Thank's for all. I have finall questions :) Q.1: If I use split-dns solution - isa server can be a member of local domain domain1.com (head.domain1.com)..? _____ From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Wednesday, October 01, 2003 7:21 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: migrating from nothing to ISA http://www.ISAserver.org Hi Miroslaw, External hosts have no knowledge, and they don't care, about your internal network naming scheme, so you can give the firewall any name you want on the internal network. I would recommend a split DNS infrastructure if you wish to use the same domain name for resources that will be accessed by hosts on the internal network as well as hosts on the external network. This is primarily a DNS networking issue, not an ISA Server firewall issue, but there is information over at www.isaserver.org/shinder on split DNS. HTH, Tom Thomas W Shinder <http://www.isaserver.org/shinder> www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: <http://tinyurl.com/1llp> http://tinyurl.com/1llp -----Original Message----- From: "Miroslaw Rusin" [mailto:miroslaw.rusin@xxxxxxxxxxxxx] Sent: Wednesday, October 01, 2003 12:18 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: migrating from nothing to ISA Importance: High http://www.ISAserver.org WHAT TO DO - short and clear 1) Install MS Windows 2000 server on internal network (IP=192.168.42.2) with AD (???.domain1.com) 2) Install ISA server on MS Windows 2000 server (ext.IP=100.100.100.100, int.IP=192.168.42.1) and add this machine to domain1.com Q.1) Which of them should be named head.domain1.com for properly serving DNS answers for external questions about registered public domain1.com, domain2.com, domain3.com..? Remember, that public information about all registered domains about aDNS are: IP=100.100.100.100, name=head.domain1.com Q.2) Is possible, that domain1.com is public and private domain in this situation..? Any advice..? _____ From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Wednesday, October 01, 2003 6:58 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: migrating from nothing to ISA http://www.ISAserver.org Hi Miroslaw, The problem is that you can't define what it is you want to accomplish. Without that information, its hard to determine if there is information for free that will give you what you need. Also, firewall configuration does assume a basic familiarity with the device. Are you trying to Web Publish? Server Publish? Is this a DNS issue? Inbound access? Outbound Access? A split DNS issue? See what I mean? Thanks! Tom Thomas W Shinder <http://www.isaserver.org/shinder> www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: <http://tinyurl.com/1llp> http://tinyurl.com/1llp -----Original Message----- From: Miroslaw Rusin [mailto:miroslaw.rusin@xxxxxxxxxxxxx] Sent: Tuesday, September 30, 2003 11:48 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: migrating from nothing to ISA Importance: High http://www.ISAserver.org Thank you - you are the ONE who answered me! For me the most important question to situation is... should I give a name for machines: - ISA server => head.domain1.com (EXT/INT interface) (100.100.100.100/192.168.42.1) - AD server behind ISA server => sth.domain1.com (INT interface) (192.168.42.2) or - ISA server = isa.domain1.com (EXT/INT interface) (100.100.100.100/192.168.42.1) - AD/Exchange server behind ISA server = head.domain1.com (INT interface) (192.168.42.2) I ask about it because I think, that the first is right - is that correct..? I want that public questions about registered domain1.com, domain2.com, domain3 was answered/resolved by DNS answer by machine named head.domain1.com on IP=100.100.100.100 - is it possible in this situation..? I need domain1.com should be public and private domain. By the way - are you ablolutelly shure that books from the Martha Stewart of the ISA world and Dr. Tom Shinder can give me answers for all my questions..? I'm not shure - I was read all articles from www.isaserwer.org and there was only few fragments. I really suprised, that there is no completly step-by-step cook-book for installing/implementing ISA (ext/int) & AD (int) situation - I mean from the begining to the end. So - don't be suprised about my post. _____