Re: Use two NICs? Convince me.
- From: "Anthony Michaud" <anthonym@xxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 1 Sep 2005 12:53:13 +1000
My point entirely.
> -----Original Message-----
> From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
> Sent: Wednesday, 31 August 2005 23:56
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Re: Use two NICs? Convince me.
>
> http://www.ISAserver.org
>
> This is ridiculous - just because you can use a drill as a
> hammer is justification beat your drill to death?
> Just because it "appears to work" in no way proves the theory
> that "it works".
> The code was *not* written to operate this way and any
> problems created by this configuration (noticed or not) are
> your own to handle.
>
> -----Original Message-----
> From: Anthony Michaud [mailto:anthonym@xxxxxxxxxxxxxx]
> Sent: Tuesday, August 30, 2005 11:42 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Re: Use two NICs? Convince me.
>
> http://www.ISAserver.org
>
> Just because its not supported, doesn't mean that it wont
> work. You're being told that "this is the way we designed it
> to work, if you try it any other way it might work, but don't
> come to us for support"
>
> And now for a whacky analogy - use a cordless drill as a
> hammer, and it still might work as a cordless drill. Then
> when it doesn't work, try taking it back for replacement
> under warranty.
>
> Anthony.
>
> > -----Original Message-----
> > From: Alexandre Gauthier [mailto:gauthiera@xxxxxxxxxxxxxxxxx]
> > Sent: Tuesday, 30 August 2005 04:21
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] Re: Use two NICs? Convince me.
> >
> > http://www.ISAserver.org
> >
> > Yes. Not supported -- but it works...
> >
> > I'd like to understand why, if it is not supposed to work
> at all, it
> > works?
> >
> > Please someone enlighten me. It does works, I have a fine example
> > sitting over there.
> >
> > So far my client would not be convinced, the exchange would go like
> > this:
> >
> > Me: "Well, it is not supposed to be that way."
> > Him: "... But it works, right?"
> > Me: "Well... yeah, but it says the feature is not available."
> > Him: "Well, it works, and has worked for the past two years."
> > Me: "..."
> >
> > Hardly convincing...
> >
> > -----Message d'origine-----
> > De : JimmyJoeBobAlooba [mailto:jim@xxxxxxxxxxxx] Envoyé :
> 29 août 2005
> > 14:16 À : [ISAserver.org Discussion List] Objet :
> > [isalist] Re: Use two NICs? Convince me.
> >
> > http://www.ISAserver.org
> >
> > NOT SUPPORTED
> >
> > I don't think I can be any more clear...
> >
> > ----- Original Message -----
> > From: "Alexandre Gauthier" <gauthiera@xxxxxxxxxxxxxxxxx>
> > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> > Sent: Monday, August 29, 2005 11:08 AM
> > Subject: [isalist] Re: Use two NICs? Convince me.
> >
> >
> > http://www.ISAserver.org
> >
> > No, not really. I wish they were though.
> >
> > Quote:
> >
> > The following features are not available when ISA Server 2004 is
> > configured in single network adapter mode:
> > * IP packet filtering
> > * Multi-network firewall policy
> > * Application-level filtering
> > * Virtual private networking
> > * Server publishing
> > * Firewall clients
> >
> >
> > However, Firewall clients and IP packet filter seem to indeed be
> > working.
> > And they have been working for years. It's not like it was set up
> > yesterday and I am wondering why I doesn't work...
> >
> > -----Message d'origine-----
> > De : JimmyJoeBobAlooba [mailto:jim@xxxxxxxxxxxx] Envoyé :
> 29 août 2005
> > 14:03 À : [ISAserver.org Discussion List] Objet : [isalist] Re: Use
> > two NICs? Convince me.
> >
> > http://www.ISAserver.org
> >
> > KBs are your friend:
> > http://support.microsoft.com/?id=838364
> > http://support.microsoft.com/?id=840471
> >
> > ----- Original Message -----
> > From: "Alexandre Gauthier" <gauthiera@xxxxxxxxxxxxxxxxx>
> > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> > Sent: Monday, August 29, 2005 10:56 AM
> > Subject: [isalist] Use two NICs? Convince me.
> >
> >
> > http://www.ISAserver.org
> >
> > Greetings,
> >
> >
> >
> > Would anyone be so kind as to attempt to convince me that I
> *need* two
> > network cards in my ISA 2004 firewall over here?
> >
> >
> >
> > (now please note that I did not design this network.)
> >
> >
> >
> > The configuration is made like this. The servers and the local LAN
> > share one subnet (192.168.10.0/24) and are all behind a netscreen
> > firewall. Somewhere among the servers is a single nic ISA
> 2004 server
> > with a gateway (the netscreen). The client workstations use the
> > Firewall client to connect to the internet, for they have
> no gateway,
> > and even if they did, the netscreen is configure to only NAT out
> > specific IPs.
> >
> >
> >
> > So far, it works. With a few hitches, but it works. We can add
> > filtering rules for the client workstations, and restrict what we
> > want.
> >
> >
> >
> > Why should I add another card and redesign part of the
> network that is
> > already working?
> >
> >
> >
> > (I honestly did not do such a thing. I'd redesign it, but
> my client is
> > not necessarily happy about this, and I need arguments.)
> >
> >
> >
> > --
> >
> > Alexandre Gauthier
> >
> > Analyste Réseau/Network Analyst
> >
> > Québec Loisirs
> >
> >
> >
> >
> >
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > jim@xxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > gauthiera@xxxxxxxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > jim@xxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > gauthiera@xxxxxxxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > anthonym@xxxxxxxxxxxxxx To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: jim@xxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> All mail to and from this domain is GFI-scanned.
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: anthonym@xxxxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
Other related posts:
