Re: FW: Re: PIX Firewall and ISA
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 27 Apr 2005 06:27:47 -0700
Everything in the path of a packet slows it down - that's the nature of
the beast.
Installing something just because you can" is a poor deployment strategy
and hints that you haven't really thought it through.
Exactly why do you feel the need for a DMZ?
-----Original Message-----
From: Zahir Al-Sa'ab [mailto:zahir.alsaab@xxxxxxxxx]
Sent: Tuesday, April 26, 2005 10:26 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: FW: Re: PIX Firewall and ISA
http://www.ISAserver.org
thanks for you reply
what i need only firewall PIX and then ISA and then the internal Network
no DMZ, beside I want to ask two firewall does reduce the speed of
connection
Best regards,
On 4/26/05, Dijk, Sebastian van <sebastian.van.dijk@xxxxxxxxxx> wrote:
http://www.ISAserver.org <http://www.isaserver.org/>
We have the same situation here, PIX in front of ISA2000.
I think it's great, as mentioned before, security is an approach
:-)
We use the segment between the pix and ISA as a DMZ with private
addresses.
What setup where you thinking of ?
Met vriendelijke groet,
Sebastian van Dijk
Systeembeheer
email: sebastian.van.dijk@xxxxxxxxxx
<mailto:sebastian.van.dijk@xxxxxxxxxx>
________________________________
Van: TRadtke@xxxxxxxxxxxx <mailto:TRadtke@xxxxxxxxxxxx>
[mailto:TRadtke@xxxxxxxxxxxx]
Verzonden: maandag 25 april 2005 17:07
Aan: [ISAserver.org <http://isaserver.org/> Discussion List]
Onderwerp: [isalist] Re: PIX Firewall and ISA
http://www.ISAserver.org <http://www.isaserver.org/>
Since the guy already owns it, why not give him some helpful
advise like setting up ACLs to only let in specific traffic he wants,
like DNS, SMTP, FTP, etc. Then setup the ISA for application and
content filtering for the incoming data on the backend of it. ISA isn't
the end all and be all of network security. Security is an approach,
not a software or hardware package.
-----Original Message-----
From: Steve Moffat [mailto: steve@xxxxxxxxxx]
Sent: Sunday, April 24, 2005 7:03 PM
To: [ISAserver.org <http://isaserver.org/> Discussion
List]
Subject: [isalist] Re: PIX Firewall and ISA
http://www.ISAserver.org <http://www.isaserver.org/>
Yup, got it in one, The PIX is absolutely useless.
S
________________________________
From: Zahir Al-Sa'ab [mailto:zahir.alsaab@xxxxxxxxx]
Sent: Sunday, April 24, 2005 8:42 PM
To: ISA Mailing List
Subject: [isalist] Re: PIX Firewall and ISA
http://www.ISAserver.org <http://www.isaserver.org/>
I need to firewall i your way the PIX will be useless
On 4/25/05, Steve Moffat < steve@xxxxxxxxxx
<mailto:steve@xxxxxxxxxx> > wrote:
http://www.ISAserver.org <http://www.isaserver.org/>
Use your PIX open port button, and open all incoming and
outgoing ports to and from the ISA server.
S
:))..Throw the pix away, you don't need it.
________________________________
From: Zahir Al-Sa'ab [mailto:zahir.alsaab@xxxxxxxxx]
Sent: Sunday, April 24, 2005 8:33 PM
To: ISA Mailing List
Subject: [isalist] Re: PIX Firewall and ISA
http://www.ISAserver.org <http://www.isaserver.org/>
Nobody want answer me???????????????????/
On 4/23/05, Zahir Al-Saab < zahir.alsaab@xxxxxxxxx
<mailto:zahir.alsaab@xxxxxxxxx> > wrote:
http://www.ISAserver.org <http://www.isaserver.org/>
HI,
I have PIX and ISA2004 I want to configure them as a
firewall, PIX in the
edge of network and then ISA, would anyone tell me what
the proper
senario.
thanks
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
<http://www.webelists.com/cgi/lyris.pl?enter=isalist>
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
<http://www.windowsnetworking.com/>
Leading Network Software Directory: http://www.serverfiles.com
<http://www.serverfiles.com/>
No.1 Exchange Server Resource Site: http://www.msexchange.org
<http://www.msexchange.org/>
Windows Security Resource Site: http://www.windowsecurity.com/
<http://www.windowsecurity.com/>
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
<http://www.ntfaxfaq.com/>
------------------------------------------------------
You are currently subscribed to this ISAserver.org
<http://isaserver.org/> Discussion List as: zahir.alsaab@xxxxxxxxx
<mailto:zahir.alsaab@xxxxxxxxx>
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
--
Zahir Al-Sa'ab ------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA
Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA
Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------ Other Internet
Software Marketing Sites: World of Windows Networking:
http://www.windowsnetworking.com Leading Network Software Directory:
http://www.serverfiles.com No.1 Exchange Server Resource Site:
http://www.msexchange.org Windows Security Resource Site:
http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------ You are currently
subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To
unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
Other related posts:
