[isalist] Re: Hardware.... (cringe) ...firewall ?

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 20 Jun 2006 11:38:34 -0700

http://www.ISAserver.org
-------------------------------------------------------

Kerberos
Constrained 
Delegation 

I have one customer that's playing with the RC bits and can't get this to work.
The article you uncovered makes many things all more clearerest.

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Thomas W Shinder
Sent: Tuesday, June 20, 2006 11:21
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Hardware.... (cringe) ...firewall ?

http://www.ISAserver.org
-------------------------------------------------------
  
KCD?

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls

 

> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
> Sent: Tuesday, June 20, 2006 12:42 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Hardware.... (cringe) ...firewall ?
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> ..and KCD! 
> 
> 
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org
>    Read the help / books / articles!
> -------------------------------------------------------
>  
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder
> Sent: Tuesday, June 20, 2006 10:31
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Hardware.... (cringe) ...firewall ?
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> We need to get the word out on Web Farm publishing.
> 
> Looks like an F5/CCE killer to me!
> Tom
> 
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://blogs.isaserver.org/shinder/
> Book: http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> 
>  
> 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
> > Sent: Tuesday, June 20, 2006 12:28 PM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: Hardware.... (cringe) ...firewall ?
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >   
> > Wait 'till you play with ISA 2006. 
> > I'll bet you have to change your Depends...
> > :-p
> > 
> > -------------------------------------------------------
> >    Jim Harrison
> >    MCP(NT4, W2K), A+, Network+, PCG
> >    http://isaserver.org/Jim_Harrison/
> >    http://isatools.org
> >    Read the help / books / articles!
> > -------------------------------------------------------
> >  
> > 
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Shane Mullins
> > Sent: Tuesday, June 20, 2006 10:12
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: Hardware.... (cringe) ...firewall ?
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >   
> > Good Deal,
> > 
> >     We have used ISA since Proxy 2.0.  I really liked the
> upgrade from
> > 2.0 to ISA 2000.  But, I really really like ISA 2004.  Some
> of the new
> > features are great, esp in the VPN areas, stateful packet
> inspection.
> >  Also, I like
> > the way ISA integrates into AD, this is huge if you are a Windows 
> > shop.
> > Also, there are some third party snap ins that are very helpful.
> > 
> > Shane
> > 
> > PS I also really enjoyed reading your ISA 2004 book.
> > 
> > 
> > 
> > ----- Original Message -----
> > From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
> > To: <isalist@xxxxxxxxxxxxx>
> > Sent: Tuesday, June 20, 2006 10:33 AM
> > Subject: [isalist] Re: Hardware.... (cringe) ...firewall ?
> > 
> > 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> > 
> > Hi Shane,
> > 
> > No problems, that's how I took it! :)
> > 
> > The PIX tax reminds of when in the middle ages you could pay the 
> > church to absolve you of your sins. The situation here is
> that they're
> > paying Cisco for their sin of slothfullness. Slothful in that they 
> > haven't spent the time and effort to understand real
> network security
> > and blindly pay a router and switch company big money to protect 
> > comporate data (does anyone see the paradox in this?)
> > 
> > Thanks!
> > Tom
> > 
> > Thomas W Shinder, M.D.
> > Site: www.isaserver.org
> > Blog: http://blogs.isaserver.org/shinder/
> > Book: http://tinyurl.com/3xqb7
> > MVP -- ISA Firewalls
> > 
> > 
> > 
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx 
> > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Shane Mullins
> > > Sent: Tuesday, June 20, 2006 7:56 AM
> > > To: isalist@xxxxxxxxxxxxx
> > > Subject: [isalist] Re: Hardware.... (cringe) ...firewall ?
> > >
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >
> > > Hey Thomas,
> > >
> > >     I meant that to be a plug for ISA 2004.  I think ISA 2004 is 
> > > great.  We have two ISA 2004 boxes that firewall and provide 
> > > internet access for 3,500 machines.  ISA 2004 has been rock solid 
> > > for us.  ISA 2004 provides advanced logging and caching functions 
> > > that a "hardware" firewall cannot provide.  I have
> nothing against
> > > unix, but ISA 2004 is great.
> > >     We could have paid 50k for a single pix to provide firewall 
> > > services.
> > > Then signed up for a 5k a year maintenance agreement (so we
> > could rcv
> > > updates).  And all machines need updates, even "hardware"
> > > firewalls have an
> > > OS.  And ISA still does so much more.
> > >
> > > Shane
> > >
> > >
> > >
> > >
> > >
> > >     > On 6/19/06, Thomas W Shinder <tshinder@xxxxxxxxxxx> wrote:
> > > >> http://www.ISAserver.org
> > > >> -------------------------------------------------------
> > > >>
> > > >> Yes, it's that good. Go Daddy and the ISP are clueless.
> > > Have you ever
> > > >> talked to your ISP's "tech guys" who make these
> > > recommendations? Let's
> > > >> just say that the typical interaction leaves you with the
