Announcement

Collapse
No announcement yet.

ISA Cache

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • ISA Cache

    Hi Guys,

    I want to install ISA 2006 but only using the Cache features, is this possible?

    We already have a firewall etc I just want to use the Caching in ISA.

  • #2
    Re: ISA Cache

    Sure, use the ISA with a Single nic (template)
    However you will loose all firewall capabilties, and will only work for HTTP, HTTPS and FTP (over HTTP)
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: ISA Cache

      As I said we already have a Cisco Firewall, I just want ISA as a caching server, how do i get clients to sort of re-direct to the ISA so its used as a caching box, do I install the MS Firewall Client?

      Comment


      • #4
        Re: ISA Cache

        Yes you can install the firewall client but there is not really a need for it.
        The firewall client is more there for complex protocols like FTP or other protocols which you need authentication for.

        Since the proxy only mode doesn't support this, there isn't really a need for it to install the Firewall client.

        What you can do is using a GPO to configure the web browser and/or use a wpad entry either in DNS or DHCP.
        If you use a wpad entry you have to change the setting in IE to automatically detect settings.
        Also this can easily be configured with a GPO.

        An other option is to put the ISA in line with the ASA (as a back-to-back configuration)
        In that case you can use all the capabilities ISA can offer where as ASA can't.
        Marcel
        Technical Consultant
        Netherlands
        http://www.phetios.com
        http://blog.nessus.nl

        MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
        "No matter how secure, there is always the human factor."

        "Enjoy life today, tomorrow may never come."
        "If you're going through hell, keep going. ~Winston Churchill"

        Comment


        • #5
          Re: ISA Cache

          We are a school and the Proxy settings are pointed to are filtering so I cant change the proxy settings, how do the clients see the ISA for caching

          Comment


          • #6
            Re: ISA Cache

            Huh? where are the proxy settings pointing to?
            Marcel
            Technical Consultant
            Netherlands
            http://www.phetios.com
            http://blog.nessus.nl

            MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
            "No matter how secure, there is always the human factor."

            "Enjoy life today, tomorrow may never come."
            "If you're going through hell, keep going. ~Winston Churchill"

            Comment


            • #7
              Re: ISA Cache

              Sorry,

              The whole school has a proxy pointed to some proxy servers which are provided by the ISP who as I said manage the filtering for the school, I just want to put a ISA Cache server in

              Comment


              • #8
                Re: ISA Cache

                You won't be able to use ISA in this configuration then, unless you can change the proxy settings to point to the ISA Server. If the upstream proxy is also an ISA Server you can configure proxy chaining.

                As Dumber said re-configuring the clients to use ISA as a cache/proxy/firewall with a dual NIC configuration on the ISA Server (Back firewall behind the Cisco) is a better solution.
                BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
                sigpic
                Cruachan's Blog

                Comment


                • #9
                  Re: ISA Cache

                  The traffic has to go to (or through) the ISA server in order to use the Caching option.
                  How else would the clients be able to contact the ISA server to resolve the caching?
                  What use will it have if the ISA is standing there but no client is able to contact it??

                  Anyhow, what kind of filtering is your ISP doing? Maybe you can do it at your own or so by using the ISA server.
                  Using a Proxy server over the internet, well hmmm.... Interesting.
                  Like Cruachan (couldn't you choose an easier name to type ) has been pointed out to the upstream proxy server might be an idea.
                  I would contact your ISP and talk to them. Explain them your situation and I assume they are willing to help you.
                  Marcel
                  Technical Consultant
                  Netherlands
                  http://www.phetios.com
                  http://blog.nessus.nl

                  MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                  "No matter how secure, there is always the human factor."

                  "Enjoy life today, tomorrow may never come."
                  "If you're going through hell, keep going. ~Winston Churchill"

                  Comment


                  • #10
                    Re: ISA Cache

                    Originally posted by Dumber View Post
                    Like Cruachan (couldn't you choose an easier name to type )
                    Couldn't you choose a more descriptive name like "One MS Exam a month at least"?

                    Anyway, talking to the ISP is the best option. I don't see them objecting to anything that enhances security, so long as you are still using the ISA Server behind their proxy.
                    BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
                    sigpic
                    Cruachan's Blog

                    Comment

                    Working...
                    X