isa and external firewalls

[jhiltner]

I don't quite trust Microsoft yet to replace my hardware firewall appliance. What I'd like to try to start with is to keep my firewall appliance in place and use isa essentially as a proxy server until I get comfortable with the security stuff but I can't find anything anywhere about using isa with an external firewall (apart from on upstream server, aka another isa server). Any ideas?

 

[Sithl0rd]

A hardware firewall will always be better than a software firewall.
The firewall feature in ISA is very secure and is as good as any other software based firewall out there. You can use ISA with a hardware firewall or another software firewall

 

[jhiltner]

That's good news! are you aware of any documentation that explains how to do it?

 

[Bonj87]

I dunno if this is off topic..
but which is more secure?
a proxy (or isa server), with 1 NIC in a DMZ, or a server with 2 NICs .. one in the DMZ, one on the internal LAN.. internal NIC has no default gateway.
External NIC has WINS, SERVER service, Workstation service unbound from the NIC. Also, IPforwarding is off and IPSec is on.

im told a dual NICd proxy is a hole in the firewall.

 

[beezee28]

One of the better books to look for is :"Configuring ISA Server 2000." by Dr. T. Shinder - ISDN # :1-928994-29-6.

It explains a lot of stuff that you want setup. I was in the same boat as you are looking for material relating to ISA Server and found this book. You can buy it online at Amazon.com

Look around and decide.