Re: Pix515e and ISA 2004

I forgot to add a drawing of what I was thinking:

Internet-----cisco router------pix(inside)-----local lan
| |
(dmz) |
| |
| |
ISA 2004-----------


rhltechie@xxxxxxxxx wrote:
Hi All,

I got some help on this a while back, but need a little more. I
recently purchased a web filter that sits on top of microsoft isa 2004.
I also will have a OWA server on my local lan that I would like to have
the ISA server publish as it does it very well. As ISA is actually a
firewall too, i would like to use it behind the pix. I have seen so
much information on this that I think I have confused myself. I am
curious of any of you are using this and what your configuration is. I
was headed in the direction of putting the ISA in the DMZ of the pix
but wonder if this is the best config or not. I have also seen back to
back configurations. One thing I have to be careful of is that we rely
heavily on the pix providing vpn usage. I wonder if someone can give
me some configurations that work well?

TIA,

R

.

Relevant Pages

  • Multiple external listeners behind Pix
    ... We are migrating to ISA 2004 from ISA 2000 which is in a front-end/back-end ... scenario behind a Cisco Pix. ... We currently publish one OWA server & Fileway using SSL and one web server ... doesn't want to 'use' up the six interfaces available just in caseso he ...
    (microsoft.public.isa.configuration)
  • Pix515e and ISA 2004
    ... recently purchased a web filter that sits on top of microsoft isa 2004. ... I also will have a OWA server on my local lan that I would like to have ... i would like to use it behind the pix. ... back configurations. ...
    (comp.dcom.sys.cisco)
  • Re: Firewall Frage
    ... Je nach dem welche PIX du dir zulegst, ist die PIX in der Anschaffung sogar ... günstiger als ein ISA Server! ... Nun zum Thema VPN: ...
    (microsoft.public.de.german.isaserver)
  • Re: ISA Configuration question
    ... ISA does *not* require itself to be the Default Gateway of the Clients. ... If you want the ISA to be only used for HTTP/HTTPS and browser-based FTP ... Leave the PIX as the Default Gateway like it already is. ... add the static routes for the public addresses. ...
    (microsoft.public.isa)
  • Re: Security
    ... I would use a combination for your network layout:) You could use ISA ... depth and the PIX allows unnecessary/unwanted traffic to be removed on the ... Subsequently I would use two Nics in your SBS server with the topology ... how do I open ports to allow e-mail to come directly to my ...
    (microsoft.public.windows.server.sbs)