Re: ISA 2000 between existing firewalls

  • From: "Periyasamy, Raj" <Raj.Periyasamy@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 5 Aug 2004 15:07:24 -0400

Hi Tom,
The articles are really great, very simple and very detailed.
When I configure a Destination Set to publish OWA, can I use the same
Destination set to Publish RPC over HTTP as well just by adding the
/rpc/* path to the destination set ? The Front-end server for OWA will
be the RPC proxy server in my scenario. So, can I publish OWA and RPC
over HTTP with a single Publishing rule ?

Thanks


Regards,
Raj



-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Thursday, August 05, 2004 9:48 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA 2000 between existing firewalls

http://www.ISAserver.org

Hi Raj,

The ISA/Exchange kit for ISA 2000 firewalls can be downloaded from the
www.isaserver.org Web site. Do a search for "Deployment Kit" and you'll
find it there.

HTH,

Tom
www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



-----Original Message-----
From: Periyasamy, Raj [mailto:Raj.Periyasamy@xxxxxxxxxxxx] 
Sent: Thursday, August 05, 2004 8:39 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA 2000 between existing firewalls


http://www.ISAserver.org

Never mind Tom, 
I should have known its your book. I will buy this one.

Thanks again. 


Regards,
Raj 


-----Original Message-----
From: Periyasamy, Raj 
Sent: Thursday, August 05, 2004 9:12 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA 2000 between existing firewalls

http://www.ISAserver.org

Tom and Jim,
Thank you very much for your replies. This definitely helps me. Is ISA
2000/Exchange Kit downloadable from Microsoft site? Is it part of the
Feature Pack 1 ?

Thanks. 


Regards,
Raj



-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Wednesday, August 04, 2004 6:06 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA 2000 between existing firewalls

http://www.ISAserver.org

Hey guys,

In this OWA and RPC/HTTP scenario, delegation of basic auth should work
fine, as long as SSL to SSL bridging is used. So, unless the users are
fans of double authentication prompts, this should work.


Tom
www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] 
Sent: Wednesday, August 04, 2004 3:44 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA 2000 between existing firewalls


http://www.ISAserver.org

The huge, monstrous, fearfully nasty stumbling block you have to
overcome is whether or not you expect ISA to authenticate those
requests.
If not, then you're golden.
If you do, then you have to ask yourself if you're willing to fire a
shotgun into the face of your internal "firewall" to allow AD-membership
traffic through.

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!


On Wed, 4 Aug 2004 13:55:23 -0400
 "Periyasamy, Raj" <Raj.Periyasamy@xxxxxxxxxxxx> wrote:
http://www.ISAserver.org

Hello List,
We are in process of designing our OWA and RPC over HTTP deployment. We
would like to use ISA server in the DMZ as reverse proxy. However, we
currently have a DMZ with two third party firewalls, one external
firewall and one internal firewall. We want to integrate ISA 2000 server
between these two firewalls, and authenticate users to the front-end
Exchange 2003 server that will be located behind the internal firewall
in the corporate network. Microsoft documents indicate ISA 2000 server
needs to be installed in firewall mode with two network interface cards
for this scenario. This is not suiting our current network, since we
want the ISA server to be located in the DMZ between the existing
firewalls. I was reading an article by Tom Shinder about "ISA Server
2000 Application Layer Filtering Web Proxy in the Perimeter Network".
This document is very brief, I think I need buy the Tom Shinder book for
the complete document (..which I will). However, could some one please
let me know, If the ISA server is located in the DMZ between the
existing firewalls as an application layer filtering web proxy, can it
provide the full functionality for OWA and RPC over HTTP publishing ?

Thank you in advance.

Regards
Raj



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
raj.periyasamy@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
raj.periyasamy@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
raj.periyasamy@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist




Other related posts: