• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

How to Secure

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> General >> How to Secure Page: [1]
Login
Message << Older Topic   Newer Topic >>
How to Secure - 17.Mar.2008 6:27:44 AM   
create_share

 

Posts: 269
Joined: 4.May2005
Status: offline
How can we secure ISA 2006 if we are using it as an internet facing firewall between our Internal Network and Internet and also if Exchange Server 2007 is published on it?

Thanks!
Post #: 1
RE: How to Secure - 17.Mar.2008 9:15:43 AM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

you can take a look at these Security Guides:

http://www.microsoft.com/technet/isa/2006/security_guide.mspx
http://www.microsoft.com/technet/isa/2004/securityprotection/default.mspx

Regards.

(in reply to create_share)
Post #: 2
RE: How to Secure - 19.Mar.2008 9:29:56 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
I don't use the security guides or implement many of the recommendations because if you correctly configure your ISA Firewall, all the extraneous security configurations are not required. However, if you plan on misconfiguring the ISA Firewall, or plan to use it as a workstation, or if you install extraneous software on the ISA Firewall, then you might consider implementing some of the suggestions in the security guides.

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to paulo.oliveira)
Post #: 3
RE: How to Secure - 19.Mar.2008 10:55:14 AM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Agreed, but SCW is probably the only exception here as it allows for the OS configuration to be baselined and dyncamically corrected using Group Policy...this stops people "playing" with configuration elements (like enabling VPN) as SCW allows you to define the exact role of your ISA Server and the associated services involved.

Perosnally I think SCW does add some value, but as ever, it needs to be used properly and is very customer/deployment specific in most cases.

Cheers

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to tshinder)
Post #: 4
RE: How to Secure - 20.Mar.2008 2:02:32 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Jason,

Good point. The SCW is helpful and especially in light of the abilty to save and restore the configuration.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to Jason Jones)
Post #: 5

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> General >> How to Secure Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts