This even goes beyond that, he's asking to break some fundamentals rules of routing network traffic....... he just needs to use smaller subnets off of the hardware firewall and establish a new subnet for the ISA that way. -----Original Message----- From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] Sent: Tuesday, June 29, 2004 11:19 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA in Passive Mode http://www.ISAserver.org Put your hardware firewall into standard mode, assign one of the public IP addresses to ISA, and go. Even better, 86 the hardware file and use ISA as it is intended to be used, a full fledged firewall. John Tolmachoff Engineer/Consultant/Owner eServices For You -----Original Message----- From: Philip Clark [mailto:pclark@xxxxxxxxxxxxx] Sent: Tuesday, June 29, 2004 9:09 AM To: [ISAserver.org Discussion List] Subject: [isalist] ISA in Passive Mode http://www.ISAserver.org All, I am theorizing on a config for a new Exchange 2003 rollout that is going to happen soon. I would like to publish OWA and SMTP through ISA and enjoy some of the benefits of doing so, but I am curious about routing. I have an appliance firewall at the perimeter that is running NAT and there is no DMZ, so when I setup the ISA server, I will have to put a private address on the external side of the ISA server and make it public using a static NAT mapping on the firewall appliance. My question is, how will I have proper routing through the ISA server without creating a new subnet, or is there a way to put ISA in passive mode? Thanks in advance Philip ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: johnlist@xxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tradtke@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist