Re: New Configuration

  • From: "Mark Strangways" <strangconst@xxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 12 Nov 2001 11:10:20 -0500

Yes, That's true. What I have done (even with an AD integrated ISA machine)
is to terminal service into the ISA machine, then from that machine launch
another TS session to get to other machines behind the firewall.
Not sure if this is a great way to do it or not, but it can work on a AD
network even if the ISA is not part of that network.

regards,
Mark
----- Original Message -----
From: "Christian Villeneuve" <Christian.Villeneuve@xxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, November 12, 2001 10:53 AM
Subject: [isalist] Re: New Configuration


http://www.ISAserver.org


Part of the reason why I am asking about Active Directory, is because I
have terminal Services running on another Server and I was going to set
up a VPN on the ISA server.

The part I am not sure about is authentication.  If I don't have Active
Directory, I think I would have to setup any of the users on the ISA
server itself to allow them access.

Is this correct?


-----Original Message-----
From: Mark Strangways [mailto:strangconst@xxxxxxxx]
Sent: Monday, November 12, 2001 10:37 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: New Configuration

http://www.ISAserver.org


Some say "leave it as a member", due to AD security issues. If the ISA
where
hacked then the hacker would have access to ad.
    You could ofcourse have a separate AD domain for your ISA server,
but
that's a bunch of overhead.

    Why do you want to make it AD , do you plan on an enterprise array
at
some point ?
    I think I prefer to have it standalone myself, for what that's
worth.

regards,
Mark
----- Original Message -----
From: "Christian Villeneuve" <Christian.Villeneuve@xxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, November 12, 2001 10:25 AM
Subject: [isalist] New Configuration


http://www.ISAserver.org


Hello everyone,

I am configuring a new Server to run ISA only instead of having it on my
Exchange and IIS server.
I still have to put a second NIC on the Server, but I was wondering if
anyone recommends if I should install Active Directory, or leave it as a
member Server.

What would the recommendations be?

Thanks,

Christian

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
strangconst@xxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
Christian.Villeneuve@xxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
strangconst@xxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')




Other related posts: