Sign in
Microsoft.com
 
Forefront Edge Security TechCenter
 
 
 
Forefront Edge Security TechCenter > Forefront Edge Security Forums > Forefront Edge Security - Firewall Client > Question About ISA server 2006
Ask a questionAsk a question
Search Forums:
 

AnswerQuestion About ISA server 2006

  • Thursday, July 16, 2009 10:38 PMbestqueenaou Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    I hope every one have a good day

    I have question

    can  I conect two DC (Domain Controller ) to one ISA server?
    Note:
    Each DC has different pollicy from another .For example,
    I have two DC for two servers first DC for first server and second DC for second server 
    first one emploee DC for first server ,and LAB DC for second server
    becouse, I want to make some pollicy to employee dc differ from LAB dc .like : I want to allow to all employee to see all sites 
    but I do not want to allow to users in LAB (computer lab) to see all sites from internet 

    that is right?or can I do it?


    thanx 
     

Answers

  • Friday, July 17, 2009 8:05 PMMarc.GroteMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    Hi,

    OK, Domains in different domains in the same Forest or different domains in different Forest (one DC in Forest 1 and one DC in Forest 2)? It is possible to use ISA with different domains if there is a trust relationship between the two domains so you can use users from different domains in your ISA Firewall rules.

    regards Marc
    www.nt-faq.de
    www.it-training-grote.de
     

All Replies

  • Friday, July 17, 2009 4:16 AMMarc.GroteMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Hi,

    you can use different user groups and users in ISA Firewall rules. But one question is not clear for me- Do you mean with two DC two DC in the same domain or different Active Directory forest?

    regards Marc
    www.nt-faq.de
    www.it-training-grote.de
     
  • Friday, July 17, 2009 2:34 PMbestqueenaou Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote

    Good evening all

    Thank you so much Mr.Marc for your help and reply

    you asked me what I mean with (two DC)?

    I have two DC each one has domain (different domain )

    first DC with domain for employee ,and second DC with another domain for students

    my question :

    Can I use one ISA server for these Domains (but,take in your  account each domain has different rules or pollicy from another) for example ,employee can see all web sites from internet .but student can not see all sites from internet like facebook and another sites .??


    thanx agine  

     
  • Friday, July 17, 2009 8:05 PMMarc.GroteMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Sign In to Vote
    0
    Sign In to Vote
    Hi,

    OK, Domains in different domains in the same Forest or different domains in different Forest (one DC in Forest 1 and one DC in Forest 2)? It is possible to use ISA with different domains if there is a trust relationship between the two domains so you can use users from different domains in your ISA Firewall rules.

    regards Marc
    www.nt-faq.de
    www.it-training-grote.de
     
  • Thursday, July 23, 2009 3:35 PMMarc.GroteMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Hi,

    yes, you can use different user groups and accounts in your Firewall policy rules.

    regards Marc
    www.nt-faq.de
    www.it-training-grote.de
     
  • Thursday, July 23, 2009 4:54 PMbestqueenaou Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Sign In to Vote
    0
    Sign In to Vote
    Hi

    Thanks alot Mr. Marc

    yes, what you said that what I wanted



    Good Luck