I thought #2 was good enough. Basically, someone on the Sunbelt sysadmin list recommended "make sure it's in a separate domain" which made sense. If the firewall gets cracked they still would have to cross over AD security. Or is this overkill? How many here are actually doing this (High Availability / Fault Tolerance)? Does NLB + ISA Array do the job, or do we need to look at Rainwall, or Stonebeat, or some such? Budget < $10K. ---------------------------- G. Waleed Kavalec Baca, Stein, White and Associates 281-342-2646 -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Monday, April 19, 2004 8:11 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Fault tolerant ISA http://www.ISAserver.org I doubt that he was asking for contract bids... You're right; you'll have to solve your AD issues before you can bring up an ISA Array. Are you trying to build: 1. a completely separate forest 2. a new domain in an existing forest 3. a child domain ? Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! On Mon, 19 Apr 2004 14:56:24 +0200 "Aleksandar Brankovic" <baleksandar@xxxxxxxxxxxxxxxx> wrote: http://www.ISAserver.org Yep, there is bunch of ways tat u can do it. I am only interested in budget that u have. It could be a problem ____________________________________________ Aleksandar Brankovic Delta Banka A.D. Sektor za informacioni sistem Milentija Popovica 7a tel:+381 11 201 15 65 baleksandar@xxxxxxxxxxxxxxxx www.deltabanka.co.yu ____________________________________________ -----Original Message----- From: G. Waleed Kavalec [mailto:Kavalec@xxxxxxxx] Sent: Monday, April 19, 2004 1:38 PM To: [ISAserver.org Discussion List] Subject: [isalist] Fault tolerant ISA http://www.ISAserver.org I need to bring up an ISA Array, with NLB for failover. I have been told that this should be in its own domain, but my attempts to bring up win2k advanced server then dcpromo it as a separate domain in the forest this past weekend were (at best) quite frustrating. And yes, I know this was an AD problem, not an ISA issue, but w/o AD no ISA Enterprise. Is there a definitive cookbook for implementing a fault-tolerant ISA Server array? I'm tired and cranky and I just want a set of simple instructions. ;-) ---------------------------- G. Waleed Kavalec Baca, Stein, White and Associates 281-342-2646 ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: baleksandar@xxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: kavalec@xxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')