Re: Something about ISA Server 2000...

From: Deji (deji@prontomail.com)
Date: 10/25/01 

Message-ID: <001c01c15d94$84c105f0$f701fe0a@commtouch.com>
From: "Deji" <deji@prontomail.com>
To: "Los, Ralph" <rlos@EnvestNet.com>, "'Progenit Service S.r.l.'" <agente_progenit@public.iunet.it>, <focus-ms@securityfocus.com>
Subject: Re: Something about ISA Server 2000...
Date: Thu, 25 Oct 2001 13:35:00 -0700

Ralph, I noticed that you didn't elaborate on your dislike of ISA. I
personnaly use it and have been satisfied with it SO FAR. There are a couple
of things that may turn people off of it, I know. The biggest of this is
non-familiarity and the apparent difficulty in configuration. But those are
not things that should turn you off of a GOOD product. I am happy to say
that ISA kept all of my servers out of both Nimda and CodeRed's harm, even
where the patches were not present on the Web Servers.

I like ISA. When properly configured, it's solid. I bitch about things that
I would like to see in it, but so do my CheckPoint FW-1 colleagues. Another
plus, no KNOWN exploit exists for it yet.

Deji
p.s: I do NOT speak for MS

----- Original Message -----
From: "Los, Ralph" <rlos@EnvestNet.com>
To: "'Progenit Service S.r.l.'" <agente_progenit@public.iunet.it>;
<focus-ms@securityfocus.com>
Sent: Thursday, October 25, 2001 8:56 AM
Subject: RE: Something about ISA Server 2000...

> Giancarlo,
>
> Unfortunately, yes I have both experience and opinion. I started to
> play around with ISA 2000 a while ago, and now I run 3 CheckPoint FW-1's.
> Nothing beats a CheckPoint, in my book, BUT, Netscreen is a great little
> box, and Watchguard is worth the price as well for smaller offices.
>
> I'd stay away from ISA as a firewall, trust me, it's not something
> you want to have to deal with...<shudder>....and I'm a Microsoft fan.
>
> Regards
>
> Ralph M. Los
> Asst. Vice-President, Internet Systems and Security
> EnvestnetPMC
> rlos@envestnet.com
> (312) 827-3945 (direct)
> (312) 296-9003 (wireless w/voicemail)
> * If you haven't been hacked, you don't know where your vulnerabilities
lie*
>
>
> -----Original Message-----
> From: Progenit Service S.r.l. [mailto:agente_progenit@public.iunet.it]
> Sent: Thursday, October 25, 2001 5:10 AM
> To: focus-ms@securityfocus.com
> Subject: Something about ISA Server 2000...
>
>
> Hi all,
>
> has someone an opinion (good or bad....)concerning ISA Server 2000
installed
> as firewall? How many differences are among this software solution from
> Microsoft and Check Point Firewall-1, Netscreen 10/100, Watchguard or
Cisco
> PIX?
>
> Any help would be appreciated.
>
> Thanks
>
> ---------------------------------------------------------------
> Giancarlo Ballestracci
> Technical Support
> Progenit Service S.r.l. Agenzia TENOVIS-NEWTEL Telecommunications -
> Information Security - New Technologies Tel 055-456336 Fax 055-452330
> ---------------------------------------------------------------

Relevant Pages

  • Re: CEICW fails - several errors
    ... The firewall isn't used when ISA is installed. ... On the WAN NIC of your server the DNS has to point to the LAN IP. ... I immediately checked and ISA Server ...
    (microsoft.public.windows.server.sbs)
  • Re: Outbound VPN
    ... Your SBS client cannot establish PPTP VPN through ISA 2004. ... Chapter 6: ISA Server 2004 VPN Deployment Kit: Configuring the ISA Server ... 2004 Firewall for Outbound PPTP and L2TP/IPSec Access ...
    (microsoft.public.windows.server.sbs)
  • Re: T1 connection slow - firewall config issue
    ... domain controller, a isa server, and a Mail server among others. ... if the firewall is disabled... ... does Anyone have any configuration suggestions, or any ideas as to why ...
    (microsoft.public.isa)
  • Re: Trying to understand this behavior, Ports in IIS
    ... That tells me the ISA server was accepting the connections. ... assign port 8080. ... In the border router and in the PIX firewall (both devices are "in front of" ...
    (microsoft.public.inetserver.iis.security)
  • Re: REPOST: Firewall Client Disconnects
    ... -> Define Connection Limits ... Subject: Firewall Client disconnects? ... reported it was unable to connect to the ISA server. ... The Firewall Client is for ISA 2004. ...
    (microsoft.public.windows.server.sbs)