Re: Back to Back ISA and Firewall Chaining

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 6 Feb 2002 08:14:53 -0800

Yes, it can; I've done it myself.
How have you configured the Firewall chain; by name or IP?

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!

  ----- Original Message ----- 
  From: Goktug Yildirim 
  To: [ISAserver.org Discussion List] 
  Sent: Tuesday, February 05, 2002 03:37
  Subject: [isalist] Back to Back ISA and Firewall Chaining


  http://www.ISAserver.org


  I am about to configure a back-to-back ISA configuration.

  As Tom Shinder writes i could chain the firewall services. But I could 
not...Internal ISA seems to be unaware of the external ISA with an eventlog 
that describes the unavailability of the other ISA.

  I do not have deep konwledge about firewall chaning and I think the problem 
is about the different roles of the ISA servers.

  Shortly, internal ISA is in integrated mode and external ISA is in 
firewall-mode. Do you know if firewall chaining can work with these ISA servers?

  Thanks for any comment,

  Goktug

   

   

  PS: Also I want to know why it is more secure using firewall chaining instead 
of defining rules to a fix ip addres?

  ------------------------------------------------------
  You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
  To unsubscribe send a blank email to $subst('Email.Unsub') 

Other related posts: