[isalist] Re: Idiot ISA Comment of the Year
- From: "Greg Mulholland" <gmulholland@xxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Fri, 18 Aug 2006 10:07:57 +1000
Oh i fight but the size of the fight in this dog is also somewhat reflective of
the $$ paid to be involved in such projects :)
Greg
----- Original Message -----
From: Thomas W Shinder
To: isalist@xxxxxxxxxxxxx
Sent: Friday, August 18, 2006 10:08 AM
Subject: [isalist] Re: Idiot ISA Comment of the Year
Evil can only win when good men fail to fight for right.
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
----------------------------------------------------------------------------
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Greg Mulholland
Sent: Thursday, August 17, 2006 6:53 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Idiot ISA Comment of the Year
I gave up arguing..if it makes them feel more comfortable then, good for
them!
Greg
----- Original Message -----
From: Thomas W Shinder
To: isalist@xxxxxxxxxxxxx
Sent: Friday, August 18, 2006 9:59 AM
Subject: [isalist] Idiot ISA Comment of the Year
"Although my preference is to install ISA Server 2004 in a workgroup,
especially when it's protecting the edge of the network, if you need domain
membership for ISA Server 2004, consider installing it in a separate forest.
For example, if you are running ISA Server 2004 in a DMZ, install it in a
separate forest and then create a one-way trust between your internal forest
and your ISA Server 2004 forest."
http://www.certcities.com/editorial/columns/story.asp?EditorialsID=207
I hate when these guys stick their collective thumbs up their a**es with
this kind of idiot advice. Just what type of "protection" to they think they're
going to stick by putting a PIX in front of the ISA firewall in this scenario?
Like a friggin bullet fired in in certain establishments, this misconception
continues to ricochet throughout the clueless without burying itself in the
right target. ACK.
If you don't understand why this is one of the most moronic statements
you can make about the ISA firewall, stay tuned to my blog for "Attack of
Truth" :)
And to think guys like this are poisoning the minds of poor fledgling ISA
admins who are trying to get their MCP in ISA :(
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
Other related posts:
