Re: FW: Re: PIX Firewall and ISA
- From: Zahir Al-Sa'ab <zahir.alsaab@xxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 28 Apr 2005 00:53:12 +0300
so now ,what is your recommendations guys shall i go with two firewall or
configure only PIX asa Firewall and ISA as a proxy , I need your advice guys
On 4/27/05, Jim Harrison <Jim@xxxxxxxxxxxx> wrote:
>
> http://www.ISAserver.org
>
> Everything in the path of a packet slows it down - that's the nature of
> the beast.
> Installing something just because you can" is a poor deployment strategy
> and hints that you haven't really thought it through.
> Exactly why do you feel the need for a DMZ?
>
> -----Original Message-----
> From: Zahir Al-Sa'ab [mailto:zahir.alsaab@xxxxxxxxx]
> Sent: Tuesday, April 26, 2005 10:26 PM
> To: [ISAserver.org <http://ISAserver.org> Discussion List]
> Subject: [isalist] Re: FW: Re: PIX Firewall and ISA
>
> http://www.ISAserver.org
> thanks for you reply
>
> what i need only firewall PIX and then ISA and then the internal Network
> no DMZ, beside I want to ask two firewall does reduce the speed of
> connection
>
> Best regards,
>
> On 4/26/05, Dijk, Sebastian van <sebastian.van.dijk@xxxxxxxxxx> wrote:
>
> http://www.ISAserver.org <http://www.isaserver.org/>
>
>
> We have the same situation here, PIX in front of ISA2000.
>
> I think it's great, as mentioned before, security is an approach
> :-)
>
> We use the segment between the pix and ISA as a DMZ with private
> addresses.
>
> What setup where you thinking of ?
>
> Met vriendelijke groet,
>
> Sebastian van Dijk
>
> Systeembeheer
>
> email: sebastian.van.dijk@xxxxxxxxxx
> <mailto:sebastian.van.dijk@xxxxxxxxxx>
>
>
> ________________________________
>
> Van: TRadtke@xxxxxxxxxxxx <mailto:TRadtke@xxxxxxxxxxxx>
> [mailto:TRadtke@xxxxxxxxxxxx]
> Verzonden: maandag 25 april 2005 17:07
> Aan: [ISAserver.org <http://ISAserver.org> <http://isaserver.org/>
> Discussion List]
> Onderwerp: [isalist] Re: PIX Firewall and ISA
>
> http://www.ISAserver.org <http://www.isaserver.org/>
>
> Since the guy already owns it, why not give him some helpful
> advise like setting up ACLs to only let in specific traffic he wants,
> like DNS, SMTP, FTP, etc. Then setup the ISA for application and
> content filtering for the incoming data on the backend of it. ISA isn't
> the end all and be all of network security. Security is an approach,
> not a software or hardware package.
>
> -----Original Message-----
> From: Steve Moffat [mailto: steve@xxxxxxxxxx]
> Sent: Sunday, April 24, 2005 7:03 PM
> To: [ISAserver.org <http://ISAserver.org> <http://isaserver.org/>
> Discussion
> List]
> Subject: [isalist] Re: PIX Firewall and ISA
>
> http://www.ISAserver.org <http://www.isaserver.org/>
>
> Yup, got it in one, The PIX is absolutely useless.
>
> S
>
> ________________________________
>
> From: Zahir Al-Sa'ab [mailto:zahir.alsaab@xxxxxxxxx]
> Sent: Sunday, April 24, 2005 8:42 PM
> To: ISA Mailing List
> Subject: [isalist] Re: PIX Firewall and ISA
>
> http://www.ISAserver.org <http://www.isaserver.org/>
>
> I need to firewall i your way the PIX will be useless
>
> On 4/25/05, Steve Moffat < steve@xxxxxxxxxx
> <mailto:steve@xxxxxxxxxx> > wrote:
>
> http://www.ISAserver.org <http://www.isaserver.org/>
>
> Use your PIX open port button, and open all incoming and
> outgoing ports to and from the ISA server.
>
> S
>
> :))..Throw the pix away, you don't need it.
>
> ________________________________
>
> From: Zahir Al-Sa'ab [mailto:zahir.alsaab@xxxxxxxxx]
> Sent: Sunday, April 24, 2005 8:33 PM
> To: ISA Mailing List
> Subject: [isalist] Re: PIX Firewall and ISA
>
> http://www.ISAserver.org <http://www.isaserver.org/>
>
>
> Nobody want answer me???????????????????/
>
> On 4/23/05, Zahir Al-Saab < zahir.alsaab@xxxxxxxxx
> <mailto:zahir.alsaab@xxxxxxxxx> > wrote:
>
> http://www.ISAserver.org <http://www.isaserver.org/>
>
> HI,
>
> I have PIX and ISA2004 I want to configure them as a
> firewall, PIX in the
> edge of network and then ISA, would anyone tell me what
> the proper
> senario.
>
> thanks
>
> ------------------------------------------------------
> List Archives:
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> <http://www.webelists.com/cgi/lyris.pl?enter=isalist>
> ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ:
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> <http://www.windowsnetworking.com/>
> Leading Network Software Directory: http://www.serverfiles.com
> <http://www.serverfiles.com/>
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> <http://www.msexchange.org/>
> Windows Security Resource Site: http://www.windowsecurity.com/
> <http://www.windowsecurity.com/>
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> <http://www.ntfaxfaq.com/>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org <http://ISAserver.org>
> <http://isaserver.org/> Discussion List as: zahir.alsaab@xxxxxxxxx
> <mailto:zahir.alsaab@xxxxxxxxx>
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> --
> Zahir Al-Sa'ab ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA
> Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA
> Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------ Other Internet
> Software Marketing Sites: World of Windows Networking:
> http://www.windowsnetworking.com Leading Network Software Directory:
> http://www.serverfiles.com No.1 Exchange Server Resource Site:
> http://www.msexchange.org Windows Security Resource Site:
> http://www.windowsecurity.com/ Network Security Library:
> http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------ You are currently
> subscribed to this ISAserver.org <http://ISAserver.org> Discussion List
> as: jim@xxxxxxxxxxxx To
> unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> All mail to and from this domain is GFI-scanned.
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org
> <http://ISAserver.org>Discussion List as:
> zahir.alsaab@xxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
--
Zahir Al-Sa'ab
Other related posts:
