Setup Advice - ISA - SBS 2003 Premium

[SerialCoder]

I just got a new machine and installed SBS 2003 Premium. I created a new domain and it is physically on a seperate network right now.

I have it connected to a cheap firewall/router and was about to dig into exchange when I remembered ISA. Is this worth messing around with?

David Tulk
IS Manager - Dillin Engineered Systems
Conveyor Systems - Accumulation - Robotics - Systems Integration

http://www.dillin.net

 

[markdmac]

Totally depends on your needs. ISA is a great product that will allow you to tightly lock down your network. You can do application level filtering with it but if you are nto familiar with it it can be difficult to manage.

I suggest reading up on ISA a bit so you can make an informed decision. If you need to get up and running quickly, use an inexpensive firewall and only allow ports 25, 80, 443 and 123 to pass.

25 = SMTP
80 = HTTP
443 = HTTPS
123 = Windows Time Service

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

 

[dotobi]

123 = Windows Time Service?

What does this do exactly?

Thanks

 

[PHV]

123 = Windows Time Service?
Network Time Protocol (ntp)

Hope This Helps, PH.
Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884 or FAQ181-2886

 

[dotobi]

no sorry.. what I meant was what will opening this port do? Enable the server to sync to internet time server? Allow external PCs to sync to our internal server???

Thanks

 

[dotobi]

Sorry... I was asumming marc was talking about opening these as incomming ports but I guess they're outgoing ports? To allow users to atleast access the net, send email etc...?

 

[markdmac]

That port is necessary for your first DC (which network clients should be getting time from) to contact the Internet Time Server (SNTP) to get the current time.

I've seen a ton of companies have problems with time services only to discover this port is blocked by their firewall.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript