[isalist] Re: Symantec Endpoint Protection v11.0 on ISA Server 2006

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 7 Jan 2008 09:03:35 -0600

http://www.ISAserver.org
-------------------------------------------------------

Hi Greg,

That is correct. In a well managed ISA Firewall enviroment, there is no
need for AV/AS software on the firewall. In fact, adding this software
to the ISA Firewall can significantly increase the attack surface on the
ISA Firewall and break the ISA Firewall's security model.

Thanks!
Tom

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- Microsoft Firewalls (ISA)

 

> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx 
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Greg Mulholland
> Sent: Monday, January 07, 2008 2:02 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Symantec Endpoint Protection v11.0 on 
> ISA Server 2006
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> Constructive please...
> 
> As you can probably tell by some of the responses, in a standalone
> environment (sbs aside as you don't have much choice) we 
> generally wouldn't
> encourage you to add third party functionality to your 
> firewall. There have
> been many/many cases where such software has corrupted files, 
> registry or
> just the nuts/bolts and wheels of the box. Many! Im sure if you wanted
> horror stories or specific examples most of us, if not Jim 
> could knock your
> jocks off. However, I would assume that no-one (that has 
> replied) other than
> Peter has any specific experience with the product (albeit 
> his was in an sbs
> 2000 environment, and I would guess would have been some 
> years ago). I would
> be hitting up Symantec for deployment scenario's and best 
> practise guides
> and I would most definitely ensure I could test in a lab 
> environment and had
> a good/working backup of the server before I did anything for real!
> 
> HTH
> 
> Greg
> 
> 
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx 
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> Behalf Of Steve Moffat
> Sent: Monday, 7 January 2008 1:06 AM
> To: ISA Mailing List
> Subject: [isalist] Re: Symantec Endpoint Protection v11.0 on 
> ISA Server 2006
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> As others have asked...why on earth would you do that???
> 
> S
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx 
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> Behalf Of Tony Afriyie
> Sent: Sunday, January 06, 2008 9:48 AM
> To: ISA Mailing List
> Subject: [isalist] Re: Symantec Endpoint Protection v11.0 on 
> ISA Server 2006
> 
> http://www.ISAserver.org
> -------------------------------------------------------
> 
> I am trying to install the Antivirus and the Antispyware 
> portion of the
> Symantec Endpoint Protection.
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx 
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> Behalf Of Thomas W Shinder
> Sent: Saturday, January 05, 2008 2:48 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Symantec Endpoint Protection v11.0 on 
> ISA Server 2006
> 
> http://www.ISAserver.org
> -------------------------------------------------------
> 
> Why in the world would you install endpoint protection on a firewall?
> 
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://blogs.isaserver.org/shinder/
> Book: http://tinyurl.com/3xqb7
> MVP -- Microsoft Firewalls (ISA)
> 
> 
> 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Tony Afriyie
> > Sent: Saturday, January 05, 2008 12:24 PM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Symantec Endpoint Protection v11.0 on ISA
> > Server 2006
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > All,
> >  Has anyone installed Symantec Endpoint Protection v11.0 on
> > ISA Server 2006
> > yet? I am about to do it and I am trying to find out if I 
> can get any
> > configuration advise before I start. I have "googled" around
> > but I haven't
> > found anything yet. Any tutorial out there that you guys can
> > point me to?
> >
> > Thanks in advance,
> >
> > Tony
> > -
> >
> >
> >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> >
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/  
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/ 
> ISA Server Blogs: http://blogs.isaserver.org/ 
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com 
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
> Report abuse to listadmin@xxxxxxxxxxxxx 
> 
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/  
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/ 
> ISA Server Blogs: http://blogs.isaserver.org/ 
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com 
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
> Report abuse to listadmin@xxxxxxxxxxxxx 
> 
> 
> 
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: