ISA vs Appliance?

[robFSS]

Howdy folks -

I'm just wondering if anyone wants to chime in on whether or not there's any tangible advantage to using a network security appliance as an alternative to ISA in an SBS environment.

I'm really concerned about my dsl bandwith and the server's actual performance. I get the feeling that ever since we adopted this server <1 year ago, and started using it as a firewall with ISA, internet access speeds have declined.

Before we had the server, everyone had zone alarm on their pc's and a basic installation of antivirus. Now there's a managed antivirus application on the server, and the server is the firewall.

We're also using My Documents redirection, and exchange. I'm running a dual processor dell poweredge server with 4gb ram. It's got 2 NICs. The modem goes into the server, and then the server goes to the switch... I think... (should probably double check that)

Yet I digress.
If I diabled ISA, and added a network security appliance, would the server peformance improve? Would it remain unchanged? Does the server need the same amount of resources just to manage the presence of the appliance? I've got less than 20 workstations on the network.

anybody care to share some thoughts?

-r

 

[58sniper]

You likely wouldn't see a difference. You're still dealing with the same traffic whether it's at the box or in an appliance.

Going to a managed AV solution was certainly a good idea, as would going to WSUS. Both reduce substantially the amount of bandwidth used for client updates.

Are you sure you're seeing an Internet speed issue and not just network congestion?

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[ShackDaddy]

As far as server performance is concerned, ISA could contribute to a decline in that, since it constantly allocates processor cycles to traffic management. If you want to determine how much of an impact ISA is having on a performance level, I'd gather a week of ISA/Network/Process/Processor performance counters so that you know what your potential gains might be by offloading firewall tasks.

As far as bandwidth, set up a broadband router with the same internal/external IPs as your server. After hours, swap cables the servers cables to it and run some speed tests to see if you get different throughput results.

ShackDaddy
Shackelford Consulting