RE: ISA behind PIX

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sun, 5 Dec 2004 07:45:46 -0600

Hi Mohd,

I have to strongly disagree with you here. Do NOT install in cache-mode,
install in integrated mode. If it is slow, its because the ISA firewall
was *misconfigured* or there is a problem with the config on the PIX
packet filtering device, *not* with the ISA firewall.

HTH, 


Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: Mohd Ashfaq [mailto:mashfaq@xxxxxxxxxxx] 
Sent: Sunday, December 05, 2004 1:08 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA behind PIX

http://www.ISAserver.org

if you have 3 interface on pix make one OUT  one DMZ and INTERNAL put
your
ISA SERVER in DMZ with one NIC  IN cash mode are you can use two NIC
with
diffrent subnet like one nic10.80.0.5 other 10.81.0.1 both connected to
DMZ
switch and use window routeing ( add route cammand) by installing ISA in
integrad mode but it will be slow because any request it will filter by
PIX
and then ISA so i recommend to install in cach mode.
----- Original Message ----- 
From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Saturday, December 04, 2004 4:51 PM
Subject: [isalist] RE: ISA behind PIX


http://www.ISAserver.org

Hi Ade,

Forward all incoming traffic to the external interface of the ISA
firewall, and allow all traffic from the external interface of the ISA
firewall out through the PIX packet filter.

HTH,


Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: Sastrawan [mailto:bias@xxxxxxxxxxxxxxx]
Sent: Friday, December 03, 2004 8:17 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] ISA behind PIX

http://www.ISAserver.org

Could some one help me please. I have Cisco PIX 506, and I would like to
put
my ISA 2000 behind this PIX (for more secure). my PIX address is
10.80.0.11.
and my ISA address is 10.80.0.5 and 10.80.0.12

regards
Ade




------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mashfaq@xxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx




Other related posts: