topic Re: PIX & MS ISA Server in Network Security

PIX & MS ISA Server

pslavkovsky — Fri, 21 Feb 2020 07:00:09 GMT

Hi,

I want to place a PIX to front of Misrosoft ISA Server. It will be : Internet->PIX->ISA->Our LAN.

Do you have some documents about this case? I want to know more about configuration of PIX and ISA.

Thanks

Peter

jmia — Mon, 22 Sep 2003 11:22:20 GMT

Hi -

I actually use MS ISA Proxy for www browsing for my inside users, Basically, what you'll require on the PIX is the following:

access-list inside permit tcp host any eq www

access-list inside deny tcp any any eq www

access-list inside permit ip any any

access-group inside in interface inside

Good idea to use static IP for the inside proxy server.

Make sure to do command 'clear xlate' and also save with command 'write memory'

Hope this helps and let me know if need further help.

Thanks, Jay.

pslavkovsky — Mon, 22 Sep 2003 11:39:35 GMT

Jay,

there is MS Exchange on inside and MX record in DNS is ISA server. I dont change MX record in DNS.

How it change situation ?

travis-dennis_2 — Mon, 22 Sep 2003 11:53:25 GMT

Keep the MX record pointing to the ISA. Setup up ISA as a SMTP relay to your Exchange server. The SMTP filter on ISA is actually pretty good.

pslavkovsky — Mon, 22 Sep 2003 12:01:29 GMT

But I must create hole in ASA algorithm for incoming mail messages ? I must create access-list and put it on outside interface?

Peter

pslavkovsky — Mon, 22 Sep 2003 12:03:20 GMT

Jay

Do You have ISA in Integrated mode?

jmia — Mon, 22 Sep 2003 16:27:56 GMT

Peter -

The ISA server is only being used for internet traffic filtering, is this what you are trying to do?

Thanks - Jay

pslavkovsky — Tue, 23 Sep 2003 06:05:01 GMT

On ISA Server is Mail Relay, and this ISA Server is a MX record in DNS.

Peter