Config question

Config question (Full Version)

All Forums >> [ISA Server 2004 General ] >> Server Publishing

Message

cobritek -> Config question (5.May2008 2:41:53 PM)
Below is the type of router Comcast gave me as part of their business class service. There is a feature called DMZ where you tell the router that a device on the lan side can be exposed to the internet but the external NIC on the ISA server does not show up when the router DMZ is turned on. Do I need to set a rule in ISA coming from my Router IP to my External NIC of ISA? Or I am guessing I want to do a Port Forward to the External NIC of the ISA server since it is on the LAN subnet of the router and just open up the ISA server to the world? Right now when I say turn on DMZ from the router it doesn't detect the ISA server but if I stick my laptop or some other PC, not firewalled it is recognized. http://www.comcast.net/data/help/Comcast_Business_IP_Gateway_User_Guide.pdf Thanks in advance!

Rotorblade -> RE: Config question (5.May2008 4:12:56 PM)
quote: I am guessing I want to do a Port Forward to the External NIC of the ISA server since it is on the LAN subnet of the router and just open up the ISA server to the world? Setting up a port forward would be necessary but I think I would hold off on the “open ISA to the world” bit ; at least until you read up on ISA’s Firewall, Web and Server publishing capabilities. http://www.isaserver.org/tutorials/Configuring_ISA_Server_Interface_Settings.html http://www.microsoft.com/technet/isa/2004/plan/publishingwebservers.mspx http://www.isaserver.org/tutorials/Creating-Networks-ISA-2004-Part1.html http://www.isaserver.org/tutorials/Creating-Networks-ISA-2004-Part2.html http://www.microsoft.com/isaserver/techinfo/Guidance/2004/configuration.mspx http://blogs.isaserver.org/shinder/2006/08/13/best-practices-for-creating-isa-firewall-networks/ http://www.microsoft.com/technet/isa/2004/plan/firewall_policy.mspx HTH RB

cobritek -> RE: Config question (5.May2008 5:43:13 PM)
Thanks for the reply. I have been using ISA for a while now just not in this configuration where it connects to an already NAT'ed address. My experience with it thus far has been in a SBS configuration connecting directly to a DSL or bridge. I think I need to do a port forward from the lan of the router to the External NIC...

Page: [1]