Welcome to ISAserver.org

Help needed with trihomed ISA2004 DMZ setup

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> DMZ >> Help needed with trihomed ISA2004 DMZ setup

Page: [1]

Message

<< Older Topic Newer Topic >>

Help needed with trihomed ISA2004 DMZ setup - 28.Jul.2009 5:15:31 AM

tinga

Posts: 3
Joined: 28.Jul.2009
Status: offline

Hi all, I am trying to find the best practice to setup the following..

ISA2004 server with 3 nics, external, internal, and DMZ, on server 2003 std.
3 public IPs terminating at an ADSL modem at the moment.
Currently the ISA server is working with a DMZ but no servers in it, now we want to host two of our clients servers in the DMZ and assign a public IP to each, and leave the original public IP going through to the internal network for smtp etc.
We want our clients to be able to connect to their servers (in our DMZ) via the public IPs. Would love some advice on where to start. :)

Post #: 1

Featured Links*

RE: Help needed with trihomed ISA2004 DMZ setup - 29.Jul.2009 2:45:29 PM

paulo.oliveira

Posts: 3470
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline

Hi,

not possible. You have to configure your perimeter network to use private IP addressing.

After that, configure publishing rules in ISA.

Regards,
Paulo Oliveira.

_____________________________

Microsoft MVP - Forefront
MCP - ISA Firewall 2004
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to tinga)

Post #: 2

RE: Help needed with trihomed ISA2004 DMZ setup - 29.Jul.2009 6:56:33 PM

tinga

Posts: 3
Joined: 28.Jul.2009
Status: offline

Hi Paulo,

Thanks for that, how about using just one Public IP onto the Ext nic on ISA server, and using web publishing rules to send traffic through to the servers based on the host header?

Cheers

Tinga

(in reply to paulo.oliveira)

Post #: 3

RE: Help needed with trihomed ISA2004 DMZ setup - 29.Jul.2009 8:15:02 PM

tinga

Posts: 3
Joined: 28.Jul.2009
Status: offline

Ignore my last message, the client has informed me that he needs potentially any services to be able to be sent through ISA to the two servers, not just web.
So really need the best practice method of doing this.
Cheers

(in reply to tinga)

Post #: 4