Hi David, Check out my ISP config over at www.isaserver.org/shinder HTH, Tom Thomas W Shinder www.isaserver.org/shinder <http://www.isaserver.org/shinder> ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp <http://tinyurl.com/1llp> -----Original Message----- From: David Liles [mailto:dave@xxxxxxxxxxxxxxxxxxx] Sent: Thursday, September 18, 2003 6:32 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA & Web/FTP Server http://www.ISAserver.org Not really knowing all of the in's and out's of ISA we were thinking that if we installed it on our web server it would allow us to help keep it secure. I'm thinking we need to configure an actual DMZ for this box and only allow ports 80, 443 and 21 in order to support what we are wanting to do. We currently have SBS2000 that is connected to the internet and then from there a private NIC connects to a switch that all of our workstations are connected to.... -----Original Message----- From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] Sent: Wednesday, September 17, 2003 11:19 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA & Web/FTP Server http://www.ISAserver.org 1. First rule of security: Do not install anything on the firewall unless absolutely necessary. 2. If you run the websites and FTP on ISA, it will not be in a DMZ, rather on ISA. 3. You could configure ISA with 3 NICs, the third creating the DMZ, but that requires subnetting your public IP addresses you have been assigned by your ISP. (Unless you use NAT in the DMZ.) Can you explain your configuration a bit? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -----Original Message----- From: David Liles [mailto:dave@xxxxxxxxxxxxxxxxxxx] Sent: Wednesday, September 17, 2003 9:12 PM To: [ISAserver.org Discussion List] Subject: [isalist] ISA & Web/FTP Server http://www.ISAserver.org We just configured a new server that will be hosting multiple web and FTP sites. As a result it will need to be in a "DMZ". We were thinking of installing ISA on it and configuring it appropriately. Is there an unique configuration issues we need to be aware of before we proceed? Thanks ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: johnlist@xxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: dave@xxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')