Oh yeah, I'd have to agree with that. I guess I must have missed something while I was reading through this. Still, my car with wings strapped on it would be interesting to see..... -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: Wednesday, June 22, 2005 9:02 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA 2004 on VMWare ESX http://www.ISAserver.org Hi Troy, But I believe they promote it for network segmentation and management, not as a security solution. Essentially, all VLANs on the same physical segment should all be in the same security zone. Tom www.isaserver.org/shinder Tom and Deb Shinder's Configuring ISA Server 2004 http://tinyurl.com/3xqb7 MVP -- ISA Firewalls -----Original Message----- From: Troy Radtke [mailto:TRadtke@xxxxxxxxxxxx] Sent: Wednesday, June 22, 2005 8:58 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA 2004 on VMWare ESX http://www.ISAserver.org That's odd, considering part of the CCNP testing is knowing how to implement VLANs in a production environment.... My friends that have taken the written/lab for CCIE and using VLANs in a production environment is part of that test also. The CCDP (network design) also covers VLANs. I've been on the phone with Cisco TAC and had them review complex VLAN structures and give me the green light before putting them into production environments. In theory lots of things can be done, like turning my car into a jet by strapping on wings and slapping on a huge engine. As soon as some of the biggest Fortune 500 companies remove VLANs from their networks, I'll be more than happy to cover my CCNP cert in ketchup and eat it for dinner. -----Original Message----- From: Han Valk [mailto:Han.Valk@xxxxxxxxxxxxxxx] Sent: Wednesday, June 22, 2005 8:43 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA 2004 on VMWare ESX http://www.ISAserver.org Exactly, in the lab..., not production. Google for VLAN hopping, VLAN security. Cisco has a paper where they describe not to this in production. > -----Original Message----- > From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] > Sent: Wednesday, June 22, 2005 15:27 > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: ISA 2004 on VMWare ESX > > http://www.ISAserver.org > > What's the problem with VLANs and ISA? > I use this in my lab with great success... > > -----Original Message----- > From: Han Valk [mailto:Han.Valk@xxxxxxxxxxxxxxx] > Sent: Tuesday, June 21, 2005 10:36 PM > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: ISA 2004 on VMWare ESX > > http://www.ISAserver.org > > Stefaan, > > Since ESX uses virtual switches and VLAN's to separate the different > networks > I would not recommend using it for any firewall application. I would > never > use VLAN's to separate trusted and untrusted networks. > Allthough I have > not > seen anybody perform VLAN hopping there are papers that > describe ways to > do > it. > > Regards, > Han. > > > -----Original Message----- > > From: Stefaan Pouseele [mailto:Stefaan.Pouseele@xxxxxxx] > > Sent: Tuesday, June 21, 2005 20:44 > > To: [ISAserver.org Discussion List] > > Subject: [isalist] ISA 2004 on VMWare ESX > > > > http://www.ISAserver.org > > > > Hey guys, > > > > One of my colleagues has a new toy 'VMWare ESX'. The goal is to > > virtualize as many servers as possible. The question is now is it > > advised to install ISA 2004 on VMWare ESX or should ISA > 2004 be placed > > on his own server? > > > > Thanks, > > Stefaan > > MVP ISA Server > > http://www.isaserver.org/Stefaan_Pouseele/ > > > > > > ------------------------------------------------------ > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > > ------------------------------------------------------ > > Other Internet Software Marketing Sites: > > World of Windows Networking: http://www.windowsnetworking.com > > Leading Network Software Directory: http://www.serverfiles.com > > No.1 Exchange Server Resource Site: http://www.msexchange.org > > Windows Security Resource Site: http://www.windowsecurity.com/ > > Network Security Library: http://www.secinf.net/ > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > > ------------------------------------------------------ > > You are currently subscribed to this ISAserver.org Discussion > > List as: han.valk@xxxxxxxxxxxxxxx > > To unsubscribe visit > > http://www.webelists.com/cgi/lyris.pl?enter=isalist > > Report abuse to listadmin@xxxxxxxxxxxxx > > > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > World of Windows Networking: http://www.windowsnetworking.com > Leading Network Software Directory: http://www.serverfiles.com > No.1 Exchange Server Resource Site: http://www.msexchange.org > Windows Security Resource Site: http://www.windowsecurity.com/ > Network Security Library: http://www.secinf.net/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > jim@xxxxxxxxxxxx > To unsubscribe visit > http://www.webelists.com/cgi/lyris.pl?enter=isalist > Report abuse to listadmin@xxxxxxxxxxxxx > > All mail to and from this domain is GFI-scanned. > > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > World of Windows Networking: http://www.windowsnetworking.com > Leading Network Software Directory: http://www.serverfiles.com > No.1 Exchange Server Resource Site: http://www.msexchange.org > Windows Security Resource Site: http://www.windowsecurity.com/ > Network Security Library: http://www.secinf.net/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion > List as: han.valk@xxxxxxxxxxxxxxx > To unsubscribe visit > http://www.webelists.com/cgi/lyris.pl?enter=isalist > Report abuse to listadmin@xxxxxxxxxxxxx > ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tradtke@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tradtke@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx