Link: Using ISA Server to Extend Server and Domain Isolation Interoperability

in Microsoft on Domain-isolation, Isa server

Microsoft have posted a whitepaper on utilising ISA Server as an IPSec gateway/proxy in a domain or server isolation environment to extend IPSSec protection to machines that do not support IPSec. This essentially involves ISA Server terminating the IPSec connection and passing traffic into a NAT’d network. It’s a 23 page document and applies to both ISA Server 2004 and 2006:

This white paper details how to use ISA Server as an IPsec gateway or proxy within a Server and Domain Isolation solution, from preparation to installation and configuration, and includes best practices to keep in mind during the process. It is written for enterprise technical decision makers, IT administrators, and architects who want to gain a better understanding of the processes and implementation of ISA Server as an IPsec gateway or proxy to extend IPsec interoperability.

Using ISA Server to Extend Server and Domain Isolation Interoperability

UPDATE: Ian Hameroff has more information at his post: Using ISA Server to Extend Server and Domain Isolation to non-Windows Platforms