ISA Replacement

Hi, we've been using ISA to publish some websites externally over the years and since it's on 2003 we need to get rid of them and replace them. Does anyone have a reasonably cheap alternative we could use? It's only a few websites so I'm not inclined to purchase a top of the line firewall to cover this piece of work.

Thx
concern_supportAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Kash2nd Line EngineerCommented:
ISA is just a firewall, I didn't know you could publish websites using that or I take it you have a web server sat behind ISA on the local subnet.

All you would need in that case is get a cheap router of some kind with built in firewall. i.e: draytek  2830 as an example and get rid of ISA
0
jhyieslaCommented:
Not sure if this is what you re wanting or not, but we, too, are using an older version of ISA.  We mostly use it for outside people to get to inside resources through the firewall.  The firewall won't translate the URL's so it routes all incoming requests for connections to the ISA which then redirects it to the proper server.

We are looking at the Netscaler VPX from Cisco. This product does several things like load balancing as well as the URL redirection. They have a Free version, where Citrix gives you a free license for it, you just need to renew it once a year.  There are some limitations as far as bandwidth, but unless you have a huge amount of traffic hitting this, it should function well.  I've tested it in my lab, but not in a production environment yet.
0
Sikhumbuzo NtsadaIT AdministrationCommented:
Hi,

Don't know about affordability on your side, but I would recommend something like this.
This is an example, there are other players out there like Sophos and others.

So shop around and get POCs.
0
What were the top attacks of Q1 2018?

The Threat Lab team analyzes data from WatchGuard’s Firebox Feed, internal and partner threat intelligence, and a research honeynet, to provide insightful analysis about the top threats on the Internet. Check out our Q1 2018 report for smart, practical security advice today!

concern_supportAuthor Commented:
Thanks for the feedback everyone, I think the key element I hadn't pointed out is the url re-direction which is done on the ISA side. So the firewall piece I can do elsewhere but I'm wondering how I should handle the url re-direction

thx
0
jhyieslaCommented:
I think that the Citrix software I mentioned would work.  At least that's what I got from the Citrix tech when I spoke to them the other day about our needs. Currently our firewall routes most incoming URL requests to the ISA server which then redirects them to the appropriate internal server. I want to replace the ISA sever with the Citrix software which I think will do the same thing.
0
mburdickCommented:
While Citrix NetScaler will certainly do what it is that you need, and quite a bit more, there is no free version of the software. You can get an evaluation license so that you can configure it and test its abilities against your needs, but that can not be moved to production and licensed without cost.
0
jhyieslaCommented:
Actually there is a free version.  The Netscaler-VPX has a version you have to license and yearly renew the license, but it is free.  It lacks some of the features of the pay versions and is limited in throughput, but it does work... I'm using it in my lab as a load balancer.
0
mburdickCommented:
You must be referring to the VPX Express edition. Which, while it is a no-cost license, it provides Standard Edition functionality at 1Mbps throughput. Most certainly not suitable for a production environment, not supported, and has only the most basic functionality.

I thought you were stating that the Developer Edition was free. While it is something you get at no additional charge when you have maintenance on any NetScaler, it isn't something that's considered a "no cost" item.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Forefront ISA Server

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.