Welcome to ISAserver.org

Would This Design Work?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> DMZ >> Would This Design Work?

Page: [1]

Message

<< Older Topic Newer Topic >>

Would This Design Work? - 26.Jun.2006 9:03:28 PM

Architect

Posts: 14
Joined: 20.Jun.2005
Status: offline

I want to put 2 ISA Servers 2004 on my network in this type of topology:

Internet to Cable Modem
Cable Modem to external NIC on ISA Front End Server
Internal NIC on ISA Front End Server connected to DMZ Switch
DMZ Switch connects to External NIC on Back End ISA Server
Internal NIC on Back End ISA Server connects to LAN Switch
From Lan Switch all my Internal private workstations plug into the network (AD, SMS, Exchange)

The Front End ISA Server just has 2 NIC's and the Back End ISA Server just has 2 NIC's.
I'm very new to setting up DMZ's do any of you guys see any issues with this setup, for instance security holes, performance problems, etc? I'm sure I'm leaving vital information out please let me know and I'll explain further. Thanks.

Post #: 1

Featured Links*

RE: Would This Design Work? - 27.Jun.2006 2:53:08 PM

Architect

Posts: 14
Joined: 20.Jun.2005
Status: offline

common guys anyone have any tips or guidance for me? Did I leave a lot of important information out? We'll I'm continuing with this plan I'll post my results maybe it will help others in their DMZ designs.

(in reply to Architect)

Post #: 2

RE: Would This Design Work? - 27.Jun.2006 6:34:38 PM

Jason Jones

Posts: 2137
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

Sounds like a pretty normal and well recommended back-to-back ISA firewall topology to me!

Check out all the back-to-back articles covered by tom here: http://www.isaserver.org/Thomas_Shinder/

JJ

_____________________________

Jason Jones (MVP)

Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/

Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Architect)

Post #: 3

RE: Would This Design Work? - 27.Jun.2006 7:51:39 PM

Architect

Posts: 14
Joined: 20.Jun.2005
Status: offline

Great that was my main concern to make sure I'm on the right track! Cool yeah I'll check through all the articles. Thanks.

(in reply to Jason Jones)

Post #: 4

RE: Would This Design Work? - 28.Jun.2006 9:45:03 AM

Jason Jones

Posts: 2137
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

Good luck!

_____________________________

Jason Jones (MVP)

Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/

Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Architect)

Post #: 5