Security, Security and Security...

[Mar1K]

Originally Posted by freedom4ever

I already did that in my home this is not the issue,
I know that the network is not secure at all.
Currently what i am concerned with is to keep my network like it is and build a parallel one with good infrastructure.
There is a priority with controlling the access to the internet.
So i think Active Directories along with ISA server are a priority.

Okay, What services would you like to allow in and what services do you want out (ports, protocols, programs)?

Are you running a web server, db server etc...? and which is accessible internally and which one is accessible from the net?

Are you considering a proxy to monitor exact activies and do caching?

Do you want to distinguish user groups? Group 1 gets to browse, Group 2 gets to use msn, etc... ?

What is your ISA server exact version and build?

I will post some screenshots of the config only if i was able to obtain the same version you got, i think i have a 2000 version (which is probably extinct). If i cant find the version, I will post the config anyway but i may not be able to provide screenshots.

[freedom4ever]

Originally Posted by Mar1K

Okay, What services would you like to allow in and what services do you want out (ports, protocols, programs)?

Are you running a web server, db server etc...? and which is accessible internally and which one is accessible from the net?

We have as i already mentioned a DB server for a desktop application that we use for management.
For sure i need to grant access for this application.

Are you considering a proxy to monitor exact activies and do caching?

Monitoring is not required at the moment, controlling the access to the internet is a priority, the connection is being abused.

Do you want to distinguish user groups? Group 1 gets to browse, Group 2 gets to use msn, etc... ?

Yes for Sure, I need a group that has a full access to the internet,
Another Group that has only access to webmail/SMTP
and a Guest Group that the company guest can access internet temporarly/maybe we can provide a password.

What is your ISA server exact version and build?

ISA Server 2004

I will post some screenshots of the config only if i was able to obtain the same version you got, i think i have a 2000 version (which is probably extinct). If i cant find the version, I will post the config anyway but i may not be able to provide screenshots.

Is it a necessity to start with the active directories and creating user before start using ISA?
or i am able to manage and create user from ISA?

Thank You.

[Mar1K]

Originally Posted by freedom4ever

We have as i already mentioned a DB server for a desktop application that we use for management.
For sure i need to grant access for this application.


Monitoring is not required at the moment, controlling the access to the internet is a priority, the connection is being abused.


Yes for Sure, I need a group that has a full access to the internet,
Another Group that has only access to webmail/SMTP
and a Guest Group that the company guest can access internet temporarly/maybe we can provide a password.



ISA Server 2004



Is it a necessity to start with the active directories and creating user before start using ISA?
or i am able to manage and create user from ISA?

Thank You.

freedom4ever sorry for my late reply, i had to deliver a project that was overdue. Can you provide a copy of the software because i could not find it so i can install and provide screenshots?

If you need to integrate ISA with Active directory you will definitely need to finish designing your AD tree first before working on your ISA.

[Faithful]

Thank you Mar1 for this thread

I have a question for you or for anyone who already installed ISA Server 2004.

Is it better if we make ISA server 2004 a member of the domain or keep it in Workgroup ? .... and why ?

[Osiris]

Originally Posted by Faithful

Thank you Mar1 for this thread

I have a question for you or for anyone who already installed ISA Server 2004.

Is it better if we make ISA server 2004 a member of the domain or keep it in Workgroup ? .... and why ?

Faithful,

Check out this page.
It has all the advantages and disadvantages of Domain vs Workgroup installation of ISA Server 2004.

Deployment Recommendations for ISA Server 2004 in a Workgroup or Domain