RE: Fault tolerant ISA
- From: "G. Waleed Kavalec" <Kavalec@xxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 19 Apr 2004 13:16:19 -0500
This is a bow to Tom.
If I had read pg. 216 in his $%#(&# book I wouldn't have wasted all
@%$&&! day Sunday.
"The dedicated ISA Server domain should be in a different forest..."
(grumble, grumble)
-----Original Message-----
From: G. Waleed Kavalec
Sent: Monday, April 19, 2004 8:48 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Fault tolerant ISA
http://www.ISAserver.org
I thought #2 was good enough.
Basically, someone on the Sunbelt sysadmin list recommended "make sure
it's in a separate domain" which made sense. If the firewall gets
cracked they still would have to cross over AD security.
Or is this overkill?
How many here are actually doing this (High Availability / Fault
Tolerance)? Does NLB + ISA Array do the job, or do we need to look at
Rainwall, or Stonebeat, or some such?
Budget < $10K.
----------------------------
G. Waleed Kavalec
Baca, Stein, White and Associates
281-342-2646
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Monday, April 19, 2004 8:11 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Fault tolerant ISA
http://www.ISAserver.org
I doubt that he was asking for contract bids...
You're right; you'll have to solve your AD issues before you can bring
up an ISA Array. Are you trying to build: 1. a completely separate
forest 2. a new domain in an existing forest 3. a child domain ?
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
Other related posts:
