Solved

Setting up ISA 2006 in a DMZ on one NIC

Posted on 2008-10-21
2
514 Views
Last Modified: 2008-11-17
I have a system (VMWare ESX with single virtual NIC available) with Server 2003 and ISA 2006. This client is moving in a month and need to setup a proxy between the internet and inside. I can set firewall rules for HTTPS (for OWA and RPC over HTTP), SMTP, etc and have them go to the DMZ port where the ISA server will be stationed. Once the traffic is in the DMZ (on a Snapgear) , I need to setup the ISA to then send it to the internal IP (I can route through the firewall potentially). This needs to be done for a few ports for development, mail, HTTP over RPC, and HTTPs.

I also need to have all internal traffic go through this DMZ port to then be converted to the outbound internet traffic.

An ASCII diagram:

                               INTERNET ----- Firewall ------ Internal (192.168.5.0)
                                                          |
                                                          |
                                                          |
                                                      DMZ (192.168.4.0)

So email comes in through internet, Firewall points it to the DMZ, DMZ then pushes to the mail server on the .5 subnet.


Questions:

1) Can this be done on one NIC? How is the best way to set this up with the three networks on the ISA server? (I see the configuration on the ISA server for local, external, and quarantine zones).
2) Will this work within ESX?
3) I have heard of issues with ISA and things like OWA and HTTP over RPC. Any recommendations?



0
Comment
Question by:kirk_lesser
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 5

Expert Comment

by:lecaf
ID: 22771232
1. I don't think its possible you need 2 NICS (Isa merit this ¬10 investment)
2. why not
3. works fine ISA is the only FW (I knwo of) able to filter RPC over HTTP so you need it.

I already used this desing

Internet ----- FW ----- ISA ----- DMZ with front end (exchange)
                                    -
                                    -
                                    FW  -----  LAN


m  a r  c  
0
 

Accepted Solution

by:
kirk_lesser earned 0 total points
ID: 22772236
Anyone else agree/disagree?
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Iphones prompting for passwords on Exchange 2010 4 351
WSUS server configuration issue 5 263
Proxy (ISA server 2006) is blocking my url 27 253
Dynamic CRM config with outlook 4 118
There are three types of ISA client that can be configured - these can be individual clients or multiples of a client on each PC or server SecureNAT. A SecureNAT client for ISA server is a client machine, work station or server, that has its defa…
In all versions of ISA Server and the current version of FTMG, the default https protocol uses TCP port 443 and 563 only. This cannot be changed within the ISA or FTMG GUI and must be completed from a Windows cmd prompt on the ISA Server itself. …
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question