Setting up ISA 2006 in a DMZ on one NIC
Posted on 2008-10-21
I have a system (VMWare ESX with single virtual NIC available) with Server 2003 and ISA 2006. This client is moving in a month and need to setup a proxy between the internet and inside. I can set firewall rules for HTTPS (for OWA and RPC over HTTP), SMTP, etc and have them go to the DMZ port where the ISA server will be stationed. Once the traffic is in the DMZ (on a Snapgear) , I need to setup the ISA to then send it to the internal IP (I can route through the firewall potentially). This needs to be done for a few ports for development, mail, HTTP over RPC, and HTTPs.
I also need to have all internal traffic go through this DMZ port to then be converted to the outbound internet traffic.
An ASCII diagram:
INTERNET ----- Firewall ------ Internal (192.168.5.0)
So email comes in through internet, Firewall points it to the DMZ, DMZ then pushes to the mail server on the .5 subnet.
1) Can this be done on one NIC? How is the best way to set this up with the three networks on the ISA server? (I see the configuration on the ISA server for local, external, and quarantine zones).
2) Will this work within ESX?
3) I have heard of issues with ISA and things like OWA and HTTP over RPC. Any recommendations?