RE: new isa2004 and 3 nic

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 8 Nov 2004 06:47:40 -0800

Don't worry about your English; it's better than my Italian...  :-)
 
The kewl thing is that ISA 2004 makes this MUCH easier.
If you want to place your web server in a DMZ, then create a routing rule that 
defines a "routed" relationship between the DMZ and internal networks.
 
Frankly, you don't need to separate your web server like that...

________________________________

From: Luigi Grieco [mailto:shakala@xxxxxxxxxxxxx]
Sent: Mon 11/8/2004 3:11 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] new isa2004 and 3 nic



http://www.ISAserver.org

Hi.

I have to install ISA2004.
I have 1 server w2003st and 1 isa2004st.
3nic

My idea is:
1 nic to Internet (public ip)
1 nic perimeter (dmz) 172.16.x.y/16
1 nic to domain (lan) 192.168.10.x/24

My domain is 2000 with
1 cluster dc dns exchange and sql
1 fileserver and iis for intranet
1 web and ftp server (to publishing) (some access must be authenticate by
active directory and/or sql)
1 dc with dns

Is a god idea put the web server in dmz out of domain? Or I can leave it in
domain, but different subnet (I have read the article about intra domain
communication...)?

Any idea is appreciate!!!

Sorry for my elementary English,
Best regards,
gg




------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



All mail to and from this domain is GFI-scanned.

Other related posts: