Re: ISA Opinions

From: Robert Moir (robspamtrap+msnews_at_gmail.com)
Date: 03/30/05 

Date: Wed, 30 Mar 2005 10:04:08 +0100

mwebb wrote:
> I am working on a security specialty in my MCSE track. I just started
> studying ISA 2000.
>
> Microsoft's claims in the early chapters of the study kit are pretty
> impressive. But things are seldom as good as they first appear.
>
> What are the good points and not so good points about using ISA
> server? Is it better, worse or just different from a hardware
> firewall?

It is worth pointing out that *all* firewalls are "hardware firewalls" and
*all* firewalls are "software firewalls". Every firewall is a software
program running on a hardware platform. (I personally use the term 'software
firewall' to mean those childs toys people put on their home computer but
thats another story).

ISA server is a good firewall for protecting Windows based workstations
while allowing them easy access to facilities on the internet, that i'm
happy to deploy in combination with another dedicated firewall such as a
cisco pix or sonic wall or suchlike. 

-- 
-- 
Rob Moir
Website - http://www.robertmoir.co.uk
Virtual PC 2004 FAQ - http://www.robertmoir.co.uk/win/VirtualPC2004FAQ.html
Kazaa - Software update services for your Viruses and Spyware.

Relevant Pages

  • Re: Outbound VPN
    ... Your SBS client cannot establish PPTP VPN through ISA 2004. ... Chapter 6: ISA Server 2004 VPN Deployment Kit: Configuring the ISA Server ... 2004 Firewall for Outbound PPTP and L2TP/IPSec Access ...
    (microsoft.public.windows.server.sbs)
  • Re: T1 connection slow - firewall config issue
    ... domain controller, a isa server, and a Mail server among others. ... if the firewall is disabled... ... does Anyone have any configuration suggestions, or any ideas as to why ...
    (microsoft.public.isa)
  • Re: Trying to understand this behavior, Ports in IIS
    ... That tells me the ISA server was accepting the connections. ... assign port 8080. ... In the border router and in the PIX firewall (both devices are "in front of" ...
    (microsoft.public.inetserver.iis.security)
  • RE: ISA2004 post upgrade cleanout
    ... run it 3 or 4 times before it went through the firewall cleanly. ... > I think that the simple way is to change the ISA settings to the SBS ... please also delete the "Microsoft ISA server" folder ...
    (microsoft.public.windows.server.sbs)
  • Re: CEICW fails - several errors
    ... The firewall isn't used when ISA is installed. ... On the WAN NIC of your server the DNS has to point to the LAN IP. ... I immediately checked and ISA Server ...
    (microsoft.public.windows.server.sbs)