RE: ISA & Web/FTP Server

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 18 Sep 2003 19:10:27 -0500

Hi David,
 
Check out my ISP config over at www.isaserver.org/shinder
 
HTH,
Tom
 
 
Thomas W Shinder
www.isaserver.org/shinder <http://www.isaserver.org/shinder>  
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
<http://tinyurl.com/1llp> 

 

        -----Original Message-----
        From: David Liles [mailto:dave@xxxxxxxxxxxxxxxxxxx] 
        Sent: Thursday, September 18, 2003 6:32 PM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] RE: ISA & Web/FTP Server
        
        
        http://www.ISAserver.org
        
        
        Not really knowing all of the in's and out's of ISA we were
thinking that if we installed it on our web server it would allow us to
help keep it secure.
        I'm thinking we need to configure an actual DMZ for this box and
only allow ports 80, 443 and 21 in order to support what we are wanting
to do.
         
        We currently have SBS2000 that is connected to the internet and
then from there a private NIC connects to a switch that all of our
workstations are connected to....

                -----Original Message-----
                From: John Tolmachoff (Lists)
[mailto:johnlist@xxxxxxxxxxxxxxxxxxx]
                Sent: Wednesday, September 17, 2003 11:19 PM
                To: [ISAserver.org Discussion List]
                Subject: [isalist] RE: ISA & Web/FTP Server
                
                
                http://www.ISAserver.org
                
                

                1. First rule of security: Do not install anything on
the firewall unless absolutely necessary.

                2. If you run the websites and FTP on ISA, it will not
be in a DMZ, rather on ISA.

                3. You could configure ISA with 3 NICs, the third
creating the DMZ, but that requires subnetting your public IP addresses
you have been assigned by your ISP. (Unless you use NAT in the DMZ.)

                 

                Can you explain your configuration a bit?

                 

                John Tolmachoff MCSE CSSA

                Engineer/Consultant

                eServices For You

                www.eservicesforyou.com

                 

                -----Original Message-----
                From: David Liles [mailto:dave@xxxxxxxxxxxxxxxxxxx] 
                Sent: Wednesday, September 17, 2003 9:12 PM
                To: [ISAserver.org Discussion List]
                Subject: [isalist] ISA & Web/FTP Server

                 

                http://www.ISAserver.org

                We just configured a new server that will be hosting
multiple web and FTP sites. As a result it will need to be in a "DMZ".
We were thinking of installing ISA on it and configuring it
appropriately. Is there an unique configuration issues we need to be
aware of before we proceed?

                 

                Thanks

                ------------------------------------------------------
                List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
                ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
                ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
                ------------------------------------------------------
                Other Internet Software Marketing Sites:
                Leading Network Software Directory:
http://www.serverfiles.com
                No.1 Exchange Server Resource Site:
http://www.msexchange.org
                Windows Security Resource Site:
http://www.windowsecurity.com/
                Network Security Library: http://www.secinf.net/
                Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
                ------------------------------------------------------
                You are currently subscribed to this ISAserver.org
Discussion List as: johnlist@xxxxxxxxxxxxxxxxxxx
                To unsubscribe send a blank email to
$subst('Email.Unsub') 

                ------------------------------------------------------
                List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
                ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
                ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
                ------------------------------------------------------
                Other Internet Software Marketing Sites:
                Leading Network Software Directory:
http://www.serverfiles.com
                No.1 Exchange Server Resource Site:
http://www.msexchange.org
                Windows Security Resource Site:
http://www.windowsecurity.com/
                Network Security Library: http://www.secinf.net/
                Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
                ------------------------------------------------------
                You are currently subscribed to this ISAserver.org
Discussion List as: dave@xxxxxxxxxxxxxxxxxxx
                To unsubscribe send a blank email to
$subst('Email.Unsub') 

        ------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Other Internet Software Marketing Sites:
        Leading Network Software Directory: http://www.serverfiles.com
        No.1 Exchange Server Resource Site: http://www.msexchange.org
        Windows Security Resource Site: http://www.windowsecurity.com/
        Network Security Library: http://www.secinf.net/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion
List as: tshinder@xxxxxxxxxxxxxxxxxx
        To unsubscribe send a blank email to
$subst('Email.Unsub') 

Other related posts: