Setup Pix 515E infront of ISA Server and Exchange Server

April 18, 2007 at 11:51 pm · Filed under Networks

Can anyone help me with setting up this network layout with my Pix Firewall.
Network Layout : Pix > DMZ > ISA Server 2004 > Exchange Server 2003 + Users.

Pix outside IP Address : 65.77.78.47 255.255.255.0
Pix inside IP Address : 172.17.0.1 255.255.0.0
DMZ IP Addresss : 172.18.0.3 255.255.0.0
ISA Server outside IP : 172.18.0.2 255.255.0.0
ISA Server inside IP : 172.18.0.1 255.255.0.0

I’ve identified the interfaces IP Address and named all plus the following config:

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

nat (dmz) 1 0.0.0.0 0.0.0.0 0 0

conduit permit icmp any any

route outside 0.0.0.0 0.0.0.0 65.77.78.1 1

I can now access the internet from my ISA Server in the DMZ zone.

Can you help me shed some light on my configurations?
Reply and answer it here:

http://www.techsoup.org/fb/index.cfm?fuseaction=forums.showSingleTopic&forum=2030&id=67652&cid=117