W2k8 - LAN + WAN - Windows FireWall and Advanced Security

Hi,

I have 2 nics LAN and WAN.
Location Type: Private and Public.

If i look into the active Windows Firewall profile only the public is active.

is thare a way to really bind the public profile to the WAN nic and private
profile to the LAN nic at the same time ? so both profiles are active ?

or how can I setup a LAN and WAN firewall on the same server ?

Kind Regards,
Aswin Coolsaet

found something (see quote below)

With windows 7 and RC2 it is possible to bind a profile to a nic. ( as it
should be )

is there any work around in windows 2k8 / vista ?
a possible solution of a merge of the public and private profile and
seperation by ip scopes ?

http://technet.microsoft.com/en-us/l...93(WS.10).aspx
------------------- quote msdn --------------
Windows Vista and Windows Server 2008 support only a single profile on the
computer at a time.
-----------------------------------------------

"Aswin Coolsaet" <(E-Mail Removed)> wrote in message
news:112D278C-4AB6-4B66-8D6A-(E-Mail Removed)...
> found something (see quote below)
>
> With windows 7 and RC2 it is possible to bind a profile to a nic. ( as it
> should be )
>
> is there any work around in windows 2k8 / vista ?
> a possible solution of a merge of the public and private profile and
> seperation by ip scopes ?
>
> http://technet.microsoft.com/en-us/l...93(WS.10).aspx
> ------------------- quote msdn --------------
> Windows Vista and Windows Server 2008 support only a single profile on the
> computer at a time.
> -----------------------------------------------


Not that I've heard of for Windows 2008 or Vista. That's a new feature for
Windows 7. I would imagine to look for that in the next server release, too.

But then again, I normally do not use the Windows firewall in an AD or any
internal infrastructure, and rely on an edge firewall. I mean you would
still have some sort of AV and anti-malware software running, but not the
firewall. It's actually recommended to not use the firewall internally
anyway.

Curious, is this multihomed machine a domain controller? If it is,
multihomed DCs are very problematic and require registry changes to the way
it registers into DNS to force it to work properly as a DC.


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup/forum to benefit from collaboration among
responding engineers, as well as to help others benefit from your
resolution.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
(E-Mail Removed)
http://twitter.com/acefekay

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Hi Ace,

Thank you for your response.
The server is deployed in a SPLA / hosting enviroment.
So yes, we must have a LAN and WAN firewall.

Kind Regards,
Aswin Coolsaet


"Ace Fekay [Microsoft Certified Trainer]" wrote:

> "Aswin Coolsaet" <(E-Mail Removed)> wrote in message
> news:112D278C-4AB6-4B66-8D6A-(E-Mail Removed)...
> > found something (see quote below)
> >
> > With windows 7 and RC2 it is possible to bind a profile to a nic. ( as it
> > should be )
> >
> > is there any work around in windows 2k8 / vista ?
> > a possible solution of a merge of the public and private profile and
> > seperation by ip scopes ?
> >
> > http://technet.microsoft.com/en-us/l...93(WS.10).aspx
> > ------------------- quote msdn --------------
> > Windows Vista and Windows Server 2008 support only a single profile on the
> > computer at a time.
> > -----------------------------------------------
>
>
> Not that I've heard of for Windows 2008 or Vista. That's a new feature for
> Windows 7. I would imagine to look for that in the next server release, too.
>
> But then again, I normally do not use the Windows firewall in an AD or any
> internal infrastructure, and rely on an edge firewall. I mean you would
> still have some sort of AV and anti-malware software running, but not the
> firewall. It's actually recommended to not use the firewall internally
> anyway.
>
> Curious, is this multihomed machine a domain controller? If it is,
> multihomed DCs are very problematic and require registry changes to the way
> it registers into DNS to force it to work properly as a DC.
>
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Please reply back to the newsgroup/forum to benefit from collaboration among
> responding engineers, as well as to help others benefit from your
> resolution.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
> Microsoft Certified Trainer
> (E-Mail Removed)
> http://twitter.com/acefekay
>
> For urgent issues, you may want to contact Microsoft PSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
>

"Aswin Coolsaet" <(E-Mail Removed)> wrote in message
news:2B113B05-58E8-4AD5-8682-(E-Mail Removed)...
> Hi Ace,
>
> Thank you for your response.
> The server is deployed in a SPLA / hosting enviroment.
> So yes, we must have a LAN and WAN firewall.
>
> Kind Regards,
> Aswin Coolsaet


You are welcome, Aswin.

Post back if you have any other concerns.

Ace