RE: ISA and OWA
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 21 Dec 2005 09:57:32 -0600
Hi John,
Those page numbers are in the appendix that you can get as a download
from the www.syngress.com site.
RE: Windows viz *IX security. I bet if you let me install the *IX box,
its not going to be very secure, since I don't know anything about how
to secure it. Same would be true if you let some *IX mushroom install a
Windows box.
Its all about what you know -- I think its been established pretty
conclusively at this point that the level of security for either
platform is directly related to the awareness of the implementer.
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
**Who is John Galt?**
> -----Original Message-----
> From: John Ellis [mailto:johnellis@xxxxxxxxxxxxx]
> Sent: Wednesday, December 21, 2005 9:44 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA and OWA
>
> http://www.ISAserver.org
>
> That's was the reason for me emailing to the ISA forum to get
> some good
> NO replies. At least now I can go back and say it's a very bad
> idea.....I suppose almost as good as leaving you car unlocked and the
> keys on the seat and hoping the cars still there in the morning!
> Ive not seen a Checkpoint fire wall running on a Windoze box
> yet, always
> been Unix or flavour of as ive always considered the Unix
> boxes to be a
> lot more secure than Windoze.
>
> John
> PS Tom in you ISA 2004 book you mention SMURF attacks on page 887 and
> 1034 - 1035 but the book stops at page 1022!!!
>
> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
> Sent: 21 December 2005 15:32
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA and OWA
>
> http://www.ISAserver.org
>
> Hi John,
>
> You can install Check Point servers on Windows boxes. I
> suspect it's the
> most common deployment scenario in the world, or at least has been in
> the past.
>
> But you get the point. You wouldn't install a Web server on your Check
> Point server or host Web sites on your Check Point server, so
> why would
> you do it on the ISA firewall?
>
> At least we can't blame you for subverting network security,
> it was the
> manager who suggested it :))
>
> HTH,
> Tom
>
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://spaces.msn.com/members/drisa/
> Book: http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> **Who is John Galt?**
>
>
>
> > -----Original Message-----
> > From: John Ellis [mailto:johnellis@xxxxxxxxxxxxx]
> > Sent: Wednesday, December 21, 2005 7:03 AM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: ISA and OWA
> >
> > http://www.ISAserver.org
> >
> > Im aware that OWA doesn't run in Isa and that it runs from the
> > exchange box.
> > One of Directors in a meeting suggested 'can we run OWA on
> an ISA box'
>
> > I thought it was abad idea but needed some real world
> opinions as to
> > why not.
> > And no I would'nt run IIS on a Checkpoint box would'nt that
> be Apache?
> >
> > -----Original Message-----
> > From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx]
> > Sent: 21 December 2005 13:03
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: ISA and OWA
> >
> > http://www.ISAserver.org
> >
> > Ahh...
> >
> > How do I put this?
> >
> > ISA will host the FBA part of OWA but OWA doesn't run on ISA server
> > itself, it runs from your Exchange server.
> >
> > Andrew
> >
> >
> > -----Original Message-----
> > From: John Ellis [mailto:johnellis@xxxxxxxxxxxxx]
> > Sent: Wednesday, December 21, 2005 7:04 AM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: ISA and OWA
> >
> > http://www.ISAserver.org
> >
> > So are you saying its not a good idea to host OWA with IIS
> install on
> > an ISA server? Any specific reasons so I go back to the
> chaps at the
> > top who sign the cheques?
> > The ISA server isnt our main fire wall.
> >
> > -----Original Message-----
> > From: Steve Moffat [mailto:steve@xxxxxxxxxx]
> > Sent: 21 December 2005 11:52
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: ISA and OWA
> >
> > http://www.ISAserver.org
> >
> > ISA's a firewall. Not a webserver.
> >
> > S
> >
> > -----Original Message-----
> > From: John Ellis [mailto:johnellis@xxxxxxxxxxxxx]
> > Sent: Wednesday, December 21, 2005 7:15 AM
> > To: ISA Mailing List
> > Subject: [isalist] RE: ISA and OWA
> >
> > http://www.ISAserver.org
> >
> > The reason for no is?
> >
> > -----Original Message-----
> > From: Steve Moffat [mailto:steve@xxxxxxxxxx]
> > Sent: 21 December 2005 10:59
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: ISA and OWA
> >
> > http://www.ISAserver.org
> >
> > No
> >
> > S
> >
> > -----Original Message-----
> > From: John Ellis [mailto:johnellis@xxxxxxxxxxxxx]
> > Sent: Wednesday, December 21, 2005 6:54 AM
> > To: ISA Mailing List
> > Subject: [isalist] ISA and OWA
> >
> > http://www.ISAserver.org
> >
> > Hi All.
> > Ive been lurking in the background for a bit. So heres my question
> >
> > Is it possible to run OWA and ISA on the same box? If so is
> it a good
> > move?
> >
> > Thanks
> >
> > john
> >
> > -------------------------------------------------------------------
> > John Ellis Tel (0151) 666 3208
> > Senior IT Officer Fax (0151) 666 3049
> > Wirral IT Services
> > johnellis@xxxxxxxxxxxxx
> > -------------------------------------------------------------------
> >
> >
> **********************************************************************
> > This email and any files transmitted with it are confidential and
> > intended solely for the use of the individual or entity to
> whom they
> > are addressed. If you have received this email in error
> please notify
> > the system manager.
> >
> > This footnote also confirms that this email message has
> been swept by
> > MIMEsweeper for the presence of computer viruses.
> >
> > www.clearswift.com
> >
> **********************************************************************
> >
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > isalist@xxxxxxxxxx To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > johnellis@xxxxxxxxxxxxx To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > isalist@xxxxxxxxxx To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > johnellis@xxxxxxxxxxxxx To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > andrew@xxxxxxxxxxxxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > johnellis@xxxxxxxxxxxxx To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
>
> > tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> johnellis@xxxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
Other related posts:
