Network Upgrade - Cisco Wireless - DMZ - ISA? SBS 2K3

Whether or not to deploy ISA is really going to be a question of how secure you want the network.  The Cisco 877 will provide a good firewall, but it would work even better with ISA Server installed if they already have it anyhow.  But if your current SBS license on the old server is Premium Edition (including ISA) OEM, then it cannot be transfered to a new machine... because OEM is licensed only on the machine it was purchased with.

However, if that's not the case, or if you are buying Premium Edition on the new server as well, then don't worry too much about configuration settings because like all things on SBS, ISA is configured automatically with a wizard for most main settings.  

You don't need ISA to use SBS's native VPN, you just need to enable PPTP Passthrough on the Cisco Router.   For wireless clients, if the machines are not members of the domain, then configuring it on the router is fine... I'd suggest that you create a separate Virtual Cirtuit for it though and use a separate IP Subnet and Public IP if you have another one available.  Then if those clients need access to the domain they would connect via SBS's VPN Connection Manager.

If there are wireless clients that are members of the domain, I'd just add a simple Linksys Wireless Access point somewhere within the LAN.

Make sure that the Terminal Server is joined properly (http://sbsurl.com/sbstss) so that it can be accessed via Remote Web Workplace, or if you want direct access you can configure port 3390 for it... this would need to be done in the router, as well as on SBS (in ISA if you use it, or in RRAS otherwise).

Jeff
TechSoEasy

Hi Jeff

Thanks for your comment!, the new Server does have Premium so i guess I may aswell install ISA. Will cross that bridge at the time.

Just for clarification on the wireless clients, would you

Set up a vlan and have them VPN in?
Or
Have the CISCO 877 manage 2 External IP Addresses and have them connect via VPN that way?

The cost for an extra 4 IP's is only $20.00 extra per month so i think i will probably go with having the CISCO Manage the IP's and VPN in.

Anny suggestions on what i can do with 3 spare IP's????

Regards
Gavin

ISA server gives you one of the best application layer gateways in the world and you've got it as part of the Premium version :) Yes, I would definitely install it.  

SBS is adept at managing the solution with only one IP address, its yet another thing that makes it such a great product.  Hoever, as Jeff has suggested another of the IP's could be used to create the VPN tunnel.

Were there defintely four useable IP addresses?