Hi Zahir, I would set the ISA firewall as the firewall and the PIX packet filter as an eBay sale. HTH, Tom ________________________________ From: Zahir Al-Sa'ab [mailto:zahir.alsaab@xxxxxxxxx] Sent: Wednesday, April 27, 2005 4:53 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: FW: Re: PIX Firewall and ISA http://www.ISAserver.org so now ,what is your recommendations guys shall i go with two firewall or configure only PIX asa Firewall and ISA as a proxy , I need your advice guys On 4/27/05, Jim Harrison <Jim@xxxxxxxxxxxx> wrote: http://www.ISAserver.org Everything in the path of a packet slows it down - that's the nature of the beast. Installing something just because you can" is a poor deployment strategy and hints that you haven't really thought it through. Exactly why do you feel the need for a DMZ? -----Original Message----- From: Zahir Al-Sa'ab [mailto:zahir.alsaab@xxxxxxxxx] Sent: Tuesday, April 26, 2005 10:26 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: FW: Re: PIX Firewall and ISA http://www.ISAserver.org thanks for you reply what i need only firewall PIX and then ISA and then the internal Network no DMZ, beside I want to ask two firewall does reduce the speed of connection Best regards, On 4/26/05, Dijk, Sebastian van <sebastian.van.dijk@xxxxxxxxxx> wrote: http://www.ISAserver.org <http://www.isaserver.org/> We have the same situation here, PIX in front of ISA2000. I think it's great, as mentioned before, security is an approach :-) We use the segment between the pix and ISA as a DMZ with private addresses. What setup where you thinking of ? Met vriendelijke groet, Sebastian van Dijk Systeembeheer email: sebastian.van.dijk@xxxxxxxxxx <mailto:sebastian.van.dijk@xxxxxxxxxx > ________________________________ Van: TRadtke@xxxxxxxxxxxx <mailto:TRadtke@xxxxxxxxxxxx> [mailto: TRadtke@xxxxxxxxxxxx <mailto:TRadtke@xxxxxxxxxxxx> ] Verzonden: maandag 25 april 2005 17:07 Aan: [ISAserver.org <http://isaserver.org/> Discussion List] Onderwerp: [isalist] Re: PIX Firewall and ISA http://www.ISAserver.org <http://www.isaserver.org/> Since the guy already owns it, why not give him some helpful advise like setting up ACLs to only let in specific traffic he wants, like DNS, SMTP, FTP, etc. Then setup the ISA for application and content filtering for the incoming data on the backend of it. ISA isn't the end all and be all of network security. Security is an approach, not a software or hardware package. -----Original Message----- From: Steve Moffat [mailto: steve@xxxxxxxxxx] Sent: Sunday, April 24, 2005 7:03 PM To: [ISAserver.org <http://isaserver.org/> Discussion List] Subject: [isalist] Re: PIX Firewall and ISA http://www.ISAserver.org <http://www.isaserver.org/ > Yup, got it in one, The PIX is absolutely useless. S ________________________________ From: Zahir Al-Sa'ab [mailto: zahir.alsaab@xxxxxxxxx <mailto:zahir.alsaab@xxxxxxxxx> ] Sent: Sunday, April 24, 2005 8:42 PM To: ISA Mailing List Subject: [isalist] Re: PIX Firewall and ISA http://www.ISAserver.org <http://www.isaserver.org/> I need to firewall i your way the PIX will be useless On 4/25/05, Steve Moffat < steve@xxxxxxxxxx <mailto:steve@xxxxxxxxxx> > wrote: http://www.ISAserver.org <http://www.isaserver.org/> Use your PIX open port button, and open all incoming and outgoing ports to and from the ISA server. S :))..Throw the pix away, you don't need it. ________________________________ From: Zahir Al-Sa'ab [mailto:zahir.alsaab@xxxxxxxxx ] Sent: Sunday, April 24, 2005 8:33 PM To: ISA Mailing List Subject: [isalist] Re: PIX Firewall and ISA http://www.ISAserver.org <http://www.isaserver.org/> Nobody want answer me???????????????????/ On 4/23/05, Zahir Al-Saab < zahir.alsaab@xxxxxxxxx <mailto:zahir.alsaab@xxxxxxxxx> > wrote: http://www.ISAserver.org < http://www.isaserver.org/ <http://www.isaserver.org/> > HI, I have PIX and ISA2004 I want to configure them as a firewall, PIX in the edge of network and then ISA, would anyone tell me what the proper senario. thanks ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist <http://www.webelists.com/cgi/lyris.pl?enter=isalist> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com <http://www.windowsnetworking.com/> Leading Network Software Directory: http://www.serverfiles.com < http://www.serverfiles.com/ <http://www.serverfiles.com/> > No.1 Exchange Server Resource Site: http://www.msexchange.org <http://www.msexchange.org/ > Windows Security Resource Site: http://www.windowsecurity.com/ <http://www.windowsecurity.com/> Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com <http://www.ntfaxfaq.com/ > ------------------------------------------------------ You are currently subscribed to this ISAserver.org <http://isaserver.org/ > Discussion List as: zahir.alsaab@xxxxxxxxx <mailto:zahir.alsaab@xxxxxxxxx> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx -- Zahir Al-Sa'ab ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: zahir.alsaab@xxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx -- Zahir Al-Sa'ab ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx