[isalist] Re: Putting ISA2k4 infornt of SBS
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Wed, 20 Sep 2006 07:36:17 -0500
http://www.ISAserver.org
-------------------------------------------------------
Until the hoster goes bankrupt and takes your Web site to the court
auction ;)
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Glenn P. JOHNSTON
> Sent: Wednesday, September 20, 2006 7:24 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Putting ISA2k4 infornt of SBS
>
> A client has gone through this very costing exercise, of do
> we 'have someone
> do it for us, or do we do it ourselves', only last week.
>
> They made a policy decision right at the start, which I
> supported, that
> running it on the SBS server, which also had there e-mail,
> file shares,
> several client related SQL databases etc was probably not the smartest
> approach, and so a second server was dictated.
>
> However, no mater which way they cut it, they could not even
> get close to
> the $ figure the hosting specialist companies charge for
> hosting a web site.
>
>
> Add on top of that the extra bits that the hosting specialist
> have, and
> through in a either zero or very few dollars, like multiple
> independent
> internet links, redundant servers, thick internet bandwidth,
> etc and it
> quickly become a no brainier.
>
> They also got a backup SMTP server & a 100Gbyte secure file
> store area,
> thrown in with the web hosting for the grand total of
> $au30/month, both are
> a very nice redundancy feature, that they were not initially
> looking for,
> but was a very nice deal sweetener.
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> Behalf Of Amy Babinchak
> Sent: Wednesday, 20 September 2006 21:52
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Putting ISA2k4 infornt of SBS
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> SBS is just a collection of servers residing on one box. It
> doesn't freak
> out any more than any other box. A DMZ is possible and you
> can install as
> many NICs as you wish into the SBS box. (see the blog)
> However, the connect
> to the internet wizard is only aware of 2 NICs. If you want
> to use that
> wizard and you have more than 2 NICs installed disable the
> additional NICs,
> run the wizard and then enable them. Your suggestion of putting an ISA
> server in front of the SBS box is a good one but keep in mind
> that you'll
> have to purchase the licenses for it.
> The SBS license doesn't allow you to split off anything.
> Because of the cost
> of doing this most small businesses don't host their own website.
> Hosting is so inexpensive these days it's hardly worth
> hosting your own
> site.
>
> Amy Babinchak
>
> Harbor Computer Services
> (248) 546-6056 office
> (248) 890-1794 mobile
>
> http://isainsbs.blogspot.com
> http://keepitsecure.blogspot.com
> http://www.harborcomputerservices.net
>
>
>
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Steve diMascio
> Sent: Wednesday, September 20, 2006 6:14 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Putting ISA2k4 infornt of SBS
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> I've been asked to put a webserver online on an SBS2k3 (premium)
> installation. Obviously id prefer this webserver to be in a
> dmz, but the
> topology for sbs seems to not like this concept? 3 nics in sbs =
> wizard-killer? Or sbs-killer? As the company is growing in size (and
> surface), it seems like now's a good time to review there
> attack surface
> also.
>
> What I'm looking at is placing a front-end isa2k4 infront of
> sbs2k3 (with
> isa2k4), and using the front-end isa to direct the webserver
> traffic to a
> perimeter network, and the rest to the sbs box. I've had a
> look round and
> cant find many articles on this setup. I did read an article
> on isainsbs
> written by Amy, though there wasn't any info on how this
> scenario may affect
> the sbs box or its wizards.
>
> Anyway my reasoning for going this route is to get a couple
> of extra servers
> in there to reduce the one time cost of ditching sbs and
> separating the
> severs out, also having a dedicated (uncastrated isa)
> firewall will help me
> sleep better at night. The company has a server that's
> suitably specd to
> carry out the job, so the costs going to be isa (single
> proc). And they can
> live with that.
>
> So is this a viable solution, can sbs (premium) live behind a
> dedicated isa
> box without freaking out ? Or is there a better solution for them.
>
> Steve
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
