ISA server and W2k3 AD

[flyhi]

Can anyone recommend a best practice config for 1 ISA server that is going to be on the edge of our network performing web caching and firewall, we have W2K3 AD in mixed mode with nt4, 2000 and w2k3 machines i.e should we look at a different forest or domain name for the isa server or should it just be a stand alone (member)server on its own network, what would be the most secure way.

Any help appretiated

david

 

[dput]

If this is going to be your only firewall, I would make it a stand-alone server to protect my active directory. I placed mine behind a hardware firewall and made the ISA Server a member server of my active directory.

Dan