Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

PIX & MS ISA Server

Hi,

I want to place a PIX to front of Misrosoft ISA Server. It will be : Internet->PIX->ISA->Our LAN.

Do you have some documents about this case? I want to know more about configuration of PIX and ISA.

Thanks

Peter

7 REPLIES
Gold

Re: PIX & MS ISA Server

Hi -

I actually use MS ISA Proxy for www browsing for my inside users, Basically, what you'll require on the PIX is the following:

access-list inside permit tcp host any eq www

access-list inside deny tcp any any eq www

access-list inside permit ip any any

access-group inside in interface inside

Good idea to use static IP for the inside proxy server.

Make sure to do command 'clear xlate' and also save with command 'write memory'

Hope this helps and let me know if need further help.

Thanks, Jay.

New Member

Re: PIX & MS ISA Server

Jay,

there is MS Exchange on inside and MX record in DNS is ISA server. I dont change MX record in DNS.

How it change situation ?

Re: PIX & MS ISA Server

Keep the MX record pointing to the ISA. Setup up ISA as a SMTP relay to your Exchange server. The SMTP filter on ISA is actually pretty good.

New Member

Re: PIX & MS ISA Server

But I must create hole in ASA algorithm for incoming mail messages ? I must create access-list and put it on outside interface?

Peter

New Member

Re: PIX & MS ISA Server

Jay

Do You have ISA in Integrated mode?

Gold

Re: PIX & MS ISA Server

Peter -

The ISA server is only being used for internet traffic filtering, is this what you are trying to do?

Thanks - Jay

New Member

Re: PIX & MS ISA Server

On ISA Server is Mail Relay, and this ISA Server is a MX record in DNS.

Peter

107
Views
3
Helpful
7
Replies