RE: HOW to setup ISA firewall for NT4 Domain

  • From: "Prashant Vaddadi" <pvaddadi@xxxxxxxxxxx>
  • To: isalist@xxxxxxxxxxxxx
  • Date: Sat, 18 Aug 2001 07:58:32 +0530

David

Thats true , But what about securing 20wks from inside 30wks or domain.
Over all i want to secure 20wks form intranet and internet both.

Now i'm thinking of ISA with three cards one pointing to internet router, second pointing to intranet(DOMPDC1+30wks+Intranet) and third poniting to internel 20wks hub.

And if i consider this as a case the problem stil persiste.


From: David  Dellanno <david@xxxxxxxxxx>
Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Subject: [isalist] RE: HOW to setup ISA firewall for NT4 Domain
Date: Fri, 17 Aug 2001 09:26:24 -0400

http://www.ISAserver.org


I'm sorry about your diagram. I wouldn't recommend your ISA server to be in
the middle of your network, but by design to be installed at the edge of
your network. You will still meet your requirements of the protection of
the firewall for the entire network. You can still have your 20
workstations dedicated to one hub for easier management purposes.


[CORPORATE PRIVATE NETWORK]-------[FIREWALL]------[INTERNET]

[DOMPDC1+30WKS]----[+20WKS]-------[ISA 2000]------[ROUTER/MODEM]

|___[HUB1]____________________[HUB2]___|



-----Original Message-----
From: Prashant Vaddadi [mailto:pvaddadi@xxxxxxxxxxx]
Sent: Friday, August 17, 2001 1:44 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: HOW to setup ISA firewall for NT4 Domain


http://www.ISAserver.org



They are part of dom 1 but have to be physically isolated. So I'm using I
different switch for the 20 workstations.

HUB1-à |_________| |________|ß---HUB2
| | | |
DOMPDC1--| |-------------ISA server-----------------| |--------WKS1
E0 E1


>From: David Dellanno <david@xxxxxxxxxx>
>Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
>To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
>Subject: [isalist] RE: HOW to setup ISA firewall for NT4 Domain
>Date: Fri, 17 Aug 2001 00:06:30 -0400
>
>http://www.ISAserver.org
>
>
>Hi Prashant,
>
> 20 workstations, do they belong to DOM1 or are they just in a
>workgroup?
>
>-----Original Message-----
>From: Prashant [mailto:pvaddadi@xxxxxxxxxxx]
>Sent: Thursday, August 16, 2001 11:41 PM
>To: [ISAserver.org Discussion List]
>Subject: [isalist] HOW to setup ISA firewall for NT4 Domain
>
>
>http://www.ISAserver.org
>
>
>Dear All,
>
>I want to setup Firewall for few m/c which are part of my NT4 domain.
>
>I have NT4 domain say DOM1 with domain controller say DOMPDC1 and having
>50 m/c workstation. The DOM1 also contains mail server and Data server.
>Now i want to secure 20 workstations, which are part of project group who
>require firewall protection within the domain as well from Internet.
>
>I'm using windows 2000 and ISA server in stand alone mode as firewall.
>
>All the 20 worksation, which are the internal part of Firewall, are unable
>to find the domain controller and the users are unable to authenticate to
>Domain.
>
>Can any one help me to achieve the task or how to configure ISA server to
>allow NetBIOS over TCP/IP. I have also tried with LMHOST entries on
>workstations.
>
>Prashant
>
>------------------------------------------------------
>You are currently subscribed to this ISAserver.org Discussion List as:
>david@xxxxxxxxxx
>To unsubscribe send a blank email to $subst('Email.Unsub')
>
>------------------------------------------------------
>You are currently subscribed to this ISAserver.org Discussion List as:
>pvaddadi@xxxxxxxxxxx
>To unsubscribe send a blank email to $subst('Email.Unsub')



_________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: david@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: pvaddadi@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp



Other related posts: