<div>
Forced accept.<br />
<br />
Computer101<br />
EE Admin
</div>


<div>
<div class="content wysiwyg-content">
This is the continuation question from (<a href="https://www.experts-exchange.com/questions/22630039/Setup-OWA-in-PIX-DMZ.html" rel="ugc">https://www.experts-exchange.com/questions/22630039/Setup-OWA-in-PIX-DMZ.html</a>).<br />
<br />
I need to deploy ISA ASAP, can someone shed some lights?<br />
In short, I need to setup ISA in PIX DMZ for OWA/OMA.<br />
<br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Internet (outside)<br />
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;|<br />
ISA (DMZ) --------------- PIX -------------- (inside) OWA, DC1, DC2, Exchange<br />
<br />
ISA = W2K3 SP1 ISA 2006 Ent.<br />
DC1 = DC, GC and DNS<br />
DC2 = DC only<br />
OWA = Exchange 2003 (front end) server w/ SP2, FQDN CA cert<br />
Exchange = Exchange 2003 (backend) server w/ SP2 <br />
<br />
OWA has StarCom SSL CA. &nbsp;It used to be located in the DMZ and has moved back to Inside. &nbsp;Here are the questions:<br />
1) Should ISA be the domain member server or standalone?<br />
2) On the PIX, 443 is pointing to ISA from outside to DMZ now. &nbsp;What CA should I use? &nbsp;Should I use the OWA CA or apply the new one via IIS?<br />
3) Can anyone provide the step-by-step setup for ISA 2006 (not ISA 2004) and OWA 2003 (not OWA 2007)?<br />
4) Does ISA require IIS running in this case?<br />
Thanks!!!<br />
<br />
<br />

</div>
</div>


This is the continuation question from (http://www.experts-exchange.com/Security/Software_Firewalls/Enterprise_Firewalls/Cisco_PIX_Firewall/Q_22630039.html).

I need to deploy ISA ASAP, can someone shed some lights?
In short, I need to setup ISA in PIX DMZ for OWA/OMA.

                           Internet (outside)
                                       |
ISA (DMZ) --------------- PIX -------------- (inside) OWA, DC1, DC2, Exchange

ISA = W2K3 SP1 ISA 2006 Ent.
DC1 = DC, GC and DNS
DC2 = DC only
OWA = Exchange 2003 (front end) server w/ SP2, FQDN CA cert
Exchange = Exchange 2003 (backend) server w/ SP2 

OWA has StarCom SSL CA.  It used to be located in the DMZ and has moved back to Inside.  Here are the questions:
1) Should ISA be the domain member server or standalone?
2) On the PIX, 443 is pointing to ISA from outside to DMZ now.  What CA should I use?  Should I use the OWA CA or apply the new one via IIS?
3) Can anyone provide the step-by-step setup for ISA 2006 (not ISA 2004) and OWA 2003 (not OWA 2007)?
4) Does ISA require IIS running in this case?
Thanks!!!




ISA 2006 setup in PIX DMZ for OWA 2003

Microsoft Forefront, formerly known as Internet Security and Acceleration Server (ISA Server), is a network router, firewall, antivirus program, VPN server and web cache that runs on Windows servers. It includes identity management and protection systems, and discontinued systems for threat management and network protection, along with protection for Sharepoint and Exchange. The scope of discussions includes forward and reverse proxy, application and service publishing, virtual private networks (VPNs), outbound access rules, SSL certificates and network routing within either a single node or an highly-available array pairing.

Microsoft Forefront ISA Server

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).

Cisco

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.