Welcome to ISAserver.org

purchase question

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> Installation and Planning >> purchase question

Page: [1]

Message

<< Older Topic Newer Topic >>

purchase question - 10.Jul.2008 12:22:44 AM

dragoonguy

Posts: 7
Joined: 29.May2008
Status: offline

Wondering if ISA would be best for the following situation.
We have an existing HP Proliant/ISA2004, which works well, and we are not updating that at this time. We do not currently host our own web site, or have any published services.

An outside vendor will be setting up a server with web based software (HTTPS), which will allow employees to connect to the program from home, through internet. We are adding another external IP, dedicated to this vendor/project only, won't be used for "regular" traffic. Vendor will need to establish site to site VPN, and any web traffic to the new external IP will be redirected to their new internal server. (they will handle their server's authentication/security, etc.)

I looked at HP's web site for another Proliant/ISA2006, but apparently HP has discontinued their ISA applicance. Went around in circles on their web site, finally called HP, who told me no longer available.

But, is ISA even best choice for this situation? Because don't need User control, caching, and probably other services can't think of right now.
Any recommendations? If ISA is the best choice, any advice on where to buy?
Thanks

Post #: 1

Featured Links*

RE: purchase question - 15.Jul.2008 8:14:56 AM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

If you're looking for a secure connection, then I consider ISA the best choice.

Check out Celestix, they have some very good ISA firewall appliances. They are a one stop shop when it comes to parts and services too.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to dragoonguy)

Post #: 2

RE: purchase question - 15.Jul.2008 12:54:14 PM

dragoonguy

Posts: 7
Joined: 29.May2008
Status: offline

Thanks for the reply, I did look at Celestix, and if we go with another ISA box, then would probably get that. However, I also have to get some price info on Cisco, Watchguard, Sonicwall for Boss's decision.

Would there be any conflicts using any brand device on the second IP, conflicts with our existing ISA2004 on the "primary" IP?

Thanks

(in reply to tshinder)

Post #: 3

RE: purchase question - 16.Jul.2008 8:23:25 AM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

I don't think there will be any conflicts, but I can tell you that it's pretty much universally accepted that when you want to have a site to site VPN, you should use the same vendor on each end to make sure they're compatbile. VPN protocols (esp. IPsec) are implemented in different ways by different vendors, and you can drive yourself crazy and waste a lot of time trying to make VPN gateways from two different vendors work.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to dragoonguy)

Post #: 4