RE: Firewall between ISA and Web server

  • From: "Sharma, Shobha" <c-ssharma@xxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 25 Apr 2002 12:01:37 -0400

Can't do that, policy issues. Secondly its ES7000 and lot of other database
running on it.

-----Original Message-----
From: Andrew Shaw [mailto:Andrew.Shaw@xxxxxxxxxxxxx]
Sent: Thursday, April 25, 2002 11:51 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Firewall between ISA and Web server


http://www.ISAserver.org


Why don't you take the web server off the internal network, and place it
on a DMZ/Perimeter network? You already have the firewalls to do this.

Andrew Shaw
Doherty Associates

-----Original Message-----
From: Sharma, Shobha [mailto:c-ssharma@xxxxxxxxxxx] 
Sent: 25 April 2002 16:46
To: [ISAserver.org Discussion List]
Subject: [isalist] Firewall between ISA and Web server


http://www.ISAserver.org


ALL

I have a checkpoint firewall sitting between ISA and internal web
server. I am using server publishing to publish sites on the the
internal web server. Now as server publishing uses the internet client
ip address to connect to internal web server, I need to create a rule
which allows any-> to internal web server. But that will open a whole to
the internal network. Is there a way to address this issue. I can't use
web publishing because of some other concerns. May be if there is no way
I will make the web server the firewall client, but don't want to do
that Pls let me know any suggestions you all have.

Thanks
Shobha Sharma
Network Operating Systems
OIS Bureau of Technology
Department of Public Welfare
717 772 7204


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
Andrew.Shaw@xxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

_____________________________________________________________________
This message has been checked for all known viruses by UUNET delivered 
through the MessageLabs Virus Control Centre. For further information
visit http://www.uk.uu.net/products/security/virus/

_____________________________________________________________________
This message has been checked for all known viruses by UUNET delivered 
through the MessageLabs Virus Control Centre. For further information visit
http://www.uk.uu.net/products/security/virus/

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
c-ssharma@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: