EXPERT RESPONSE
VIEW MEMBER FEEDBACK TO THIS ASK THE EXPERT Q&A.
Yes, you need to have two NIC cards to support the Reverse Proxy function of ISA Server for OWA and OMA. You can still have ISA Server in the DMZ of a third-party firewall. Regardless of the firewall you utilize to create the DMZ, ISA Server in the DMZ has become the recommended configuration from Microsoft for providing the best security for Exchange 2003. See the Microsoft article, Using ISA Server 2004 with Exchange Server 2003, for more information.
MEMBER FEEDBACK TO THIS ASK THE EXPERT Q&A:
Actually you do not need two NICs for the Reverse Proxy function. This is one of the only configurations for ISA Server that does not require another NIC. We have this same setup in our environment where ISA Server is only used for Outlook Web Access (OWA), and we only have one NIC card installed.
Daniel B.
Do you have comments on this Ask the Expert Q&A? Let us know.
Related information from SearchExchange.com:
Expert Advice: Setting up ISA servers
Expert Advice: Firewall recommendations and VPN support
Article: Should you use ISA Server as your Exchange firewall?
Step-by-Step Guide: How to use ISA Server as an SMTP filter
Reference Center: Exchange Server firewalls tips and resources
Reference Center: ISA Server tips and resources
|