Re: ISA Server on same machine as IIS
- From: "James May" <Jmay@xxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 16 Oct 2003 09:33:58 -0700
Amy Thanks sorry about the typo.........I just wanted to know if you
were using exchange on the SBS server Jim
-----Original Message-----
From: Amy Babinchak [mailto:Amy@xxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Thursday, October 16, 2003 9:30 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server on same machine as IIS
http://www.ISAserver.org
Can I tell? I'm not sure what you mean by that. My clients all run
exchange with OWA on SBS servers if that is what you mean.
Amy
-----Original Message-----
From: James May [mailto:Jmay@xxxxxxxxxxxxx]
Sent: Thursday, October 16, 2003 12:22 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server on same machine as IIS
http://www.ISAserver.org
Hi Amy
Can you tell are you running exchange on SBS?
Thanks Jim
-----Original Message-----
From: Amy Babinchak [mailto:Amy@xxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Thursday, October 16, 2003 9:19 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server on same machine as IIS
http://www.ISAserver.org
Tom,
There are application filters as well. I'm not sure how the two
interact. You would know better than I. Backup issues and worms, Trojans
and spyware take up much more of my time than firewall issues do thanks
to ISA server. (I've finally convinced most of my clients to allow me to
roll out PestPatrol so maybe there will be a light at the end of that
tunnel.) I'd love to learn more about ISA if I had the time; that's why
I'm on this list.
On SBS using the wizards is a must. I know that doing so rubs a lot of
admins the wrong way, but unless you're an expert at ISA and what it
needs to do for ALL of the Microsoft products that are running on an SBS
server I recommend the wizards. They haven't failed me yet. That's not
to say that you don't need to add some of your own custom stuff from
time to time you do, but for the basics I use the wizards.
Amy
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Thursday, October 16, 2003 11:59 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server on same machine as IIS
http://www.ISAserver.org
Hi Amy,
I think I see what's going on. If you use packet filters, then you don't
need to disable socket pooling, but you also lose a lot of the security
provided by the firewall application filters.
Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Amy Babinchak [mailto:Amy@xxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Thursday, October 16, 2003 10:55 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server on same machine as IIS
http://www.ISAserver.org
I believe so. The list of packet filters and rules is quite log on a
default install of SBS. Although it works it is probably a lot like the
HTML that office writes - excessively verbose.
Amy
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Thursday, October 16, 2003 11:45 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server on same machine as IIS
http://www.ISAserver.org
Hi Paul,
Are there SBS wizards that disable socket pooling for the WWW, NNTP,
SMTP and FTP services?
Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Paul Nuernberger [mailto:pen@xxxxxxxxx]
Sent: Thursday, October 16, 2003 10:44 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server on same machine as IIS
http://www.ISAserver.org
If you followed the wizards properly, then the setup would have removed
'socket pooling' for IIS so that it only listens on the internal
interface (it would have asked you for the IP address of the internal
interface).
This being the case, you would have to 'publish' your web site in ISA
using web publishing (& preferably also use a destination set to limit
what ISA passes to IIS). It would also be a good thing to look at what
headers your IIS site is looking for (i.e. www.mysite.tld and
mysite.tld), and make sure to pass the original headers to IIS (in web
publishing). Review the docs and help file, as well as stuff at
www.isaserver.org, and you will see how these all work together.
If you are relying on using packet filters to get to your IIS web site -
don't. Only use web publishing.
Paul Nuernberger
-----Original Message-----
From: DH [mailto:david.harkins@xxxxxxxxxxxxxxxxx]
Sent: Thursday, October 16, 2003 10:35 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server on same machine as IIS
http://www.ISAserver.org
Sorry that should read SBS (Small business server) not SDS. It's a
standard install and I can't access my website outwith the network. I do
have a public IP for the website and it is configured on DNS, can view
it internally. Thanks.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
amy@xxxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
amy@xxxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jmay@xxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
amy@xxxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jmay@xxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
