+ Post New Thread
Page 3 of 3 FirstFirst 123
Results 31 to 41 of 41
Educational Software Thread, Implemeting an ISA Server in Technical; your arguing that IPV6/ISA is only secure if you don't use it???? WTF?...
  1. #31


    Join Date
    Jan 2006
    Posts
    8,202
    Thank Post
    442
    Thanked 1,032 Times in 812 Posts
    Rep Power
    339

    Re: Implemeting an ISA Server

    your arguing that IPV6/ISA is only secure if you don't use it???? WTF?

  2. #32

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,643
    Thank Post
    895
    Thanked 1,314 Times in 798 Posts
    Blog Entries
    1
    Rep Power
    444

    Re: Implemeting an ISA Server

    Quote Originally Posted by CyberNerd
    your arguing that IPV6/ISA is only secure if you don't use it???? WTF?
    I am saying that ISA server is a secure IPv4 firewall. It does not support IPv6 filtering as it states on MS, so unless you need specific IPv6 filtering (note: it will still pass through but thats the concern in point) then ISA 2004 is perfect for the job. Just dont allow/install it on the gateway.
    As of right now I cant think of a real reason that you need external IPv6 traffic, nothing requires it that our school needs as far as I have found.
    If/When IPv6 is a standard you can get the upgrade for ISA and buy support then for it.
    If you can tell me of a true *need* for allow IPv6 out of your network on to the internet, and supporting it internally to allow this, please tell me as it may be something we have not considered. But right now our network users have no need of IPv6 filtering/access. If in the future we do I will simply upgrade ISA.

    This thread seems rather OT now as ISA security was not really the question in the original post.

  3. #33


    tom_newton's Avatar
    Join Date
    Sep 2006
    Location
    Leeds
    Posts
    4,463
    Thank Post
    866
    Thanked 845 Times in 667 Posts
    Rep Power
    195

    Re: Implemeting an ISA Server

    Can we make it more OT and start speculating about IPv6 please?

  4. #34

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Implemeting an ISA Server

    Only thing I can think of related to IPv6 is that some OS's have it enabled by default (Mac OS X, Vista, Linux). So given the chance, they will talk IPv6 to anyone that asks.

    I imagine things could end in tears if your relying on your firewall to block IPv6 and it's oblivious.

  5. #35

    Join Date
    Oct 2005
    Location
    East Midlands
    Posts
    737
    Thank Post
    17
    Thanked 105 Times in 65 Posts
    Rep Power
    36

    Re: Implemeting an ISA Server

    IPv6 will probably be supported in future service packs for isa server 2004/2006.

    I agree that at present there is no need for it considering IPv4 had NAT, QoS and few other tweaks that can be made one can really take ample time to upgrade to IPv6.

    I know all the JANET, UKERNA etc are using the combination of IPv6 and IPv4. There is a hotfix or patch/update for windows xp and 2000 that allows the use of IPv6.

    I like to pop the question regarding ipv6. How many firewalls either first ring or second actually processes IPv6 traffic in the world specific? not many i think so the fact that isa server supports ipv6 or not is not really that important.

    Ash.

  6. #36

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Implemeting an ISA Server

    How many firewalls either first ring or second actually processes IPv6 traffic in the world specific?
    *shrug* The Linux box here understands.

  7. #37

    Join Date
    Oct 2005
    Location
    East Midlands
    Posts
    737
    Thank Post
    17
    Thanked 105 Times in 65 Posts
    Rep Power
    36

    Re: Implemeting an ISA Server

    @Geoff,

    I meant how many firewall are actually configured to process ipv6 traffic not weather it supports it, understands it, decodes etc.

    Ash.

  8. #38

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Implemeting an ISA Server

    In theory, a well designed firewall should follow a 'default deny' principle. If it understands IPv6, it should block it. If it doesn't understand IPv6, it should still block it (under a blanket 'unknown protocols' block).

    Mine behaves as above, how about everyone else's? We've already established what ISA 2k4 does, yuck!

  9. #39

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,154
    Thank Post
    114
    Thanked 527 Times in 450 Posts
    Blog Entries
    2
    Rep Power
    123

    Re: Implemeting an ISA Server

    Quote Originally Posted by Geoff
    Does Windows Update download patches for ISA? Or do you have to go hunting for them?
    Yes - as long as you have ISA 2004 or ISA 2006.

  10. #40

    Join Date
    Oct 2005
    Location
    East Midlands
    Posts
    737
    Thank Post
    17
    Thanked 105 Times in 65 Posts
    Rep Power
    36

    Re: Implemeting an ISA Server

    Quote Originally Posted by Geoff
    In theory, a well designed firewall should follow a 'default deny' principle. If it understands IPv6, it should block it. If it doesn't understand IPv6, it should still block it (under a blanket 'unknown protocols' block).

    Mine behaves as above, how about everyone else's? We've already established what ISA 2k4 does, yuck!
    Begs the question again!! who is actually using IPv6? if people are really desperate to run IPv6 (I can't think of any at the mo.) then install additional tool to block IPV6 and ipv6 supports authentication and its own security anyway (network layer security) so i don't really see how this is going to cause any problems. I don't see many people rushing to join the IPv6 revolution.

    Geoff are you slagging off the isa server because its from MS, smell like that to me here, get the penguins out your heads once in a while.

    Ash.

  11. #41

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,803
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Implemeting an ISA Server

    I've no idea who uses IPv6. I know m6bone exists. On a more practical note, I think 4to6 (or vice versa) is a more likely usage.

    My main point was, IPv6 is here. Devices use it, and some things have it enabled by default. Thus you need to deal with it, if you like it or not.

    ZeroHour pointed out that ISA ignored it, I pointed out that this was silly and can lead to tears. If ZeroHour was wrong stating this fact, please let the both of us know.

SHARE:
+ Post New Thread
Page 3 of 3 FirstFirst 123

Similar Threads

  1. Server 2003 R2 File Server Resource Manager
    By Dos_Box in forum How do you do....it?
    Replies: 1
    Last Post: 12th October 2007, 12:28 PM
  2. Replies: 5
    Last Post: 5th July 2007, 11:43 PM
  3. Windows Server 2003 File Server Resource Manager
    By mrforgetful in forum Windows
    Replies: 1
    Last Post: 17th June 2007, 01:51 PM
  4. Virtual Server 2005 R2 kills server network connection
    By ajbritton in forum Thin Client and Virtual Machines
    Replies: 0
    Last Post: 31st August 2006, 06:19 AM
  5. Downsides to passing tftp server via 2003 DHCP server?
    By pete in forum Wireless Networks
    Replies: 7
    Last Post: 11th July 2006, 10:07 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •