RE: PUT ISA2K4 on DC

From: "Roy Tsao" <roy_tsao@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Date: Wed, 22 Dec 2004 16:50:50 +0800

Thanks John. I know the concept to have minmized service
at ISA box in terms of risk coming from not only Wan side
but also bad boys from Lan.
In my production environment, I don't so much concern
about Lan attack side but main to Wan, that's why
I want to put a hardware firewall to block unnecessary port
communication with maximized function on ISA box, then I want
to know if this make a sense to prevent from Wan attack with
no compromise at Internet access performance.

Thanks,

Roy Tsao ----- Original Message ----- From: "John Tolmachoff (Lists)" <johnlist@xxxxxxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Wednesday, December 22, 2004 3:31 PM Subject: [isalist] RE: PUT ISA2K4 on DC

http://www.ISAserver.org
The less you can put on the ISA server box the better.
If I had to chose between SQL on the same box, and making it a DC, I would
chose SQL.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-----Original Message-----
From: Roy Tsao [mailto:roy_tsao@xxxxxxxxxxxx]
Sent: Tuesday, December 21, 2004 10:19 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] PUT ISA2K4 on DC
http://www.ISAserver.org
There might be a lot of security risks if stuff
all service into one server box, however believe
small scaled company will have less budget to
allow taking new server according to needs of each
service/function, company owner always request for
low cost with high performance.
As discussed in my ealier message with Tim & Jim,
I did stuff SQL server & DC into ISA2K4 box which
must be not a good scheme. I can't easily withdraw
it because I need function of "proxy"/"web filter"/
"DC" by limited on server. If so, I could have one
stupid solution to put a hardware firewall router
in front of ISA 2K4 server so for protection of Lan
from Wan side. Does it make sense? Please comment.
Roy Tsao
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
johnlist@xxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: roy_tsao@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx

RE: PUT ISA2K4 on DC

Other related posts: