Re: Is Windows 2003 firewall safe?

My bad, I forgot ISA06 beta has not quite ended.

"Gaspar" <gaspar@xxxxxxxxxx> wrote in message
news:ueax%23IqTGHA.224@xxxxxxxxxxxxxxxxxxxxxxx
What do you mean by "The ISA version you mention is dated"?

Thanks again.
Gaspar

"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:%23ND6M0oTGHA.4300@xxxxxxxxxxxxxxxxxxxxxxx
Layers are nice, but you rule that out in final comment.
It is always best to not place critical infrastructure right
on the edge / external network.

The ISA version you mention is dated.

The W2k3 firewall is good at what it does and it will cause all
inbound traffic to the external interface to be dropped except
for what you state to allow, if you configure it correctly.
In your case I would use both the firewall and IPsec in a
filtering isolation mode.

"Gaspar" <gaspar@xxxxxxxxxx> wrote in message
news:OY4Va4nTGHA.1868@xxxxxxxxxxxxxxxxxxxxxxx
I want to setup Windows 2003 + Exchange 2003 server with to network
adapters: one for the intranet, and the other for the internet.

Is it safe to use Windows 2003 built-it firewall on the external adapter
to block everything but mail and dns ports (53, 25, 110, etc)? If not,
can I install ISA 2004 firewall to protect it (i.e is Exchange 2003
compatible with ISA in the same machine?)

Ideally it would be better to have an external firewall but I can't
afford it ($$$).

Thanks!







.

Relevant Pages

  • Re: CEICW fails - several errors
    ... The firewall isn't used when ISA is installed. ... On the WAN NIC of your server the DNS has to point to the LAN IP. ... I immediately checked and ISA Server ...
    (microsoft.public.windows.server.sbs)
  • RE: OWA page not displayed Outside
    ... Open ISA 2006 management console. ... Expand the server node and highlight 'Monitoring'. ... Click 'Configure Firewall Logging'. ... |> internal client as both the web proxy client and firewall client? ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA Proxy Failure
    ... Objects (You can click Firewall Policy and then click Toolbox on the right ... If we could start the ISA service, let's recreate new certificate in the ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: OWA page not displayed Outside
    ... Open the ISA Server management console, ... On the ISA Server computer, stop the Microsoft Firewall service. ...
    (microsoft.public.windows.server.sbs)
  • Re: Noob question: ISA and IIS on the same server?
    ... OK, but NAT and packet filtering do *not* provide any security, that's what ... The ISA firewall already has a packet filtering function ... The DNS server, as long as its a caching-only DNS server, is fine on the ISA ...
    (microsoft.public.isa)