> > > feeling that
> > > >> they're not on the top of the firewall and networking food
> > > chains :)
> > > >>
> > > >> Thomas W Shinder, M.D.
> > > >> Site: www.isaserver.org
> > > >> Blog: http://blogs.isaserver.org/shinder/
> > > >> Book: http://tinyurl.com/3xqb7
> > > >> MVP -- ISA Firewalls
> > > >>
> > > >>
> > > >>
> > > >> > -----Original Message-----
> > > >> > From: isalist-bounce@xxxxxxxxxxxxx 
> > > >> > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
> > Shane Mullins
> > > >> > Sent: Monday, June 19, 2006 1:10 PM
> > > >> > To: isalist@xxxxxxxxxxxxx
> > > >> > Subject: [isalist] Re: Hardware.... (cringe) ...firewall ?
> > > >> >
> > > >> > http://www.ISAserver.org
> > > >> > -------------------------------------------------------
> > > >> >
> > > >> > ISA 2K4 is really good?  There is an eval version.  Maybe he 
> > > >> > would let you try that.
> > > >> >
> > > >> >
> > > >> > Shane
> > > >> >
> > > >> > ----- Original Message -----
> > > >> > From: "G.Waleed Kavalec" <kavalec@xxxxxxxxx>
> > > >> > To: <isalist@xxxxxxxxxxxxx>
> > > >> > Sent: Monday, June 19, 2006 1:08 PM
> > > >> > Subject: [isalist] Hardware.... (cringe) ...firewall ?
> > > >> >
> > > >> >
> > > >> > > http://www.ISAserver.org
> > > >> > > -------------------------------------------------------
> > > >> > >  My boss has been talking to our ISP and also to some folks
> > > >> > at GoDaddy.
> > > >> > >
> > > >> > > Both use - and recommend - hardware firewall solutions.
> > > >> > >
> > > >> > > What do I tell him?  He is poised to make one of those
> > > classic PHB
> > > >> > > decisions.
> > > >> > >
> > > >> > > (currently on ISA 2K)
> > > >> > >
> > > >> > > --
> > > >> > >
> > > >> > > G. Waleed Kavalec
> > > >> > > -------------------------
> > > >> > > Why are we all in this handbasket  and where is it
> going so
> > > >> > > fast?
> > > >> > > ------------------------------------------------------
> > > >> > > List Archives: //www.freelists.org/archives/isalist/
> > > >> > ISA Server
> > > >> > > Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > > >> > ISA Server
> > > >> > > Articles and Tutorials:
> > > >> > http://www.isaserver.org/articles_tutorials/ ISA
> > > >> > > Server Blogs:
> > > >> > > http://blogs.isaserver.org/
> > > >> > ------------------------------------------------------
> > > >> > > Visit TechGenix.com for more information about our
> > other sites:
> > > >> > > http://www.techgenix.com
> > > >> > ------------------------------------------------------
> > > >> > > To unsubscribe visit
> > > >> > http://www.isaserver.org/pages/isalist.asp Report
> > > >> > > abuse to listadmin@xxxxxxxxxxxxx
> > > >> > >
> > > >> >
> > > >> > ------------------------------------------------------
> > > >> > List Archives: //www.freelists.org/archives/isalist/
> > > >> > ISA Server Newsletter:
> > > http://www.isaserver.org/pages/newsletter.asp
> > > >> > ISA Server Articles and Tutorials:
> > > >> > http://www.isaserver.org/articles_tutorials/
> > > >> > ISA Server Blogs: http://blogs.isaserver.org/
> > > >> > ------------------------------------------------------
> > > >> > Visit TechGenix.com for more information about our
> other sites:
> > > >> > http://www.techgenix.com
> > > >> > ------------------------------------------------------
> > > >> > To unsubscribe visit
> http://www.isaserver.org/pages/isalist.asp
> > > >> > Report abuse to listadmin@xxxxxxxxxxxxx
> > > >> >
> > > >> >
> > > >> >
> > > >> ------------------------------------------------------
> > > >> List Archives: //www.freelists.org/archives/isalist/
> > > >> ISA Server Newsletter:
> > > http://www.isaserver.org/pages/newsletter.asp
> > > >> ISA Server Articles and Tutorials:
> > > >> http://www.isaserver.org/articles_tutorials/
> > > >> ISA Server Blogs: http://blogs.isaserver.org/
> > > >> ------------------------------------------------------
> > > >> Visit TechGenix.com for more information about our other sites:
> > > >> http://www.techgenix.com
> > > >> ------------------------------------------------------
> > > >> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > >> Report abuse to listadmin@xxxxxxxxxxxxx
> > > >>
> > > >>
> > > >
> > > >
> > > > --
> > > >
> > > > G. Waleed Kavalec
> > > > -------------------------
> > > > Why are we all in this handbasket  and where is it going so 
> > > > fast?
> > > >
> > > > http://www.kavalec.com/thisisislam.swf
> > > > ------------------------------------------------------
> > > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server
> > > > Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server
> > > > Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/ ISA
> > > > Server Blogs:
> > > > http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > > Visit TechGenix.com for more information about our other sites:
> > > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > > To unsubscribe visit
> > > http://www.isaserver.org/pages/isalist.asp Report
> > > > abuse to listadmin@xxxxxxxxxxxxx
> > >
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > >
> > >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials: 
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials: 
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > 
> > All mail to and from this domain is GFI-scanned.
> > 
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials: 
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > 
> > 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx 


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: