- For individual users
- Instant access to solutions
- Ask your tech questions
- Start your 30-day Free Trial
Main Topics
Browse All TopicsI'm considering getting a CIDR block from my ISP as the 8 IPs I currently have are in use, and I need more. I am currently using ISA 2004 for routing internal networking and the other servers are direct to outside connected with ISP assigned addresses within my range. I'd like to use ISA to DMZ the webhosts and still allow local network access to the outside with the CIDR block and ISA.
Is ISA 2004 capable of this? If so, how would I accomplish this? I purchased ISA 2006 last year, but I quickly uninstalled it when I spent an entire weekend trying to figure out why nothing worked like I thought it would. If I need to I'll reinstall that, but I need some guidance as to what I should be looking for with configuration.
My network is reasonably small, and I'm not opposed to re-ip'ing the entire setup to make config easier. I'm just hoping to hear that someone has done it, and it works to save the extra $1000 I would need for CIDR router.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Business Accounts
Answer for Membership
by: BembiPosted on 2009-08-09 at 07:58:50ID: 25054406
First at all, if you are familar with ISA 2004, you should not really have problems with ISA 2006.
There are a few new functions, but they are similar in architecture.
DMZ: it looks like you need a DMZ configuration, means a ISA with 3 NICS.
One NIC is external, one is DMZ and one is internal.
Then you need to publish your servers to the external interface as you would do from internal to external.
There may be a few additional rules you have to setup, but in general, it is more a logical question, from which interface the traffic should flow to which other interface.
The second question is the relationship between the networks. Usually, you have a NAZT relationship between the internal and external interface. For the DMZ, you have to decide, if you want to use public or private IPs. If you use a seperate private address range, you have a NAT relationship between the external and DMZ network. If the DMZ addresses are from your public address space, you have a route relationship.
These relationships have to setup correctly within your network configuration ins ISA. Additionally you have to check, if all of your DMZ serverices can work with NAT. This yhould usually not the problem for most cases.