Registered users    
MembershipMembership:
Latest New UserLatest:Michael Battaglia
New TodayNew Today:10
New YesterdayNew Yesterday:12
User CountOverall:23326

Private messaging    
You must be logged in to use this module.
Top 10 posters    
NamePosts
Mariette Knap12894
Marina Roos12507
Eriq Neale2114
Stan Guinn1913
Michael Patrick1912
Robert Pearman1771
Nick Pieters1425
Stewart Brown616
william warren601
Kevin D.579
Welcome unauthorized visitor    
If you want to join us in the discussions on this forum you need to register first. Registration is free! If you are already a registered user please login to join the forum.
Small Business Server Support Forum    
Subject: Exchange 2007 BEHIND ISA 2004
Prev Next
You are not authorized to post a reply.

Author Messages
brian sight User is Offline
United States
Member since
6/30/2007

Registered Users
Posts: 3

8/07/2007 09:02 PM  
I want to set up an Exchange 2007 server for testing and learning, and I want to protect it (preferably transparently) using my production SBS 2003 Premium Server (running ISA 2004 and Exchange 2003).

I do NOT want to join the new Exchange 2007 server (Windows Server 2003 Standard Ed) to my domain.

I DO want to have test users access it through the Internet (OWA, Outlook via HTTP, pushMail).

I would appreciate advice on setting up SBS / ISA 2004 to allow this.

Also:
I have an extra public IP I CAN use.
I have a separate Domain name I WANT to use.
Can this be done using ISA Web Listeners somehow?

Thanks!!
robert pearman User is Offline
United Kingdom
Member since
2/23/2007

Platinum Membership
Posts: 1771

8/09/2007 11:41 AM  
yes yes yes and yes.

it can be done. for how long it would work, i cannot say.

SBS is not comfotable with other DC's on its network.

Now there are several things you can do, install a new NIC to the server, make isa a three legged permieter, and sheild all traffic except smtp and OWA from that new network.

using the web listener you can point all traffic to a certain external IP to this new network.

in short you can do all you want, but i cant give you step by step guide as i would be here all day.

things to look for - does you isa connect directly to internet, or through adsl modem. can the adsl modem/ router support multiple public Ip's.

if it does, its easy :)
Nick Pieters User is Offline
Belgium
Member since
8/4/2005

Registered Users
Posts: 1425

8/11/2007 11:36 AM  
Hi Robert & Brian, some remarks here...

SBS has no problems with DC's in the network, you can have as many DC's in your network as you want, as long you have enough licenses ofcourse...

Adding a 3rd nic will break the SBS wizards on the production server, thus my advice don't do it..

Brian

If you have an extra public ip, a "hardware firewall" would be the best option here, on most firewalls you can assing your 2nd public ip to another port and is easy to allow/deny a rule.

You will need to join that server to the domain. If you want to start playing with it for learning purposes, start using a virtualisation solution.

Nick

MVP-E "Most Valuable Pizza Eater"
--If you never made a mistake, you never tried anything new --
You are not authorized to post a reply.



ActiveForums 3.7
Forum policy    
These Discussion Forums are dedicated to the discussion of the Small Business Server and related server and client software. For the benefit of the community please observe the following posting guidelines:
  1. No Advertising. This includes promotion of commercial products and non-commercial products which are not directly related to Small Business Server and related server and client software.
  2. No Flaming or Trolling.
  3. No Profanity, Racism, or Prejudice.
  4. Site Moderators have the final word on approving/removing a thread or post or comment.