Registered users    
MembershipMembership:
Latest New UserLatest:Chris Naylor
New TodayNew Today:10
New YesterdayNew Yesterday:11
User CountOverall:23325

Private messaging    
You must be logged in to use this module.
Top 10 posters    
NamePosts
Mariette Knap12894
Marina Roos12507
Eriq Neale2114
Stan Guinn1913
Michael Patrick1912
Robert Pearman1771
Nick Pieters1425
Stewart Brown616
william warren601
Kevin D.579
Welcome unauthorized visitor    
If you want to join us in the discussions on this forum you need to register first. Registration is free! If you are already a registered user please login to join the forum.
Small Business Server Support Forum    
Subject: Fortigate with ISA2004
Prev Next
You are not authorized to post a reply.

Author Messages
g m User is Offline
Hong Kong
Member since
4/1/2008

Registered Users
Posts: 9

4/08/2008 06:28 PM  
Hi, anybody have experience to set a hardward firewall such as fotigate 60 to migrate with ISA2004 in SBS2003?
 
We found there're few setting task template at ISA2004 not only edge firewall setting but also had back-end firewall, front-end firewall, 3-leg perimiter. Or, is it set available one single nic network?
 
As we're using fortigate at front for UTM protection that why to looking for any possibility put it into network.
Kevin Da Silva User is Offline
Mississauga, Canada
Member since
1/12/2008

Registered Users
Posts: 579

4/08/2008 07:22 PM  
ISA will only allow the web caching component if it only has a single NIC. ISA can perfom all the roles you mentioned above very well so long as it is configured correctly.

MCSE:Messaging, MCTIP, SBS Specialist
g m User is Offline
Hong Kong
Member since
4/1/2008

Registered Users
Posts: 9

4/09/2008 03:21 PM  
We understood how powerful ISA it was. We're using SBS2003 premium SP1 upgrade to R2, all ISA2004 setting is based by default set up & enabled edge firewall with 2 nics. 2 workstation is set firewall client, another is set by SecureNAT client.
After that, we found few of problem is happened
1) Create policy - We tried to create new policy but it seems not have responsed
- we followed manuel guide to set a new rule for MSN messenger & allow a "Full access group user" no limited to access https & http protocol, however, once this rule was enabled, all other user could not access internet.
2) Few of inbounding / outbounding mail was holded on query or failed especial with attachment more than 2M (already added SPF & revserDNS record at DNS)
3) FTP upload & download from internet, it's same case of files greater than 2M
4) We're tried to increase quota & cache but case was not improved.

We're scanned with "the best prastise ISA", it's no error report came out. How can we check it out & fix it?
You are not authorized to post a reply.



ActiveForums 3.7
Forum policy    
These Discussion Forums are dedicated to the discussion of the Small Business Server and related server and client software. For the benefit of the community please observe the following posting guidelines:
  1. No Advertising. This includes promotion of commercial products and non-commercial products which are not directly related to Small Business Server and related server and client software.
  2. No Flaming or Trolling.
  3. No Profanity, Racism, or Prejudice.
  4. Site Moderators have the final word on approving/removing a thread or post or comment.