RE: RES: Off topic: SBS Liscensing
- From: Amy Babinchak <amy@xxxxxxxxxxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 02 Apr 2003 09:24:35 -0500
http://www.ISAserver.org
Maybe this is blasphemy but what about using a nice little Sonicwall
firewall on the perimeter? It's not as configurable or full featured but
it would add the additional layer you are looking for and it would be a
lot less expensive. (please don't throw me off this list, I'm learning a
lot here)
Amy
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Wednesday, April 02, 2003 8:47 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: RES: Off topic: SBS Liscensing
http://www.ISAserver.org
Hi Amy,
While you can make ISA Server work on an "all purpose" server, I could
never justify such a configuration from a security point of view.
Putting an Exchange Server, SQL Server, FAX server, etc. on the firewall
is a bad security proposition, no matter how you cut it. There are also
other drawbacks, such as how logging is affected by publishing services
located on the ISA Server itself. The ISA Server is a firewall and
perimeter defensive device and should be treated like one. I wouldn't
install all these extraneous services on a PIX or CP/Nokia and I
wouldn't do it on an ISA Server.
What I'm trying to determine is the cost effectiveness of using two
Win2k servers and a separate installation of ISA Server. From what I can
tell so far, you can still profit from getting SBS to put on the
internal network to use as an Exchange, SQL, FAX, etc. server and get
separate licenses for Win2k and ISA Server to run on the perimeter. The
cost would be comparable to black box solutions, but you can easily
configure and integrate with the existing Microsoft network, and you
don't pay extra for VPN or "connectors" to connect to the user database.
Thanks!
Tom
Thomas W Shinder
<http://www.isaserver.org/shinder> www.isaserver.org/shinder
ISA Server and Beyond: <http://tinyurl.com/1jq1>
http://tinyurl.com/1jq1
Configuring ISA Server: <http://tinyurl.com/1llp>
http://tinyurl.com/1llp
-----Original Message-----
From: Amy Babinchak [mailto:amy@xxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Tuesday, April 01, 2003 10:59 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: RES: Off topic: SBS Liscensing
http://www.ISAserver.org
Tom,
Why run ISA on another server? I've installed lots of SBS servers for my
clients and it runs beautifully. When it looks like performance is
slipping or drive space is an issue I move non-SBS apps onto a separate
server and leave SBS to run as it was designed. It's also cheaper for my
clients this way. Security is an issue but ISA server takes care of all
the SBS services pretty well out of the box and I can tweak it from
there.
I've got SBS servers running on the network with separate fax servers,
NAS servers, Citrix servers, Integrated messaging servers, SUS servers,
proprietary app servers, unix servers.it gets along very well with other
servers on the network. I wouldn't change a thing about SBS 2000.
Amy Babinchak
Technology Consultant
Harbor Computer Services
Free Trial Software: Monitor & Manage Web Use with SurfControl Web
Filter for MS ISA Server http://www.surfcontrol.com/go/zisadl1
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
amy@xxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
Free Trial Software: Monitor & Manage Web Use with SurfControl Web Filter for
MS ISA Server http://www.surfcontrol.com/go/zisadl1
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
isaserver@xxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
