RE: ISA Publish Scenario

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sat, 13 Nov 2004 07:36:59 -0800

Hiya Joseph,

Watch your logs while you test; one of the best things added to ISA 2004 was 
the ability to "watch the traffic" without having to fire up your fav packet 
grabber.


-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 
-----Original Message-----
From: josephk [mailto:josephk@xxxxxxxxxxxxxxxxx] 
Sent: Friday, November 12, 2004 22:35
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA Publish Scenario

http://www.ISAserver.org

Hi Thomas,

My sites are still off line. :(  I decided to move right into ISA 2004 ith the 
good, bad and the ugly.  As you know I'm running a back to back setup.  
EXTERNAL ISA
..HONEY POT DMZ
....SNORT
INTERNAL ISA
..DMZ (PUBLIC DNS, PUBLIC WEB, SMTP FORWARDER) ip 172 type
..PERIMETER (NOTHING YET) ip 198 type
..INTERNAL(AD, EXCHANGE, SQL) ip 10 type

My Internal DNS forwards out to the 172 type zone in the DMZ for what ever 
reason.  It seems that my DNS server on the 172 segment isn't resolving 
correctly any tips on getting this to publish? (I think that I have all rules 
and server publishing correct.  Maybe I'm missing something by passing threw to 
the back end ISA  box. The front end dosen't seem to know that the DNS server 
exists on the 172 segment.  

I thought I read something about turning off name resolution on rules out on MS 
sites if this is an issue.
Using the weblist web posting is the pits.  

Thank you,
Joseph
cismic@xxxxxxx until I get my servers back online 
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.



Other related posts: