RE: ISA and subnets...

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 9 Sep 2003 19:57:41 -0500

Hi Ryan,

Firewall policy isn't applied to the internal interfaces of the ISA
firewalls, so you probably would not benefit from ISA's method of access
control if you need to firewall internal network segments from one
another.

HTH,
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 



-----Original Message-----
From: Ryan [mailto:rpriest@xxxxxxxxx] 
Sent: Tuesday, September 09, 2003 11:08 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] ISA and subnets...


http://www.ISAserver.org


I am just getting started looking into using ISA as a potential FW
solution. Someone mentioned to me that you cannot have multiple subnets
protected from each other on one or two (load balanced) ISA servers --
you'd have to have a separate ISA server for each subnet. Is this true?
I
would like to implement a pair of load balanced ISA servers, but as I
have
4 subnets that require varying degrees of segregation, I would need 4-8
ISA servers (1-2 per subnet). Will ISA not handle multiple subnets - 1
for
each NIC? I have read some MS literature that mentions multi-homming for
a
DMZ, but does not go beyond 2 subnets. Does anyone have any experience
with using 1 ISA server with 3, 4 or more subnets?
Any advice is appreciated, thanks.
-Ryan

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: