MS Exchange & ISA

**wtaylor** · 23rd June 2008

Can these two progs be run on the same server? Also anybody had any problems with them running together?

**ap0c** · 23rd June 2008

I strongly suggest you run them on separate boxes altho I think you can run them on the same box.

More info: http://technet.microsoft.com/en-us/l...aspx#Scenarios

I suggest you check the network topology to see how ISA protects your exchange box

**tombott** · 23rd June 2008

Mate I'd fuck ISA off. It really is a crock of shit.
You can install with Exchange, but I wouldn't.
What do you currently use ISA for?

**wtaylor** · 23rd June 2008

Originally Posted by tombott

Mate I'd fu(k ISA off. It really is a crock of shit.
You can install with Exchange, but I wouldn't.
What do you currently use ISA for?

Havnt installed it as yet, its a new install. What else would you suggest?

**hjf288** · 24th June 2008

Trend Micro Interscan is a decent viruswall from usage.

**tombott** · 24th June 2008

Originally Posted by wtaylor

Havnt installed it as yet, its a new install. What else would you suggest?

If your just needing to do port forwarding, blocking nasties, presenting Exchange externally, VPN etc then I would go for Smoothwall Express 3

It's free, opensource, 80mb download, will run off any Pentium based machine (I have it running at work on a P3 350 with 128mb Ram).
It's Linux based, but is so easy to setup even Ganty could set it up.
Once initial setup is down, you can stick the box in a corner. No need to plug in a screen, keyboard or mouse.
All admin can be done via web interface.
All settings can be backed up to a floppy disk, and if you need to rebuild / recover then the process takes 10minutes.

**crashtestmac** · 24th June 2008

ISA is not a easy product it requires a lot of patience and work to get it right, but it does give Exchange some added protection that other products cannot do out of the box.

Our ISA guy is on holiday sorry to be a bit vague..!

**tombott** · 24th June 2008

Originally Posted by crashtestmac

ISA is not a easy product it requires a lot of patience and work to get it right, but it does give Exchange some added protection that other products cannot do out of the box.

Our ISA guy is on holiday sorry to be a bit vague..!

To be honest I really just don't think the product is worth the hassle.
I used to use it here, and had it all working without any problems, but it ended up pissing me off that much I jacked it in.

Not sure what you mean about added protection though, most firewalls only allow in / out what you specify.

**crashtestmac** · 24th June 2008

Something to do with forms and authentication, for outlook web access i think.

Not sure.

**Mr.James** · 25th June 2008

isa server will give you added protection for the exchange box as it acts as a go between for the internet user to the exchange server. that way people can't attack your exchange box direct coz ISA server inspects packets for nasty data... installing the both products on the same box would negate this protection though unless you had ISA server proxying to itself... which would defo be a bunch of arse to set up...

i'd go with exchange on a separate box... it's a resource hungry beast... also don't install exchange on a domain controller, especially if it's a global catalog server.