Welcome to ISAserver.org

Win2K3, ICF and ISA Server

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> Installation >> Win2K3, ICF and ISA Server

Page: [1]

Message

<< Older Topic Newer Topic >>

Win2K3, ICF and ISA Server - 4.Jul.2003 7:42:00 PM

unclehughie

Posts: 70
Joined: 31.Dec.2001
From: Montreal, Canada
Status: offline

As always, I found your article informative and well-written (I'm a professional writer and I notice these things).
One loose end, though, I think: you discuss running two different firewalls and rightly dismiss the idea, I believe. But what about the Internet Connection Firewall that's built into Win2K3 - should it be enabled or disabled, do you think? Clearly, with ISA Server, you don't need Win2K3's Internet Connection Sharing so that should be disabled, anyway.
Also, SBS Server 2003 is almost here, and this forces you to run ISA Server on a domain controller still, I think. Any thoughts on that, too?

Post #: 1

Featured Links*

RE: Win2K3, ICF and ISA Server - 5.Jul.2003 7:06:00 PM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Uncle Hughie,

Thanks! [Smile]

As for SBS, ISA on a DC and SBS server is a nightmare config for the non-expert user. Yes, you can make it work, but the end result is sub-optimal and IMHO, ISA should *never* be installed on an SBS machine. Microsoft should allow you a special "firewall liscense" of some kind that allows you to install ISA on a second machine that is a dedicated firewall, or MS should support a firewall appliance based on ISA. That would be the best of all possible worlds.

ICF on Win2003 might be a good deal as a front end firewall in front of an ISA Server firewall in a back to back DMZ config. I haven't worked out this config, but it should work fine.

HTH,
Tom

(in reply to unclehughie)

Post #: 2

RE: Win2K3, ICF and ISA Server - 7.Jul.2003 4:28:00 PM

unclehughie

Posts: 70
Joined: 31.Dec.2001
From: Montreal, Canada
Status: offline

Thanks, Tom. Another question: I'm a Canadian freelance journalist and, among other things, I do book reviews. I would be interested in getting a review copy of ISA Server and Beyond. I would submit the review to Canadian publications with a business audience. You can check me out on my web site at www.unclehughie.com if you like. Let me know if you are interested in this opportunity to market in Canada.
Incidentally, as you probably know, SBS 2003 is about to be released and the word is that Microsoft is offering two versions: one without SQL Server and ISA Server, the other with those two products. This seems a bit strange to me because I figure the cut-rate and easy to configure security in SBS 2000 is one of its main attractions. I suppose MS argues that Win2k2003 is secure out of the box, anyway. What do you think, Tom?

(in reply to unclehughie)

Post #: 3

RE: Win2K3, ICF and ISA Server - 7.Jul.2003 4:44:00 PM

tshinder

Posts: 47669
Joined: 10.Jan.2001
From: Texas
Status: online

Hi Hugh,

That would be great! If you will write to me at insider@tacteam.net I'll get my publisher to forward you a review copy.

I'm aware of the SBS issue, and I think they're moving the right direction. They really need to get ISA *off* the SBS box and allow it to be put on a second box, or offer an incentive to purchase an ISA Server 2000-based dedicated firewall appliance. The latter alternative is the "killer app" for ISA and SBS, IMHO.

Thanks!
Tom

(in reply to unclehughie)

Post #: 4