Hey guys, In this OWA and RPC/HTTP scenario, delegation of basic auth should work fine, as long as SSL to SSL bridging is used. So, unless the users are fans of double authentication prompts, this should work. Tom www.isaserver.org/shinder Get the book! Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 MVP -- ISA Firewalls -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Wednesday, August 04, 2004 3:44 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: ISA 2000 between existing firewalls http://www.ISAserver.org The huge, monstrous, fearfully nasty stumbling block you have to overcome is whether or not you expect ISA to authenticate those requests. If not, then you're golden. If you do, then you have to ask yourself if you're willing to fire a shotgun into the face of your internal "firewall" to allow AD-membership traffic through. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! On Wed, 4 Aug 2004 13:55:23 -0400 "Periyasamy, Raj" <Raj.Periyasamy@xxxxxxxxxxxx> wrote: http://www.ISAserver.org Hello List, We are in process of designing our OWA and RPC over HTTP deployment. We would like to use ISA server in the DMZ as reverse proxy. However, we currently have a DMZ with two third party firewalls, one external firewall and one internal firewall. We want to integrate ISA 2000 server between these two firewalls, and authenticate users to the front-end Exchange 2003 server that will be located behind the internal firewall in the corporate network. Microsoft documents indicate ISA 2000 server needs to be installed in firewall mode with two network interface cards for this scenario. This is not suiting our current network, since we want the ISA server to be located in the DMZ between the existing firewalls. I was reading an article by Tom Shinder about "ISA Server 2000 Application Layer Filtering Web Proxy in the Perimeter Network". This document is very brief, I think I need buy the Tom Shinder book for the complete document (..which I will). However, could some one please let me know, If the ISA server is located in the DMZ between the existing firewalls as an application layer filtering web proxy, can it provide the full functionality for OWA and RPC over HTTP publishing ? Thank you in advance. Regards Raj ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist