PIX & MS ISA Server

[pslavkovsky]

Hi,

I want to place a PIX to front of Misrosoft ISA Server. It will be : Internet->PIX->ISA->Our LAN.

Do you have some documents about this case? I want to know more about configuration of PIX and ISA.

Thanks

Peter

[jmia]

Hi -

I actually use MS ISA Proxy for www browsing for my inside users, Basically, what you'll require on the PIX is the following:

access-list inside permit tcp host any eq www

access-list inside deny tcp any any eq www

access-list inside permit ip any any

access-group inside in interface inside

Good idea to use static IP for the inside proxy server.

Make sure to do command 'clear xlate' and also save with command 'write memory'

Hope this helps and let me know if need further help.

Thanks, Jay.

[pslavkovsky]

Jay,

there is MS Exchange on inside and MX record in DNS is ISA server. I dont change MX record in DNS.

How it change situation ?

[travis-dennis_2]

Keep the MX record pointing to the ISA. Setup up ISA as a SMTP relay to your Exchange server. The SMTP filter on ISA is actually pretty good.

[pslavkovsky]

But I must create hole in ASA algorithm for incoming mail messages ? I must create access-list and put it on outside interface?

Peter

[pslavkovsky]

Jay

Do You have ISA in Integrated mode?

[jmia]

Peter -

The ISA server is only being used for internet traffic filtering, is this what you are trying to do?

Thanks - Jay

[pslavkovsky]

On ISA Server is Mail Relay, and this ISA Server is a MX record in DNS.

Peter