RE: Configure ISA 2004 as a Network Services Segment Perimeter Firewall

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sun, 7 Aug 2005 09:00:17 -0500

Hi Jim,

Eggcellent!

Yes, that's a great scenario. I've been noodling over what to include in
a multihomed ISA firewall config and how to best approach it. I've got
four parts so far -- I post the followup links later today.

Thanks!

Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls

 

> -----Original Message-----
> From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
> Sent: Sunday, August 07, 2005 8:47 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Configure ISA 2004 as a Network 
> Services Segment Perimeter Firewall
> 
> http://www.ISAserver.org
> 
> Hi Tom,
> 
> Nice stuff, bro.  Wanna see a screenshot of a "peripiheral 
> network from
> h377" - IOW, my lab ISA?  http://isatools.org/isasefw.scrn.PNG 
> 
> The 11 NICs in the systray represent two physical interfaces using
> 802.1q VLANS to serve 1 "external" network, 1 "Internal" and 8
> "perimeter" nets (the remaining NIC is the single "internal" 
> card that's
> divvied up into the subnets).
> 4 benches, 8 racks and each one of them lives in a separate 
> network, all
> separated by ISA.
> 
> RRAS DHCP Relay (and a proper configuration) allows a single 
> DHCP server
> to handle all subnets.
> 
> As it turns out, this is getting to be a very popular 
> deployment for ISA
> - the "Branch offices that chain to a Home office array or server".
> Maybe we should add this, too..?
> 
> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
> Sent: Tuesday, August 02, 2005 6:27 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Configure ISA 2004 as a Network Services Segment
> Perimeter Firewall
> 
> http://www.ISAserver.org
> 
> 
> Hey folks,
> 
> Let me know if this clear up any issues, or makes them more cloudy and
> what doesn't make any sense. Final version, and complete series with
> step by steps, will go on the ISAServer.org site later this month.
> 
> Configure ISA 2004 as a Network Services Segment Perimeter Firewall:
> http://www.msfirewall.org/isa2004/2004servicesfirewallpart1/20
> 04services
> firewallpart1.htm
> 
> Thanks!
> 
> Tom
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx 
> 
> All mail to and from this domain is GFI-scanned.
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 


Other related posts: