• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Migrating OWA and AS from ISA 2000 to TMG

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Threat Management Gateway (TMG) 2010] >> General >> Migrating OWA and AS from ISA 2000 to TMG Page: [1]
Login
Message << Older Topic   Newer Topic >>
Migrating OWA and AS from ISA 2000 to TMG - 15.Feb.2011 12:38:55 PM   
Geckotek

 

Posts: 2
Joined: 15.Feb.2011
Status: offline
We are about to decommission our ISA 2000 cluster (finally) and I must migrate to our new TMG installation.

My backend config consists of an Exchange 2003 cluster with Exchange 2007 HUB/CAS NBL Cluster (both soon to be upgraded as well).

I was thinking I could just publish using a test cert (internal) and URL for some testing ahead of time but it looks like I may be mistaken. One of the first things I noticed is that I need to turn off FBA on the Exchange CAS servers. I'm assuming that this of course will break our current OWA config (or at the least change it in a way that will freak out my users and IT Security). It's been a while since I've looked into FBA and what the differences were with basic.

So my question is, am I correct in thinking there is no good way to setup a test with TMG for a week or two?
Post #: 1
RE: Migrating OWA and AS from ISA 2000 to TMG - 15.Feb.2011 9:29:36 PM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

could not understand why you can not disable Exchange FBA and enable TMG FBA instead.

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to Geckotek)
Post #: 2
RE: Migrating OWA and AS from ISA 2000 to TMG - 15.Feb.2011 9:58:13 PM   
Geckotek

 

Posts: 2
Joined: 15.Feb.2011
Status: offline
I want to leave the production environment up on ISA while I test the config on TMG. After tested and working I will redirect DNS and move the cert. (not in that order of course)

(in reply to paulo.oliveira)
Post #: 3
RE: Migrating OWA and AS from ISA 2000 to TMG - 16.Feb.2011 9:29:41 AM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

even using ISA you must disable Exchange FBA and enable ISA FBA.

Anyhow, you can create a non-web server publishing rule allowing port 443 to your Exchange through TMG. The requests will hit your Exchange server directly.

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to Geckotek)
Post #: 4
RE: Migrating OWA and AS from ISA 2000 to TMG - 16.Feb.2011 5:59:39 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Another option is to configure the listener to listen on the internal interface and have the internal hosts go through the firewall as well.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to paulo.oliveira)
Post #: 5

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Threat Management Gateway (TMG) 2010] >> General >> Migrating OWA and AS from ISA 2000 to TMG Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts