Part 3: Infrastructure essentials Blogcast - ISA Firewall client

re: Part 3: Infrastructure essentials Blogcast - ISA Firewall client

Stuart — Fri, 05 Aug 2005 01:02:12 GMT

Nice blogcast series. One question so far... Is the ISA server part of your domain or is it in a seperate workgroup?

Cheers - Stuart.

re: Part 3: Infrastructure essentials Blogcast - ISA Firewall client

jhoward — Fri, 05 Aug 2005 16:54:39 GMT

Thanks Stuart. Yes, the ISA Server is part of the contoso.com domain. Regards, John.

Part 4: Infrastructure essentials Blogcast - ISA and WPAD configuration

John Howard — Thu, 11 Aug 2005 10:49:22 GMT

Continuing the blogcast series on infrastructure essentials.
Where we left off, we were able to browse...

re: Part 3: Infrastructure essentials Blogcast - ISA Firewall client

Kieran Jacobsen — Sat, 13 Aug 2005 03:23:17 GMT

Surely it would be more secure not to have the ISA box as part of the domain. I mean, if its rooted your in big trouble.

re: Part 3: Infrastructure essentials Blogcast - ISA Firewall client

jhoward — Mon, 15 Aug 2005 12:34:08 GMT

This is a tough choice and the decision needs to be taken carefully. _Personally_, I think that hardening the ISA server following guidance at http://www.microsoft.com/isaserver/techinfo/guidance/2004/planning.mspx (eg Hardening the Windows Infrastructure on the ISA Server 2004 computer and ISA Server 2004 Security Hardening Guide docs at this link), using SCW etc are easier than the a workgroup ISA (eg the ISA Server 2004 Enterprise Edition in a workgroup document). It's a balancing act of paranoia and satisfaction that you have a hardened server. You also get other benefits such as group policy if you domain join the ISA. I know this is an emotive subject which inevitably will end up with a 50/50 split between what people decide is best for them.

Part 5: Infrastructure essentials Blogcast - Exchange mailbox and Outlook Profile

John Howard — Wed, 17 Aug 2005 19:23:43 GMT

Continuing the blogcast series on infrastructure essentials.
The next stage in our infrastructure is...

Part 7: Infrastructure essentials Blogcast - Our first certificate authority

John Howard — Fri, 02 Sep 2005 16:49:34 GMT

Continuing the blogcast series on infrastructure essentials.
We're now moving towards making Outlook...