Placing ISA into Existing Network (Full Version)

All Forums >> [ISA 2006 General] >> Installation and Planning



Message


jbasra -> Placing ISA into Existing Network (4.Nov.2008 1:21:47 PM)

Hello All,

I am new to this forum, i want to integrate ISA2006 into my existing network my network looks like this

Internet Router
          |
   |
   |
   Public IP
Sonic wall Firewall
   Internal Network 192.168.1.xxx (DMZ is Unused), I use NAT turned on on my firewall
   |
   |
   |
   |
   |
SMTP Relay server, Exchange Server, SQL Server, Files servers, Internal DNS and DPM server

   |
   |
   |
   |
Client PC's

i want to add ISA as a back end firewall and i need your help in this matter from the very beginning i am new to ISA.
thank you in advance.

Jimmy




pwindell -> RE: Placing ISA into Existing Network (4.Nov.2008 9:09:01 PM)

Internet Router 
  |
Sonic wall Firewall 
  |
(create new subnet)
  | 
ISA Server  
  |
LAN




jbasra -> RE: Placing ISA into Existing Network (6.Nov.2008 11:35:52 AM)

thanks for the reply.

but i want to keep subnet 192.168.1.xxx for my LAN another thing what rule i should create in sonicwall to talk to ISA and LAN.

should i put DNS and publish my SMTP through ISA and if yes what rules i need to create on ISA

thanks again.




pwindell -> RE: Placing ISA into Existing Network (6.Nov.2008 11:46:47 AM)

Look at the diagram,..you are creating a Back-to-Back DMZ,...think it through,...most of your questions have obvious answers.

The Sonicwall will no longer communicate wit the LAN and it is not expected to.

I never suggested changing the LAN IP subnet

You don't do anything with DNS.

SMTP uses a a Mail server Publishing Rule based on SMTP on the ISA followed by a Static NAT (Reverse NAT) config on the Sonicwall with SMTP.




Page: [1]