RE: ISA Server or Firewall Appliance?

From: Dale Martenstyn (dale.martenstyn_at_travel2.com)
Date: 11/15/05

  • Next message: Marcos Marrero: "RE: ISA Server or Firewall Appliance?" 
    To: <focus-ms@securityfocus.com>
Date: Tue, 15 Nov 2005 21:14:24 -0000

    Marcos,

    ISA is a full blown firewall in its own right with the added bonus of
    application level filtering. I currently utilise ISA partnered with other
    dedicated hardware appliances like Cisco PIX, Checkpoint and Watchguard
    Fireboxes and it works very well. I have also used ISA on it's own in large
    companies (3000+ users, branch offices, etc) and equally it's still good.

    A good read-up is Tom Shinder's Configuring ISA Server 2004. It debunks some
    of the common myths associated with ISA.

    Or whiz over to http://forums.isaserver.org/

    Regards,

    Dale

    Network Administrator
    Cendant Corporation

    -----Original Message-----
    From: Marcos Marrero [mailto:mmarrero@LLOYDSTSB-USA.com]
    Sent: 15 November 2005 16:58
    To: focus-ms@securityfocus.com
    Subject: ISA Server or Firewall Appliance?

    Hello to all,

    I have a question to see what everyone out there thinks. Here it goes...

    Is it better to have a firewall appliance (Checkpoint, Juniper, etc) or
    is ISA server enough to use as a firewall (along with all of the other
    options it provides)?

    Of course the ISA server would sit facing the internet, like a firewall
    would and it would have to sit on a hardened machine.

    Just want to know what everyone out there thinks about this
    configuration or idea?

    Regards
    Marcos Marrero * Banking Officer * Data Security
    Lloyds TSB Bank * US Information Technology
    _________________________________
    Tel: (305) 347-6421 * Fax (305) 371-8607

    **********************************************************************
    This Email is intended for the exclusive use of the addressee only.
    If you are not the intended recipient, you should not use the
    contents nor disclose them to any other person and you should
    immediately notify the sender and delete the Email.

    Lloyds TSB Bank plc is registered in England and Wales Number: 2065.
    Registered office: 25 Gresham Street, London EC2V 7HN.

    **********************************************************************

    This email has been scanned for all viruses by the MessageLabs SkyScan
    service.

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: Marcos Marrero: "RE: ISA Server or Firewall Appliance?"

    Relevant Pages

    • Re: Outbound VPN
      ... Your SBS client cannot establish PPTP VPN through ISA 2004. ... Chapter 6: ISA Server 2004 VPN Deployment Kit: Configuring the ISA Server ... 2004 Firewall for Outbound PPTP and L2TP/IPSec Access ...
      (microsoft.public.windows.server.sbs)
    • Re: T1 connection slow - firewall config issue
      ... domain controller, a isa server, and a Mail server among others. ... if the firewall is disabled... ... does Anyone have any configuration suggestions, or any ideas as to why ...
      (microsoft.public.isa)
    • Re: Trying to understand this behavior, Ports in IIS
      ... That tells me the ISA server was accepting the connections. ... assign port 8080. ... In the border router and in the PIX firewall (both devices are "in front of" ...
      (microsoft.public.inetserver.iis.security)
    • RE: ISA2004 post upgrade cleanout
      ... run it 3 or 4 times before it went through the firewall cleanly. ... > I think that the simple way is to change the ISA settings to the SBS ... please also delete the "Microsoft ISA server" folder ...
      (microsoft.public.windows.server.sbs)
    • Re: CEICW fails - several errors
      ... The firewall isn't used when ISA is installed. ... On the WAN NIC of your server the DNS has to point to the LAN IP. ... I immediately checked and ISA Server ...
      (microsoft.public.windows.server.sbs)
    • Quantcast