• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

webproxy only multiple nics

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> Installation and Planning >> webproxy only multiple nics Page: [1]
Login
Message << Older Topic   Newer Topic >>
webproxy only multiple nics - 1.Dec.2006 5:13:05 AM   
theRob

 

Posts: 103
Joined: 31.Aug.2003
From: The Netherlands
Status: offline
I already setup isa 2004 single nic web proxy array.
But does anyone have experience with:

isa 2006 multiple nic web proxy array?

I only want to use it for webpublishing.
I want one nic to use for isa array nlb and one just for windows 2003 server.

But i have never done this.
Post #: 1
RE: webproxy only multiple nics - 4.Dec.2006 5:12:21 PM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Yeah, done this quite a bit - what's your problem?

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to theRob)
Post #: 2
RE: webproxy only multiple nics - 5.Dec.2006 2:09:58 AM   
theRob

 

Posts: 103
Joined: 31.Aug.2003
From: The Netherlands
Status: offline
That good to hear that you have it get it work.
However i am quite curiuos about your config.

How did you configure the nics on the server?
Did you explicitly used one nic for NLB and ISA and the other one just for OS related stuff like RDP backups etc.

(in reply to Jason Jones)
Post #: 3
RE: webproxy only multiple nics - 5.Dec.2006 12:15:34 PM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
For most setups I would normally recommend at least three NICs, even for web proxy arrays:
  • One for External Network
  • One for Internal
  • One for Intra-Array Network (ISA EE best practice)

Using ISA without an internal and external path removes a large part of ISA's functionality and prevents use of key features like the Firewall client.

If you then have other needs like backup, DMZ, Wireless etc. then you simply add more NICs to meet your requirement. For larger customers, I sometimes also would dedicate a network (and hence NIC) for the CSS servers network as opposed to placing them on the internal network or ISA servers themselves.

You can even go as far are segmenting the internal network into smaller ISA protected networks for AD or Exchange etc. - the sky is the limit!

ISA will firewall all interfaces, so you will need to define firewall policies and network rules for all necessary communciations.

Hope this helps.

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to theRob)
Post #: 4
RE: webproxy only multiple nics - 5.Dec.2006 12:23:45 PM   
theRob

 

Posts: 103
Joined: 31.Aug.2003
From: The Netherlands
Status: offline
Sorry,

But i am interested in if it is possible to use isa as a webproxy in array only.
I am not interested in the " recommended microsoft implementation"
Don't forget loads and loads of company's already have a dmz setup with firewalls etc that works ok. Whats the use of changing it all of the sudden????

But i will test myself.

(in reply to Jason Jones)
Post #: 5
RE: webproxy only multiple nics - 6.Dec.2006 8:54:20 AM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Nice attitude Rob!

Maybe you should explain more clearly what you are trying to achieve to get the best answer...you made no mention of DMZ's and existing firewalls in any of your previous posts.

Irrespective of your solution the following statement is still valid:

"If you then have other needs like backup, DMZ, Wireless etc. then you simply add more NICs to meet your requirement."

What are you actually trying to do? Maybe you should first describe the functionality you need rather than try to think about ISA.

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to theRob)
Post #: 6

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> Installation and Planning >> webproxy only multiple nics Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts