The DMZ is not dead. It’s not even breathing hard. In fact, DMZs become more important every day. No longer can you have implicit trust in any network. Back in the days of yore, you could depend on two types of networks: the scary “untrusted” external (Internet) network and the safe and sane (trusted) internal network.
One of the very cool things you can do with ISA firewall is publish multiple Web sites using a single IP address on the external interface. You can use a single IP address on the external interface of the ISA firewall to publish multiple sites, or if you have a hundred addresses on the external interface. The ISA firewall’s Web proxy filter component is what makes it all happen.
In the first four parts of this series on creating a network services segment using ISA firewalls, we discussed general DMZ and perimeter segment networking principles and design concepts, configuration of the network services segment ISA firewall, and routing principles and procedures required to make our solution work. We also configured the edge ISA firewall so that users on the Corpnet ISA firewall Network could gain access to Internet resources and external users could access Exchange Server resources located on the network services segment.
This is the second part article of a four part article series which will show you how to install and configuring ISA Server 2004 Enterprise Edition on two ISA Server Firewall members.
We are pleased to announce the launch of our latest site – MSTerminalServices.org - a site completely dedicated to Terminal Services and Server Based Computing related topics such as Application Hosting, Security lockdown, Profile management, Virtualization and much more...
As we all know, ISA Server 2004 is a firewall and its function is to block all unnecessary traffic. But sometimes it is also necessary to bypass the traffic without going through the ISA Server. The following section will explain the options available on ISA Server 2004 and on the client side to achieve this.
In the first three parts of this series on configuring a network services segment behind an ISA firewall, we began by going over concepts and considerations in creating perimeter networks. In part 2, we discussed the initial configuration of the network services perimeter ISA firewall. In part 3 we continued configuring the network services perimeter ISA firewall by adding Web Publishing Rules, Server Publishing Rules and Access Rules. In this, part 4 of the series, we’ll move out attention to the edge ISA firewall.
Featured Links*
Receive all the latest articles by email!
Receive Real-Time & Monthly ISAserver.org article updates in your mailbox. Enter your email below! Click for Real-Time sample & Monthly sample
Become an ISAserver.org member!
Discuss your ISA Server issues with thousands of other ISA Server experts. Click here to join!