server on DMZ

Hi,

We are trying to setup ISA on a DMZ network, seperated by firewal

What i need to know is, what ports do i need to open so that the ISA server
can communicate network information.

Do we need to browse the server from the internal network or should we just
stick it out there and block everything.


advice on configuration would be appreciated

I can't see what you are trying to do here. ISA is a firewall. Is ISA to
be the firewall between the Internet and the DMZ or between the DMZ and the
LAN? You are aware of the situation with back to back firewalls?

"Andy Wolsten" <(E-Mail Removed)> wrote in message
news:25898094-360A-4D2E-93F0-(E-Mail Removed)...
> Hi,
>
> We are trying to setup ISA on a DMZ network, seperated by firewal
>
> What i need to know is, what ports do i need to open so that the ISA
> server
> can communicate network information.
>
> Do we need to browse the server from the internal network or should we
> just
> stick it out there and block everything.
>
>
> advice on configuration would be appreciated
>

Andy Wolsten wrote:
> Hi,
>
> We are trying to setup ISA on a DMZ network, seperated by firewal
>
> What i need to know is, what ports do i need to open so that the ISA server
> can communicate network information.
>
> Do we need to browse the server from the internal network or should we just
> stick it out there and block everything.
>
>
> advice on configuration would be appreciated

It depends on how you want to use ISA server. The easiest way is to
make it your firewall, and loose the "network" firewall. Do not be
concerned, all features in the "network" firewall are in ISA, and
better!

If you want to use ISA with AD integration, there should be a number of
ports open on the DMZ-firewall to make it possible.

You could also look here:
http://www.microsoft.com/isaserver/p...sestudies.mspx but those
documents may seem to be a bit too much....

Greetz,

Trumpeteer

Thanks chaps,

We currently have cisco firewall so wont replace.

was hoping we could run the two simultaneously.

Moreover, ISA would be to provide a proxy server, since ours is very old and
needs replacing and also provide VPN management to move this away from the
current server


any suggestions most welcomed

"Trumpeteer" wrote:

>
> Andy Wolsten wrote:
> > Hi,
> >
> > We are trying to setup ISA on a DMZ network, seperated by firewal
> >
> > What i need to know is, what ports do i need to open so that the ISA server
> > can communicate network information.
> >
> > Do we need to browse the server from the internal network or should we just
> > stick it out there and block everything.
> >
> >
> > advice on configuration would be appreciated
>
> It depends on how you want to use ISA server. The easiest way is to
> make it your firewall, and loose the "network" firewall. Do not be
> concerned, all features in the "network" firewall are in ISA, and
> better!
>
> If you want to use ISA with AD integration, there should be a number of
> ports open on the DMZ-firewall to make it possible.
>
> You could also look here:
> http://www.microsoft.com/isaserver/p...sestudies.mspx but those
> documents may seem to be a bit too much....
>
> Greetz,
>
> Trumpeteer
>
>