method 2 way to go pal.
----- Original Message -----
From: "Kaneleka" <kaneleka@yahoo.com>
To: <firewalls@securityfocus.com>
Sent: Tuesday, April 26, 2005 2:20 PM
Subject: PIX -> ISA -> OWA Configuration
The following question is directed at experienced professionals with
experience in the components listed under this subject heading.
What is the preferred placement for a OWA front-end server given these two
possible scenarios..
1) [Internet] <==> [PIX Firewall] <==> [ISA Proxy] <==> [PIX Firewall]
<==> [OWA] <==> [Internal w/Exchange Svr]
2) [Internet] <==> [PIX Firewall] <==> [ISA Proxy] <==> [OWA] <==> [PIX
Firewall] <==> [Internal w/Exchange Svr]
Notes:
The ISA server is performing a reverse proxy for HTTPS connections
originating from the Internet.
I am concerned with scenario #1 in that if OWA is compromised through
HTTPS, the attacker would have full access to the Internal network,
whereas in scenario #2 the ports and servers that OWA is allowed to
communicate can be restricted further using the backend PIX firewall.
--------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------
--------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------
