Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

Topic # 69963 15-Oct-2010 17:26
Send private message

I'm planning on a three-leg backend firewall configuration of ISA, but before I go any furhter I'm wanting to know if anyone can confirm that I can create URL whitelist definitions for a internal network

Create new topic
Infrastructure Geek
4057 posts

Uber Geek
+1 received by user: 195

Trusted
Microsoft NZ
Subscriber

  Reply # 392423 15-Oct-2010 23:23
Send private message

yep. if its for HTTP or HTTPS sites you can 'whitelist' domain names.  for other traffic you can allow by ip address.

you can also whitelist for only authenticated users (e.g. IE users with domain login), or for anonymous access (SNAT).




Technical Evangelist
Microsoft NZ
about.me/nzregs
Twitter: @nzregs




1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

  Reply # 392486 16-Oct-2010 08:59
Send private message

That's the feature I seek to try out, here I go down the rabbit hole. I had no idea about the authenticated user aspect, that will save me having to further split the network.

 
 
 
 




1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

  Reply # 395837 26-Oct-2010 15:22
Send private message

thanks, this was a lot easier that I expected and the desired lock down has been implemented. My mindset was the wrong way around, i.e. I was thinking in the space of an open network, locking down HTTP/HTTPS the opening URLs, however, installed with template option of no access and only open what I want to allow, this has proven to be quite user friendly in the end (after a few false starts ;-)

Infrastructure Geek
4057 posts

Uber Geek
+1 received by user: 195

Trusted
Microsoft NZ
Subscriber

  Reply # 396037 26-Oct-2010 22:52
Send private message

good to hear :)




Technical Evangelist
Microsoft NZ
about.me/nzregs
Twitter: @nzregs




1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

  Reply # 396100 27-Oct-2010 08:12
Send private message

Two remaining challenges are Publishing and VPN. Life is a journey :-)



1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

  Reply # 396139 27-Oct-2010 10:05
Send private message

Does anyone know if you can control DHCP bindings in Server 2003 like you can in 2008?





1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

  Reply # 396663 28-Oct-2010 08:44
Send private message

and the answer is no, this is not available in 2003, only 2008. So, does my old P4 have 64bit extensions so I can install 2008 & forefront, lets find out ...


Infrastructure Geek
4057 posts

Uber Geek
+1 received by user: 195

Trusted
Microsoft NZ
Subscriber

  Reply # 397081 28-Oct-2010 22:55
Send private message

lyonrouge: and the answer is no, this is not available in 2003, only 2008. So, does my old P4 have 64bit extensions so I can install 2008 & forefront, lets find out ...


if you need to know, grab this 100k tool, run on the installed OS, and it will tell you in seconds:
http://www.grc.com/securable.htm

output is like this:





Technical Evangelist
Microsoft NZ
about.me/nzregs
Twitter: @nzregs




1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

  Reply # 398314 1-Nov-2010 08:06
Send private message

Again, another big thanks. This rebuild has really turned out to be bigger than ben hur.



1990 posts

Uber Geek
+1 received by user: 20

Trusted
Lifetime subscriber

  Reply # 398322 1-Nov-2010 08:22
Send private message

this little gem in the help screen I liked

"it's also not at all clear (at the start of 2007) how quickly, or even whether, 64-bit Windows will become practical on the desktop"

Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Geekzone Live »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.