[isalist] Re: Exchange 2007 publishing scenarios

  • From: Jim Harrison <Jim@xxxxxxxxxxxx>
  • To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 10 Feb 2009 06:22:59 -0800

http://www.ISAserver.org
-------------------------------------------------------

To add to that, you'll never get anything more than HTTP-based protocol across 
a hork-mode ISA.
SMTP, POP3, IMAP, LDAP are all dead to a single-NIC ISA or TMG.


JimmyJoeBob Alooba
Office 2007 on Win7 Beta




-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Steve Moffat
Sent: Tuesday, February 10, 2009 4:52 AM
To: ISA Mailing List
Subject: [isalist] Re: Exchange 2007 publishing scenarios

http://www.ISAserver.org
-------------------------------------------------------
  
Absolutely use at least 2 nics. Your ISA at the moment is running in HORK Mode 
,( http://www.isaserver.org/pages/newsletters/november2006.asp)

....No protection as the firewall service is not being used.

S

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Andrew Hodgson
Sent: Tuesday, February 10, 2009 8:32 AM
To: ISA Mailing List
Subject: [isalist] Exchange 2007 publishing scenarios

http://www.ISAserver.org
-------------------------------------------------------
  
Hi,

I just wanted to get something straight re Exchange 2007 publishing 
scenarios in ISA Server 2006.

We currently have an existing firewall topology set up with segmented 
networks.

The Exchange server will be on the internal network, and the CAS server 
will also be on the internal network.

I need to publish the following services to external clients:

* OWA
* POP3S
* LDAPS (to domain controller, for external access from specific IP 
addresses).

We have an ISA server on the internal network running in unihomed 
configuration doing HTTP proxy requests on port 80 (this has been a 
long-standing configuration).

Is it best to install the new ISA server using two network cards, one in 
the internal network and the other card in the segmented network?  The 
other choice is to install the ISA server in the segmented network and 
use LDAP authentication, but then I am not sure whether all the 
publishing rules would work.

It would be nice to keep the proxy address the same also for internal 
clients.

Thanks.
Andrew.
--
allpay.net Limited, Fortis et Fides, Whitestone Business Park, Whitestone, 
Hereford, HR1 3SE.
Registered in England No. 02933191. UK VAT Reg. No. 666 9148 88.

Telephone: 0870 243 3434, Fax: 0870 243 6041. 
Website: www.allpay.net
Email: enquiries@xxxxxxxxxx 

This email, and any files transmitted with it, is confidential and intended 
solely for the use of the
individual  or entity to whom it is addressed. If you have received this email 
in error please notify 
the allpay.net Information Security Manager at the number above.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: