Announcement

Collapse
No announcement yet.

What to use in place of ISA?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • What to use in place of ISA?

    Hi,
    I have a customer that has a small installation of 8 PC's. They want a server but would also like to keep an eye on internet usage, sites visited from each login and the possibility to block certain URL's.

    Now that SBS does not contain ISA, what, if anything are you replacing it with?

    Thanks
    Mike

  • #2
    Re: What to use in place of ISA?

    Well in that case you where probably better of with EBS 2008 where forefront TMG was included.
    Since I don't know any version from SBS which also deploys TMG you should place a separate ISA 2006 or TMG box in front.
    Well, that is what I should do....
    Marcel
    Technical Consultant
    Netherlands
    http://www.phetios.com
    http://blog.nessus.nl

    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
    "No matter how secure, there is always the human factor."

    "Enjoy life today, tomorrow may never come."
    "If you're going through hell, keep going. ~Winston Churchill"

    Comment


    • #3
      Re: What to use in place of ISA?

      Originally posted by Dumber View Post
      Well in that case you where probably better of with EBS 2008 where forefront TMG was included.
      Since I don't know any version from SBS which also deploys TMG you should place a separate ISA 2006 or TMG box in front.
      Well, that is what I should do....
      Thanks, I was hoping to keep the cost down and not have another PC just for this. Hmm, I guess I could go for SBS 2003 R2 Premium edition ?

      Comment


      • #4
        Re: What to use in place of ISA?

        Instead of SBS 2008?
        sure or review EBS2008
        Marcel
        Technical Consultant
        Netherlands
        http://www.phetios.com
        http://blog.nessus.nl

        MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
        "No matter how secure, there is always the human factor."

        "Enjoy life today, tomorrow may never come."
        "If you're going through hell, keep going. ~Winston Churchill"

        Comment


        • #5
          Re: What to use in place of ISA?

          Originally posted by Dumber View Post
          Instead of SBS 2008?
          sure or review EBS2008
          Yes instead of SBS 2008. However I am then concerned about how long the server will be good for. I guess if it lasted 5 years that would be acceptable.

          I have not looked at EBS2008. Not sure of the pricing of that.

          Comment


          • #6
            Re: What to use in place of ISA?

            I also don't know about the pricing
            I don't sell or buy products, I use them
            Marcel
            Technical Consultant
            Netherlands
            http://www.phetios.com
            http://blog.nessus.nl

            MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
            "No matter how secure, there is always the human factor."

            "Enjoy life today, tomorrow may never come."
            "If you're going through hell, keep going. ~Winston Churchill"

            Comment


            • #7
              Re: What to use in place of ISA?

              Options are limited at the moment. Forefront Threat Management Gateway (Or ISA 2009 as I tend to call it for brevity's sake ) is only available as part of Essential Business Server at the moment, the standalone version is still in development.

              ISA 2006 will not run on Server 2008 though, so from a Microsoft point of view you can have EBS 2008, or run a version of Server 2003 with ISA 2006 on it. If you go for SBS 2003 it's ISA 2004 with the Premium Edition, and it can't be upgraded to 2006.
              BSc, MCSA: Server 2008, MCSE, MCSA: Messaging, MCTS
              sigpic
              Cruachan's Blog

              Comment


              • #8
                Re: What to use in place of ISA?

                Originally posted by cruachan View Post
                or run a version of Server 2003 with ISA 2006 on it. If you go for SBS 2003 it's ISA 2004 with the Premium Edition, and it can't be upgraded to 2006.
                ISA 2006 can only run on a Windows 32 bit environment... Just before you choose to use a X64 OS

                But indeed correct, SBS 2003(R2) are only equipped with ISA 2004 and indeed cannot be upgraded.
                Marcel
                Technical Consultant
                Netherlands
                http://www.phetios.com
                http://blog.nessus.nl

                MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                "No matter how secure, there is always the human factor."

                "Enjoy life today, tomorrow may never come."
                "If you're going through hell, keep going. ~Winston Churchill"

                Comment


                • #9
                  Re: What to use in place of ISA?

                  We replaced our ISA servers with Kerio Winroute :

                  http://www.kerio.com/kwf_home.html

                  Fantastic product. Does the same thing, but is easier to configure & use.

                  Comment


                  • #10
                    Re: What to use in place of ISA?

                    Hmmm Kerio don't seem to know what ISA can do....
                    And although I'm not as good as Jason Jones or Thomas Shinder from ISAserver.org and MVP's but I know for sure that Kerio made some mistakes in this document.

                    http://www.kerio.com/img/kwf/kwf65/KWFvsISA-UK.pdf

                    For example:
                    Both ISA 2006 SE and EE support NLB.
                    Users can be indentified within the reports (as long as the webproxy and/or firewall client has been used)

                    I've just done a quick scanning of the document but I found it a bit sad to read.
                    Also it seems you need to pay a yearly fee for the firewall?
                    I wouldn't replace ISA for Kerio. But then again I don't know a lot of Kerio...

                    I know for sure that ISA2004 and up (I haven't done a lot with ISA 2000, it was confusing me) never had such a bug:
                    http://www.webhostingtalk.nl/bugtraq...on-denial.html
                    Marcel
                    Technical Consultant
                    Netherlands
                    http://www.phetios.com
                    http://blog.nessus.nl

                    MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                    "No matter how secure, there is always the human factor."

                    "Enjoy life today, tomorrow may never come."
                    "If you're going through hell, keep going. ~Winston Churchill"

                    Comment


                    • #11
                      Re: What to use in place of ISA?

                      EBS 2008 is really not an option for an 8 PC site.

                      You could have a look at Clark Connect - http://www.clarkconnect.com/. This is a really nice app and can be quickly installed and configured on an older PC. Has oodles of options.
                      1 1 was a racehorse.
                      2 2 was 1 2.
                      1 1 1 1 race 1 day,
                      2 2 1 1 2

                      Comment


                      • #12
                        Re: What to use in place of ISA?

                        I still don't understand why Microsoft has removed TMG from SBS and only include it on EBS.
                        EBS is indeed designed for the midsized organisations.
                        Marcel
                        Technical Consultant
                        Netherlands
                        http://www.phetios.com
                        http://blog.nessus.nl

                        MCITP(EA, SA), MCSA/E 2003:Security, CCNA, SNAF, DCUCI, CCSA/E/E+ (R60), VCP4/5, NCDA, NCIE - SAN, NCIE - BR, EMCPE
                        "No matter how secure, there is always the human factor."

                        "Enjoy life today, tomorrow may never come."
                        "If you're going through hell, keep going. ~Winston Churchill"

                        Comment


                        • #13
                          Re: What to use in place of ISA?

                          For example:
                          Both ISA 2006 SE and EE support NLB.
                          Kerio correctly said that ISA 2006 SE does not support NLB. Here is Microsofts own fact sheet.

                          http://www.microsoft.com/forefront/e.../editions.aspx

                          ISA is not exactly cheap. To get good at it you need to spend considerable time & possibly do certs to round yourself out. With Winroute, you could teach a level 1 tech in 1 hour to be an intermediate to advanced user.

                          Plus it has 10 times the features for a 1/4 the effort of ISA .

                          Comment


                          • #14
                            Re: What to use in place of ISA?

                            Originally posted by Dirky View Post
                            Hi,
                            I have a customer that has a small installation of 8 PC's. They want a server but would also like to keep an eye on internet usage, sites visited from each login and the possibility to block certain URL's.

                            Now that SBS does not contain ISA, what, if anything are you replacing it with?

                            Thanks
                            Mike
                            Guys (and Guyesses), could we please stay on topic. Thanks.
                            1 1 was a racehorse.
                            2 2 was 1 2.
                            1 1 1 1 race 1 day,
                            2 2 1 1 2

                            Comment


                            • #15
                              Re: What to use in place of ISA?

                              A small PC with 20GB HDD, 2GB RAM, 2 NICs and Untangle maybe?
                              cheers
                              Andy

                              Please read this before you post:


                              Quis custodiet ipsos custodes?

                              Comment

                              Working...
                              X