Re: ISA 2000 between existing firewalls

  • From: "Periyasamy, Raj" <Raj.Periyasamy@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 5 Aug 2004 09:38:47 -0400

Never mind Tom, 
I should have known its your book. I will buy this one.

Thanks again. 


Regards,
Raj 


-----Original Message-----
From: Periyasamy, Raj 
Sent: Thursday, August 05, 2004 9:12 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA 2000 between existing firewalls

http://www.ISAserver.org

Tom and Jim,
Thank you very much for your replies. This definitely helps me. Is ISA
2000/Exchange Kit downloadable from Microsoft site? Is it part of the
Feature Pack 1 ?

Thanks. 


Regards,
Raj



-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Wednesday, August 04, 2004 6:06 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA 2000 between existing firewalls

http://www.ISAserver.org

Hey guys,

In this OWA and RPC/HTTP scenario, delegation of basic auth should work
fine, as long as SSL to SSL bridging is used. So, unless the users are
fans of double authentication prompts, this should work.


Tom
www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] 
Sent: Wednesday, August 04, 2004 3:44 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA 2000 between existing firewalls


http://www.ISAserver.org

The huge, monstrous, fearfully nasty stumbling block you have to
overcome is whether or not you expect ISA to authenticate those
requests.
If not, then you're golden.
If you do, then you have to ask yourself if you're willing to fire a
shotgun into the face of your internal "firewall" to allow AD-membership
traffic through.

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!


On Wed, 4 Aug 2004 13:55:23 -0400
 "Periyasamy, Raj" <Raj.Periyasamy@xxxxxxxxxxxx> wrote:
http://www.ISAserver.org

Hello List,
We are in process of designing our OWA and RPC over HTTP deployment. We
would like to use ISA server in the DMZ as reverse proxy. However, we
currently have a DMZ with two third party firewalls, one external
firewall and one internal firewall. We want to integrate ISA 2000 server
between these two firewalls, and authenticate users to the front-end
Exchange 2003 server that will be located behind the internal firewall
in the corporate network. Microsoft documents indicate ISA 2000 server
needs to be installed in firewall mode with two network interface cards
for this scenario. This is not suiting our current network, since we
want the ISA server to be located in the DMZ between the existing
firewalls. I was reading an article by Tom Shinder about "ISA Server
2000 Application Layer Filtering Web Proxy in the Perimeter Network".
This document is very brief, I think I need buy the Tom Shinder book for
the complete document (..which I will). However, could some one please
let me know, If the ISA server is located in the DMZ between the
existing firewalls as an application layer filtering web proxy, can it
provide the full functionality for OWA and RPC over HTTP publishing ?

Thank you in advance.

Regards
Raj



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
raj.periyasamy@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
raj.periyasamy@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist




Other related posts: