Re: ISA Behind a Cisco PIX

[isalist] ISA Behind a Cisco PIXHi Don

I have a somewhat similar setup.

I use a privat subnet between my Cisco router/firewall and ISA.
The main thing to remember: Publish your required service behind
ISA, to it`s external interface an be sure to modify your PIX static 
NAT statements, to forward to that IP address.
This could also require some tweaking of yout configured NAT pool and conduits
on the PIX.

Regards,

David Elmquist

  ----- Original Message ----- 
  From: dmccall@xxxxxxxxxx 
  To: [ISAserver.org Discussion List] 
  Sent: Thursday, January 31, 2002 5:37 AM
  Subject: [isalist] ISA Behind a Cisco PIX


  http://www.ISAserver.org


  Hi I am a newcomer to the ISA in many ways. I have the PIX running nicely on
  its own running mail to and from our Exchange server to the internet. ISA
  operates nicely on its own publishing our mail server on the internet.
  However when I try to place the PIX in front of the ISA with a Public
  address range in between (we want to terminate VPN at the ISA server later)
  having of course made all the appropriate changes to the Interfaces and
  rules it does not want to play ball. Is there anyone out there who has done
  this and if so could you help me please. Thank you.

          Don McCall     Email: dmccall@xxxxxxxxxx
          Infrastructure Administrator - Information Systems
          Baptist Community Services NSW & ACT
          Website: <www.bcs.org.au>  - Telephone: (02) 9941 6054
                                                        Fax: (02) 9889 1520
          Address: Corporate Services - 157 Balaclava Road Marsfield NSW 2122



  ------------------------------------------------------
  You are currently subscribed to this ISAserver.org Discussion List as: 
david@xxxxxxxxxx
  To unsubscribe send a blank email to $subst('Email.Unsub')

Other related posts: