Re: ISA and IPSEC Based internal Network

Properties of the external network connection.
Properties of TCPIP
Advanced button
Options Tab
Properties of IP Security
Select "Do Not use IPSEC"
  ----- Original Message ----- 
  From: Brewer, Lewis 
  To: [ISAserver.org Discussion List] 
  Sent: Monday, September 30, 2002 3:49 PM
  Subject: [isalist] Re: ISA and IPSEC Based internal Network


  http://www.ISAserver.org


              Ah there is the key how do you bind it to one network card but 
not the other I have yet to see an option to choose which network card it binds 
to.

   

  Lewis Brewer

   

  -----Original Message-----
  From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
  Sent: Monday, 30 September, 2002 15:36
  To: [ISAserver.org Discussion List]
  Subject: [isalist] Re: ISA and IPSEC Based internal Network

   

  http://www.ISAserver.org

  As long as IPSec isn't enabled on the external NIC, ISA should operate just 
fine, all other things being equal.

   

   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/pages/author_index.asp?aut=3
   http://isatools.org
   Read the books!

  ----- Original Message ----- 


  From: Brewer, Lewis 

  To: [ISAserver.org Discussion List] 

  Sent: Monday, September 30, 2002 11:32 AM

  Subject: [isalist] ISA and IPSEC Based internal Network

   

  http://www.ISAserver.org

   

             Ok here is the scenario.  

   

  1.       Internal Network is all running with IPSec.

  2.       Trying to setup ISA to act as firewall for the network

  3.       ISA is installed on a server with IPSec enabled on the NICs

   

  The question I have is this all possible?  Or is there something I am over 
looking here.  Now I have set up a simulation of all this in my lab for 
testing.  There is an AD with 5 workstations, an ISA server with 3 workstations 
with IIS running on the other side of the ISA.  I have enable IPSec on all 
machines on the inside of the network like we want, and no IPSec on the 
machines simulating the Internet.  

   

  Suggestions are always welcomed.

   

   

   

  Lewis Brewer

  @webelists.com

Other related posts: