Re: FW: Re: PIX Firewall and ISA

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 27 Apr 2005 17:12:05 -0500

Hi Zahir,
 
I would set the ISA firewall as the firewall and the PIX packet filter
as an eBay sale.
 
HTH,
Tom

________________________________

From: Zahir Al-Sa'ab [mailto:zahir.alsaab@xxxxxxxxx] 
Sent: Wednesday, April 27, 2005 4:53 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: FW: Re: PIX Firewall and ISA


http://www.ISAserver.org so now ,what is your recommendations guys shall
i go with two firewall or configure only PIX asa  Firewall and ISA as a
proxy , I need your advice guys


On 4/27/05, Jim Harrison <Jim@xxxxxxxxxxxx> wrote: 

        http://www.ISAserver.org
        
        Everything in the path of a packet slows it down - that's the
nature of 
        the beast.
        Installing something just because you can" is a poor deployment
strategy
        and hints that you haven't really thought it through.
        Exactly why do you feel the need for a DMZ?
        
        -----Original Message----- 
        From: Zahir Al-Sa'ab [mailto:zahir.alsaab@xxxxxxxxx]
        Sent: Tuesday, April 26, 2005 10:26 PM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] Re: FW: Re: PIX Firewall and ISA 
        
        http://www.ISAserver.org
        thanks for you reply
        
        what i need only firewall PIX and then ISA and then the internal
Network
        no DMZ, beside I want to ask two firewall does reduce the speed
of 
        connection
        
        Best regards,
        
        On 4/26/05, Dijk, Sebastian van <sebastian.van.dijk@xxxxxxxxxx>
wrote:
        
               http://www.ISAserver.org <http://www.isaserver.org/>
        
        
               We have the same situation here, PIX in front of ISA2000.
        
               I think it's great, as mentioned before, security is an
approach 
        :-)
        
               We use the segment between the pix and ISA as a DMZ with
private
        addresses.
        
               What setup where you thinking of ?
        
               Met vriendelijke groet,
        
               Sebastian van Dijk
        
               Systeembeheer
        
               email: sebastian.van.dijk@xxxxxxxxxx
        <mailto:sebastian.van.dijk@xxxxxxxxxx >
        
        
        ________________________________
        
               Van: TRadtke@xxxxxxxxxxxx <mailto:TRadtke@xxxxxxxxxxxx>
        [mailto: TRadtke@xxxxxxxxxxxx <mailto:TRadtke@xxxxxxxxxxxx> ]
               Verzonden: maandag 25 april 2005 17:07
               Aan: [ISAserver.org <http://isaserver.org/>  Discussion
List] 
               Onderwerp: [isalist] Re: PIX Firewall and ISA
        
               http://www.ISAserver.org <http://www.isaserver.org/>
        
               Since the guy already owns it, why not give him some
helpful 
        advise like setting up ACLs to only let in specific traffic he
wants,
        like DNS, SMTP, FTP, etc.  Then setup the ISA for application
and
        content filtering for the incoming data on the backend of it.
ISA isn't
        the end all and be all of network security.  Security is an
approach,
        not a software or hardware package.
        
                       -----Original Message-----
                       From: Steve Moffat [mailto: steve@xxxxxxxxxx]
                       Sent: Sunday, April 24, 2005 7:03 PM
                       To: [ISAserver.org <http://isaserver.org/>
Discussion 
        List]
                       Subject: [isalist] Re: PIX Firewall and ISA
        
                       http://www.ISAserver.org
<http://www.isaserver.org/ >
        
                       Yup, got it in one, The PIX is absolutely
useless.
        
                       S
        
        ________________________________
        
                       From: Zahir Al-Sa'ab [mailto:
zahir.alsaab@xxxxxxxxx <mailto:zahir.alsaab@xxxxxxxxx> ]
                       Sent: Sunday, April 24, 2005 8:42 PM
                       To: ISA Mailing List
                       Subject: [isalist] Re: PIX Firewall and ISA
        
                       http://www.ISAserver.org
<http://www.isaserver.org/>
        
                       I need to firewall i your way the PIX will be
useless
        
                       On 4/25/05, Steve Moffat < steve@xxxxxxxxxx
        <mailto:steve@xxxxxxxxxx> > wrote:
        
                       http://www.ISAserver.org
<http://www.isaserver.org/>
        
                       Use your PIX open port button, and open all
incoming and
        outgoing ports to and from the ISA server.
        
                       S 
        
                       :))..Throw the pix away, you don't need it.
        
        ________________________________
        
                       From: Zahir Al-Sa'ab
[mailto:zahir.alsaab@xxxxxxxxx ]
                       Sent: Sunday, April 24, 2005 8:33 PM
                       To: ISA Mailing List
                       Subject: [isalist] Re: PIX Firewall and ISA
        
                       http://www.ISAserver.org
<http://www.isaserver.org/>
        
        
                       Nobody want answer me???????????????????/
        
                       On 4/23/05, Zahir Al-Saab <
zahir.alsaab@xxxxxxxxx
        <mailto:zahir.alsaab@xxxxxxxxx> > wrote:
        
                       http://www.ISAserver.org <
http://www.isaserver.org/ <http://www.isaserver.org/> >
        
                       HI,
        
                       I have PIX and ISA2004 I want to configure them
as a
        firewall, PIX in the
                       edge of network and then ISA, would  anyone tell
me what 
        the proper
                       senario.
        
                       thanks
        
               ------------------------------------------------------
               List Archives:
        http://www.webelists.com/cgi/lyris.pl?enter=isalist
        <http://www.webelists.com/cgi/lyris.pl?enter=isalist>
               ISA Server Newsletter:
        http://www.isaserver.org/pages/newsletter.asp
               ISA Server FAQ:
        http://www.isaserver.org/pages/larticle.asp?type=FAQ 
               ------------------------------------------------------
               Other Internet Software Marketing Sites:
               World of Windows Networking:
http://www.windowsnetworking.com 
        <http://www.windowsnetworking.com/>
               Leading Network Software Directory:
http://www.serverfiles.com
        < http://www.serverfiles.com/ <http://www.serverfiles.com/> >
               No.1 Exchange Server Resource Site:
http://www.msexchange.org
        <http://www.msexchange.org/ >
               Windows Security Resource Site:
http://www.windowsecurity.com/
        <http://www.windowsecurity.com/>
               Network Security Library: http://www.secinf.net/
               Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        <http://www.ntfaxfaq.com/ >
               ------------------------------------------------------
               You are currently subscribed to this ISAserver.org
        <http://isaserver.org/ >  Discussion List as:
zahir.alsaab@xxxxxxxxx
        <mailto:zahir.alsaab@xxxxxxxxx>
               To unsubscribe visit
        http://www.webelists.com/cgi/lyris.pl?enter=isalist
               Report abuse to listadmin@xxxxxxxxxxxxx
        
        --
        Zahir Al-Sa'ab
------------------------------------------------------ 
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA
        Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA
        Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------ Other
Internet
        Software Marketing Sites: World of Windows Networking: 
        http://www.windowsnetworking.com Leading Network Software
Directory:
        http://www.serverfiles.com No.1 Exchange Server Resource Site: 
        http://www.msexchange.org Windows Security Resource Site:
        http://www.windowsecurity.com/ Network Security Library:
        http://www.secinf.net/ Windows 2000/NT Fax Solutions:
        http://www.ntfaxfaq.com
        ------------------------------------------------------ You are
currently
        subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To
        unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist 
        Report abuse to listadmin@xxxxxxxxxxxxx
        
        All mail to and from this domain is GFI-scanned.
        
        ------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp 
        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Other Internet Software Marketing Sites: 
        World of Windows Networking: http://www.windowsnetworking.com
        Leading Network Software Directory: http://www.serverfiles.com
        No.1 Exchange Server Resource Site: http://www.msexchange.org
        Windows Security Resource Site: http://www.windowsecurity.com/
        Network Security Library: http://www.secinf.net/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion
List as: zahir.alsaab@xxxxxxxxx
        To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        Report abuse to listadmin@xxxxxxxxxxxxx
        




-- 
Zahir Al-Sa'ab ------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA
Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA
Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------ Other Internet
Software Marketing Sites: World of Windows Networking:
http://www.windowsnetworking.com Leading Network Software Directory:
http://www.serverfiles.com No.1 Exchange Server Resource Site:
http://www.msexchange.org Windows Security Resource Site:
http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------ You are currently
subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to
listadmin@xxxxxxxxxxxxx

Other related posts: