What are the advantages and disadvantages of using an ISA server?
I am in the process of setting up OWA on my company network.
I am putting an ISA server which is NOT joined to my internal domain in our DMZ zone to proxy OWA traffic securely.
This is currently the sole purpose of the ISA server.
What else can this ISA server be used for? Our company internet for example is proxied through mimesweeper for web. Will this still be needed?
I am putting an ISA server which is NOT joined to my internal domain in our DMZ zone to proxy OWA traffic securely.
This is currently the sole purpose of the ISA server.
What else can this ISA server be used for? Our company internet for example is proxied through mimesweeper for web. Will this still be needed?
DCenaculo
Whitch version of ISA server are you using ? The ISA server can be your only firewall, proxy, etc in your network but it will be nice to discuss the pros and cons of this.
ASKER
Which is the newest version of ISA server and will it be compatible with a Server 2003/XP environment? I have not bought the ISA server yet but want to be able to justify the purchase.
Mimesweeper for the web has specific functions related to web filtering and security that Iyou can't get with ISA server. Is your firewall an ISA server ?
Sorry. I didn't saw your comment. What is your fierwall at this moment ? I'll try to help you justifying the purchase if it proves for us that is the best choice :)
ASKER
I am using a HP Procurve 5412zl which serves as our firewall and core switch.
Ok. So, you use exhange server and you want do give web access to your users. For that I assume that you are going to put an exchange server as a front-end in your DMZ, is it ? You said Isa server on your DMZ, but as far as I know, you should install in the DMZ an exchange server only as a frontend to give OWA to your users. Why do you think you'll need an ISA server, if you already have a firewall and a proxy solution ?
ASKER
Putting the frontend server in the DMZ opens too many ports into our internal network as a 2003 frontend server has to be joined to the domain. This is very unsecure. If the frontend server is compromised then the hacker will have full access to our network.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I agree, I think this is the way to go. I am waiting for some quotes for the software so I can confirm which is cheaper.
Ok, say something then! Good luck :) I really think this is the best choice, but if you prefer to do it anyother way, please feel free to ask for help.