Please Recomend config

[dkamp]

We are concidering the two following configuration with a PIX 515 and Microsoft ISA 2006 server, what do YOU feel is best? Option 1 or 2.

Option 1:
Internet -- PIX -- ISA -- Internal Network
(ISA in Back End Firewall mode)

Option 2:
Internet -- PIX --Internal Network -- ISA
(ISA in Single NIC Config, An Access list on the PIX for only the ISA server traffic)

What have You Experienced, Pro's or Con's
Please respond.

 

[horus42]

If this was down to me I would use option 1 but that is if I have to use the ISA server in firewall mode,

Just remember this will make your life little bit more complicated as when you make any changes to one of the firewalls you also need to remember to do the same to the other.

Hope that helps

 

[boymarty24]

Depends what you want to do with your isa.
If you only use the isa for owa/oma/caching etc i would go for option number 2.

Otherwise i probably would have go with option number 1. And as Horus42 points out your life will be more complicated =) ( been there done that )