Re: Microsoft ISA Server

[Mikael Olsson <mikael.olsson () clavister com>]

Bill Royds wrote:
> [MS ISA server]
> - is a true Application Gateway server, but has limits on which 
>   services it provides

Actually, this is only partly true. It is an application layer
gateway for most outbound stuff, but for inbound stuff it is a
stateless (yes, state _less_) packet filter.

> What I would recommend is to use it behind a stateful filter firewall 

I agree fully. If you have a microsoft-centric network, the 
outbound authentication may be just what you need, and the
cacheing reportedly works well.  But protect it with a "real" [1]
firewall, and don't use it for inbound filtering.


-- 
Mikael Olsson, Clavister AB
Storgatan 12, Box 393, SE-891 28 ÖRNSKÖLDSVIK, Sweden
Phone: +46 (0)660 29 92 00   Mobile: +46 (0)70 26 222 05
Fax: +46 (0)660 122 50       WWW: http://www.clavister.com

[1] No, I don't consider ISA a real firewall; bring the flames on! :)
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards