: 3