[isapros] Re: How many ISA servers?

  • From: "Amy Babinchak" <amy@xxxxxxxxxxxxxxxxxxxxxxxxxx>
  • To: <isapros@xxxxxxxxxxxxx>
  • Date: Wed, 18 Oct 2006 19:17:43 -0400

I'll be taking a lot of their servers virtual as well. I'm looking
forward to it. This client won a large grant from Fujitsu and they are
expecting all new multi-processor hardware. The IT director said to me,
how about we just get 2 8-way servers and we consolidate all of our
servers on them? How about NO? It's going to be a fun project but all of
these meetings are getting dreary. 

 

Amy 

 

 

________________________________

From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Greg Mulholland
Sent: Wednesday, October 18, 2006 6:43 PM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: How many ISA servers?

 

Hey Amy

 

I had to do basically that a few weeks ago myself.. sometimes im amazed
at what i see, but then again im not..

 

I'm pushing hard for my sites to go virtual now, 1 because we are
running out of space, 2 because i want them too :) but i can convince
them to buy 2 or 3 decent servers rather than 10 crappy ones and create
the same effect and save on UPS costs :)

 

Greg 

        ----- Original Message ----- 

        From: Amy Babinchak <mailto:amy@xxxxxxxxxxxxxxxxxxxxxxxxxx>  

        To: isapros@xxxxxxxxxxxxx 

        Sent: Thursday, October 19, 2006 1:10 AM

        Subject: [isapros] Re: How many ISA servers?

         

        That's an understatement.

         

        Yesterday I performed a Siamese twin operation to separate the
Internet from the Intranet websites. The Intranet was a subfolder of the
Internet and completely available on the Internet. In doing so, I
created 2 new servers on the network, changed server name and IP
addresses and did not have to modify the firewall at all to be able to
allow the public to view the Internet site. Next up, DNS separation
while proposing the firewall project. I've got some really good ammo
now.

         

        I'm beginning to remember why I left Enterprise. I hate living
with stupid decisions made by non-IT staff and dealing with incompetent
people around me in the department. As far as I can tell all the network
engineer knows how to do is use Acronis.  

         

        Amy  

         

        
________________________________


        From: isapros-bounce@xxxxxxxxxxxxx
[mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder
        Sent: Wednesday, October 18, 2006 10:58 AM
        To: isapros@xxxxxxxxxxxxx
        Subject: [isapros] Re: How many ISA servers?

         

        The deployment scenario is driven by the customer requirements,
and you own recommendations to increase security over the customer's
core requirements.

         

        There's a good chance that their current firewall deployment is
suboptimal, since an aged Check Point server deployment was probably
designed and configured for a threat environment very different from
what we have today.

         

        Tom

         

        Thomas W Shinder, M.D.
        Site: www.isaserver.org <http://www.isaserver.org/> 
        Blog: http://blogs.isaserver.org/shinder/
        Book: http://tinyurl.com/3xqb7
        MVP -- Microsoft Firewalls (ISA)

         

                 

                
________________________________


                From: isapros-bounce@xxxxxxxxxxxxx
[mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Amy Babinchak
                Sent: Wednesday, October 18, 2006 9:33 AM
                To: isapros@xxxxxxxxxxxxx
                Subject: [isapros] Re: How many ISA servers?

                Thanks. That's a very confusing calculator. It says 1
single processor server, 1 duel processor server, 1 dual core processor
server under network load balancing and also under caching. So does this
mean I need one server or one of each? It's very unclear. 

                 

                What I'm really looking for is more of a decision tree
ending with a recommendation for the deployment scenario. Since this is
my first deployment where I think I need more than 1 ISA server, I'm
looking for some validation before I make the recommendation to the
client.

                 

 

As an edge firewall. 

*

In a 3-leg configuration. 

*

With another firewall. 

*

As an Internal network segment firewall. 

*

As a Web proxy or caching server. 

                 

                 

                 

                Amy Babinchak

                 

                
________________________________


                From: isapros-bounce@xxxxxxxxxxxxx
[mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
                Sent: Wednesday, October 18, 2006 9:26 AM
                To: isapros@xxxxxxxxxxxxx
                Subject: [isapros] Re: How many ISA servers?

                 

                Take a look at the calculator to the right of
http://www.microsoft.com/isaserver. 

                This was created to help you make just those
decisions...

                 

                From: isapros-bounce@xxxxxxxxxxxxx
[mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Amy Babinchak
                Sent: Wednesday, October 18, 2006 6:24 AM
                To: isapros@xxxxxxxxxxxxx
                Subject: [isapros] How many ISA servers?

                 

                Is there a good planning document that can help me
decide how many ISA servers to deploy? I've got a large network that I'm
working on and I'd like to ditch the vintage NT checkpoint box in favor
of ISA. I'm thinking that 2 ISA servers will be the way to go but I'd
like to review my thoughts against Microsoft recommendations. Is there
such a document?

                 

                I found one called: Network Concepts in ISA Server 2006
But all it does is list the deployment scenarios doesn't explain how to
choose between them. 

                 

                Amy Babinchak

                 

                 

                 

                 

                All mail to and from this domain is GFI-scanned.

Other related posts: