• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 458
  • Last Modified:

Best place to install ISA 2006 Enterprise ?

Hi guies
I installed and configured a stand alone IS 2006 EE server on win 2003 server and could publish all the sites.
now I want to install in the corpoprate network: with AD and cluster and nlb win 2003 servers.
I have a DMZ network, Internal network  and WFE server sin the Internal netowork.
what is best practice : should I install ISA 2006 in the dmz serevers or should I install inside the network on some servers.
Where do you think is the best place for CSS server. ?

I have a WFE NLB cluster in one sub net, can i install ISA css in this subnet to can i choose  to have another subnet server have css and other array in adifferent subnet.

1 Solution
CSS server internally.
ISA with one interface internally (each, and load balanced) and the external interface in the DMZ.
Forward a couplke of IP's from the external firewall to the external interface(s) of the the ISA NLB cluster
CSS can basically be placed anywhere - as long as the nodes can contact the CSS... its fine.
Keith AlabasterCommented:
You can do either but a numbr of things need to be considered.
Although the CSS can go on any subnet, it really should be a subnet local to the ISA Site location. Latency can cause some real issues.
Make sure the location of the CSS has a DC available - again, really painful otherwise.
Audi08Author Commented:
so to get the idea clarified
this is what I am planning to do after seeing your comments
a) install CSS in some server where dc is avaliable and  add the dmz computer and another internal server  into the array
b)install ISA serveices on the server in the dmz  and the other one.

internal traffic can will hit the internal server and external trafic /internet traffic will hit the server in isa, or in other words dmz isa intance will handle external networks and the internal network server will handle internal traffic.

hey guies I am trying to get the  web interface login which ISA provides. where do I get it show ulr ?should I  install any other software for this.
i am plannin for Sing Signon services.


Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now