http://www.ISAserver.org ------------------------------------------------------- To add to that, you'll never get anything more than HTTP-based protocol across a hork-mode ISA. SMTP, POP3, IMAP, LDAP are all dead to a single-NIC ISA or TMG. JimmyJoeBob Alooba Office 2007 on Win7 Beta -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Moffat Sent: Tuesday, February 10, 2009 4:52 AM To: ISA Mailing List Subject: [isalist] Re: Exchange 2007 publishing scenarios http://www.ISAserver.org ------------------------------------------------------- Absolutely use at least 2 nics. Your ISA at the moment is running in HORK Mode ,( http://www.isaserver.org/pages/newsletters/november2006.asp) ....No protection as the firewall service is not being used. S -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Andrew Hodgson Sent: Tuesday, February 10, 2009 8:32 AM To: ISA Mailing List Subject: [isalist] Exchange 2007 publishing scenarios http://www.ISAserver.org ------------------------------------------------------- Hi, I just wanted to get something straight re Exchange 2007 publishing scenarios in ISA Server 2006. We currently have an existing firewall topology set up with segmented networks. The Exchange server will be on the internal network, and the CAS server will also be on the internal network. I need to publish the following services to external clients: * OWA * POP3S * LDAPS (to domain controller, for external access from specific IP addresses). We have an ISA server on the internal network running in unihomed configuration doing HTTP proxy requests on port 80 (this has been a long-standing configuration). Is it best to install the new ISA server using two network cards, one in the internal network and the other card in the segmented network? The other choice is to install the ISA server in the segmented network and use LDAP authentication, but then I am not sure whether all the publishing rules would work. It would be nice to keep the proxy address the same also for internal clients. Thanks. Andrew. -- allpay.net Limited, Fortis et Fides, Whitestone Business Park, Whitestone, Hereford, HR1 3SE. Registered in England No. 02933191. UK VAT Reg. No. 666 9148 88. Telephone: 0870 243 3434, Fax: 0870 243 6041. Website: www.allpay.net Email: enquiries@xxxxxxxxxx This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom it is addressed. If you have received this email in error please notify the allpay.net Information Security Manager at the number above. ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx