• Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

3-Leg DMZ - Specific Set-up Question

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> DMZ >> 3-Leg DMZ - Specific Set-up Question Page: [1]
Message << Older Topic   Newer Topic >>
3-Leg DMZ - Specific Set-up Question - 9.Sep.2004 8:05:00 AM   


Posts: 9
Joined: 9.Sep.2004
Status: offline
We are trying to set up a 3-Leg ISA 2004 configuration that looks like this:

External - Internet Inbound
Internal - Outbound to Internet
DMZ - Publicly accessable hosts

What we want to do is have all hosts in the DMZ with 172.16.0.x addresses NAT'd to corresponding External Addresses 66.243.106.x. These hosts will primarily be FTP and WWW. Do we just need to add each address to the external NIC and publish servers as usual, pointing them to their corresponding DMZ address?

Also it seems that the default ISA 2004 3-Leg setup uses DMZ->External with Route instead of NAT. This is confusing.

Any help would be appreciated.
Post #: 1
RE: 3-Leg DMZ - Specific Set-up Question - 12.Sep.2004 4:36:00 PM   


Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi W,

You can use Web and Server Publishing Rules to allow inbound access to the servers on the DMZ segment.

Yes, the default trihomed DMZ template uses who I consider the wrong defaults. I think the defaults should be DMZ to Externa = NAT and DMZ to Internal = Route.


(in reply to wwolfeii)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> DMZ >> 3-Leg DMZ - Specific Set-up Question Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts