New ISA Server ....

[AnthonyCasta]

My company is looking into using an ISA server ... Since I have never used this in the past, I am a little confused on where I should install it .. Let me provide a little backround ...

We currently have 3 file servers running ..

1. DNS Server - Has all files and applications
2. Mail #1 - Mail server and Web Server
3. Mail #2 - Backup mail server with a few mailboxes

We also have another server that is not in use ..

Where should I install ISA to be the most efficient and least hassle? ...

All servers are using windows 2000 advanced server and exchange 2000

Thx in advance ...

 

[dput]

Typically, you would want the ISA server between your network (including servers) and the Internet. ISA is designed to cache web content/proxy (to reduce Internet bandwidth needs), provide protection from the Internet, and to control access to the Internet from your network. Most people seem to run a configuration of:

INTERNET=====Hardware Firewall=====ISA======Private Network.

Other configurations can make a lot of sense dependent on needs.

Dan

 

[AnthonyCasta]

Thx Dan .. So you would would it be your recommendation to install it on the seperate unused server we have? .. In addition to that you would recommend using a hardware firewall ... Do you have any preferance? ..

Thx for your response ... Tony

 

[dput]

Yes, I would do a seperate server. It can be real tricky and potentially cause security problems to try and have anything else on the ISA Server.

I currently use a WatchGuard Firewall and have mixed feelings on it. I like the looks of the Cisco PIX/ASA firewall and the Fortinet product line looks interesting. I am told the ISA 2004 can be used as your only firewall. I just don't know of too many people doeing so.

Dan