ISA 2006 setup in PIX DMZ for OWA 2003

Posted on 2007-07-20
Last Modified: 2012-05-05
This is the continuation question from (

I need to deploy ISA ASAP, can someone shed some lights?
In short, I need to setup ISA in PIX DMZ for OWA/OMA.

                           Internet (outside)
ISA (DMZ) --------------- PIX -------------- (inside) OWA, DC1, DC2, Exchange

ISA = W2K3 SP1 ISA 2006 Ent.
DC1 = DC, GC and DNS
DC2 = DC only
OWA = Exchange 2003 (front end) server w/ SP2, FQDN CA cert
Exchange = Exchange 2003 (backend) server w/ SP2

OWA has StarCom SSL CA.  It used to be located in the DMZ and has moved back to Inside.  Here are the questions:
1) Should ISA be the domain member server or standalone?
2) On the PIX, 443 is pointing to ISA from outside to DMZ now.  What CA should I use?  Should I use the OWA CA or apply the new one via IIS?
3) Can anyone provide the step-by-step setup for ISA 2006 (not ISA 2004) and OWA 2003 (not OWA 2007)?
4) Does ISA require IIS running in this case?

Question by:vto
    LVL 20

    Accepted Solution


    1) Make the sure the ISA  server is part of the Internal LAN and then set up the ISA using Exchange server publishing rules

    2&3) Use the Certificate on the ISA as it should do the authenication and follow through the series

    4) Nope.

    LVL 1

    Expert Comment

    Forced accept.

    EE Admin

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Set up iPhone and iPad email signatures to always send in high-quality HTML with this step-by step guide.
    Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
    In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
    This video discusses moving either the default database or any database to a new volume.

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now