Deploying ASA5505 on a SBS 2003 network (Converting from Dual to Single-NIC operation)
Posted on 2013-06-05
We have a ‘SBS 2003 Standard – SP2’ machine on an HP Proliant ML350 G4 hardware. Its running our Exchange, AD, NAT/Firewall, DHCP, DNS, SharePoint, Remote Access (VPN), SQL, Printing & File server and internet. There is no ISA installed. I have purchased a Cisco ASA5505 to deploy between the internet router and network switch. We also have a Windows 2003 Standard server (virtual) for redundancy and have assigned it Sec DC, Sec DNS roles and global catalogue.
Current Network : Internet Router --> Server’s-NIC1(Public/External_IP) [=] Server’s-NIC2-(Internal_IP) --> Switch --> Workstations
Planned network: Internet Router --> ASA5505-Firewall --> Switch --> Server and Workstations
Convert the server from dual-NIC to Single-Nic mode.
Phase one: Configure ASA5505 to do NAT and firewall function and deploy it. Also configure a VPN pass-through so SBS 2003 can carry on serving VPN clients
Phase 2: Configure ASA5505 to do VPN function
Phase 3: Install VPN clients on client machines
I need a user guide which clearly explains all the steps involved in converting the SBS 2003 server to Single-NIC mode.
ASA5505 is my first ever firewall – any links/user guides to configure it for the first time will greatly help
SBS 2003 also performs DNS. Will the SBS 2003 keep it’s DNS role? Or it should also be given to ASA5505Thanks for any input. Other tips/ideas will also be greatly appreciated.