SBS and ISA running on the same server

[blubomber]

Hello, i am running SBS 2003 R2 Premium edition. I have not installed ISA to this date yet. I was a little worried about how much security there really is running ISA on the same box as 2003 instead of running ISA as a gateway on another computer.

Is there anyone running a setup like this? Thank you for any info.

 

[gavm99]

Hi there,

I visit multiple customers every week and I see SBS Server running SBS, ISA & SQL all on the same server.

This is normally because of cost, I think if you have the facility to have a seperate machine for ISA then I would personally do that.

Thanks.

 

[Danny28]

Just keep in mind that you will have to purchase another whole copy of ISA 2004 server if you plan to put it on a separate box. The only reasons to purchase SBS Premium over SBS Std are for SQL and ISA server. If you do not end up implementing the ISA server portion, not only will you have paid extra for your SBS installation that you didn't need to, you will also pay much much more buying it as a separate application for another server.

 

[blubomber]

thank you for the replies.

i was just curious if you could separate ISA form SBS for little or no cost, besides the extra server.

But i have also decided not to run ISA on the SBS server its self. I like ISA's features but i just dont feel comfortable running a software firewall on a domain controller, exchange server, and SQL server all on the same box. So i am just going to stick with my current firewall solution.

 

[Danny28]

The costs would be for the physical hardware, an additional copy of Windows 2003 Server Std, the CALs, and the additional copy of a full ISA 2004. The ISA 2004 that comes on the SBS disk can only be installed on the SBS server. No SBS components can be split up unless your purchase the SBS transition pack. But all the transition pack does is morph your SBS box into a Windows 2003 Server Std box.

 

[dkediger]

The existing SBS CALs would apply to/cover the additional server, so no need to acquire more unless he's increasing users as well.

I've generally seen no problems with ISA on SBS - given an adequate server. It can have some definite advantages over just a standalone firewall given particular customer needs; just as well, there may also not be any tremendous advantage if all that is required are outbound connections for basic web browsing.