RE: FYI: ISA on SBS
- From: "Wayne Small" <wayne@xxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 24 Jul 2003 21:16:24 +1000
Ok - wading in the deep end here. I agree that ISA on a Domain
Controller (which of course SBS is) is not the ideal solution for the
ultimate security requirement. But it does give the small business
owner a lot of control over utilisation of their bandwidth and
resources. Both are rare items in the SBS end of the market. For
example - here in Australia we get charged per MB for downloads for our
internet connections - therefore the caching facilities in ISA are a
real asset to us - I am not aware of any firewall appliance at this end
of the market that does caching like ISA does! This adds up to real $$$
savings for the SBS customer. The SBS customer typically would purchase
just W2k Server and maybe exchange if it were not for the excellent
price point of SBS. This gives the small guy the power of the big
business and allows them access to feature sets that mean they can
really compete with the bigger guys without spending a fortune on
infrastructure costs.
Security - Ok - properly configured ISA is solid on SBS - it protects
the customer well and allows them to monitor and authenticate access to
their LAN. SBS2003 standard edition does not include ISA and that I am
afraid to say is a real shame. It's like saying that security does not
really matter to the small business customer and that a hardware based
solution will be good enough - I don't think so. In all my sites I
combine a hardware based firewall eg a basic netgear Firewall to provide
basic port filtering and DOS filtering at the perimeter. I then
configure ISA to provide the more advanced features that the customer
may require, ie OWA publishing via SSL etc. I would not feel secure
with just a hardware firewall. I would not feel secure with just one
level of protection.
Having said all that - if Microsoft were to produce a hardware based
device that had the features of ISA then I would be extremely happy -
such a powerful solution for a reasonable price would give greater
control over the branch office environment as well.
Anyway -just my two bits worth.
Regards,
Wayne Small [SBS-MVP]
MCSE+I MCSE 2000
Technical Director - Correct Solutions Pty Ltd
For all the answers on Small Business Server 2000 - check out
www.sbsfaq.com <http://www.sbsfaq.com/>
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Sunday, 13 July 2003 11:52 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] FYI: ISA on SBS
http://www.ISAserver.org
Interesting article on ISA on SBS:
http://www.w2knews.com/index.cfm?id=434
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder <http://www.isaserver.org/shinder>
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
<http://tinyurl.com/1llp>
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion
List as: wayne@xxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
