RE: ISA2004 newbie here. ISA2004 as a router?

  • From: "Ball, Dan" <DBall@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 27 Sep 2005 13:38:46 -0400

That isn't really covered because it isn't really supported.  I've been
through the book many times myself, and the information you are looking
for is not in there.  It can be done, but it doesn't work very good.  I
worked on it for a couple of months and never got it working smooth
enough to make it usable.  There is an issue with routing that I
couldn't seem to get around.  For example, it would take an inbound
connection to our webserver, and respond to it using a different NIC.

 

If you really want more information on how to do it, I can try to walk
you through it, but I'd highly recommend doing it a different way.

 

If you're going with multiple ISPs, then you really have only a few
"practical" options:

1.      Buy a multi-port router and put it in front of your ISA server.
(I had a cheap one here at one time that worked "okay", but we didn't
really trust it for production use.)
2.      Purchase a third-party program that allows you to use multiple
ISPs, such as Rain Connect (not the only one though).
3.      Upgrade to the Enterprise Edition of the ISA server, and plug
each ISP connection into a separate ISA server.

 

 

________________________________

From: subscriptions [mailto:subscriptions@xxxxxxxxxxxxxxxx] 
Sent: Tuesday, September 27, 2005 1:16 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA2004 newbie here. ISA2004 as a router?

 

http://www.ISAserver.org

Bought and read through most of the good Dr.'s book but didn't find
explicit examples of multiple public IPs coming in to the ISA server and
then routed to specific subnets.   Admittedly I may have missed the
details.  If so would one of you more knowledgeable folks point me to
the chapter that holds the information?   Thanks

 

________________________________

From: Geldrop, Paul van [mailto:paul.van.geldrop@xxxxxxxxxxxxx] 
Sent: Tuesday, September 27, 2005 9:09 AM
To: [ISAserver.org Discussion List]
Subject: RE: [isalist] RE: ISA2004 newbie here. ISA2004 as a router?

 

I'm sure Rainfinity will be very very pleased with this! Imagine the
rise in sales! On every multihomed ISA server, Rainconnect/Wall! Woohoo!

Can I now resort to just recommending singlehomed machines ? With a big
Open Port button in the interface too.. 

 

Really, Andrew.. 

 

As for the question put to us: ISA 2004 will let you set up port/routing
rules etc for separate networks. Define all the separate networks on
ISA, make your rules and you should be getting a great start! Might I
recommend Dr Tom's excellent guides and books to get started on ISA ?
Why yes, I may!

 

Regards,

 

Paul.

 

________________________________

From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Tue 9/27/2005 3:50 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA2004 newbie here. ISA2004 as a router?

http://www.ISAserver.org

Mea culpa. My bad =%-P

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



> -----Original Message-----
> From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
> Sent: Tuesday, September 27, 2005 8:48 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA2004 newbie here. ISA2004 as a router?
>
> http://www.ISAserver.org
>
> What do you know - Andy has spoketh, dammit!
> :-)
>
> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
> Sent: Tuesday, September 27, 2005 6:13 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA2004 newbie here. ISA2004 as a router?
>
> http://www.ISAserver.org
>
> RainConnect and/or RainWall is NOT NOT NOT required for multihomed ISA
> firewalls.
> 
> Thomas W Shinder, M.D.
> Site: www.isaserver.org <http://www.isaserver.org/>
> Blog: http://spaces.msn.com/members/drisa/
> Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
> MVP -- ISA Firewalls
>
> 
>
>
> ________________________________
>
>       From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx]
>       Sent: Tuesday, September 27, 2005 7:04 AM
>       To: [ISAserver.org Discussion List]
>       Subject: [isalist] RE: ISA2004 newbie here. ISA2004 as a router?
>      
>      
>       http://www.ISAserver.org
>      
>
>       You need another product for ISA Server if you plan to set it up
> to do multi home called RainConnect.
>
>       
>
>       Andrew
>
>       
>
>       
>
>      
> ________________________________
>
>
>       From: subscriptions [mailto:subscriptions@xxxxxxxxxxxxxxxx]
>       Sent: Monday, September 26, 2005 5:22 PM
>       To: [ISAserver.org Discussion List]
>       Subject: [isalist] ISA2004 newbie here. ISA2004 as a router?
>
>       
>
>       http://www.ISAserver.org
>
>       I was hoping I could replace several router/firewalls with ISA
> 2004 but after scanning lot's of documentation I'm disillusioned.   My
> ISA 2004 server has 8 NICs installed and I have 5 public IPs
> I wanted to
> route with ISA2004.   For example I want to connect the core router to
> the ISA box then distribute to separate subnets;  I have 5 public IPs
> and currently use NetGear FVL328's for firewall and port distribution.
> I waned to use ISA2004 for the same function.   Is this possible? 
>
>       Thanks in advance.

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
dball@xxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 

Other related posts: