Audi08
asked on
Best place to install ISA 2006 Enterprise ?
Hi guies
I installed and configured a stand alone IS 2006 EE server on win 2003 server and could publish all the sites.
now I want to install in the corpoprate network: with AD and cluster and nlb win 2003 servers.
I have a DMZ network, Internal network and WFE server sin the Internal netowork.
what is best practice : should I install ISA 2006 in the dmz serevers or should I install inside the network on some servers.
Where do you think is the best place for CSS server. ?
I have a WFE NLB cluster in one sub net, can i install ISA css in this subnet to can i choose to have another subnet server have css and other array in adifferent subnet.
thanks
Audi08
I installed and configured a stand alone IS 2006 EE server on win 2003 server and could publish all the sites.
now I want to install in the corpoprate network: with AD and cluster and nlb win 2003 servers.
I have a DMZ network, Internal network and WFE server sin the Internal netowork.
what is best practice : should I install ISA 2006 in the dmz serevers or should I install inside the network on some servers.
Where do you think is the best place for CSS server. ?
I have a WFE NLB cluster in one sub net, can i install ISA css in this subnet to can i choose to have another subnet server have css and other array in adifferent subnet.
thanks
Audi08
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
so to get the idea clarified
this is what I am planning to do after seeing your comments
a) install CSS in some server where dc is avaliable and add the dmz computer and another internal server into the array
b)install ISA serveices on the server in the dmz and the other one.
internal traffic can will hit the internal server and external trafic /internet traffic will hit the server in isa, or in other words dmz isa intance will handle external networks and the internal network server will handle internal traffic.
hey guies I am trying to get the web interface login which ISA provides. where do I get it show ulr ?should I install any other software for this.
i am plannin for Sing Signon services.
thanks
audi
thanks
audi
this is what I am planning to do after seeing your comments
a) install CSS in some server where dc is avaliable and add the dmz computer and another internal server into the array
b)install ISA serveices on the server in the dmz and the other one.
internal traffic can will hit the internal server and external trafic /internet traffic will hit the server in isa, or in other words dmz isa intance will handle external networks and the internal network server will handle internal traffic.
hey guies I am trying to get the web interface login which ISA provides. where do I get it show ulr ?should I install any other software for this.
i am plannin for Sing Signon services.
thanks
audi
thanks
audi
Although the CSS can go on any subnet, it really should be a subnet local to the ISA Site location. Latency can cause some real issues.
Make sure the location of the CSS has a DC available - again, really painful otherwise.