I've used and deployed ISA for a long time - in both stand alone and AD Integrated mode with multiple array members. It is an amazing firewall product that has enabled us to do a great deal that would have been impossible otherwise.
We've been running various 2004 versions in BETA and really like it - though they have made its use so easy, we feel a little melancholy, because to do some very advanced things in the 2000 Standard and Enterprise versions, one had to have a pretty solid handle on Internet security and MS Servers. It's been made almost too easy - about like Exchange 2003 - just stupid easy. I'd use and do use ISA over any other Firewall - despite using many appliances in routed mode as either border or bulk-head firewalls. ISA is definately many fold above all applicances we have used and it is ICSA Group IV certified. With the new quarantine tools one can use opposite remote users, it is really something and can keep things secured very well. These new tools allow one to ensure remote users are configured properly and do not present a risk to the perimeter and internal networks. We also really like the content and URL cache - in fact, not being behind ISA, even on an OC, feels slow. It's also extremely easy to set up alternate routes so one can service ISA Member servers at will and not take down essential services. Combined with EX2K3 and RPC over HTTPS, it just rocks and Panda has some great VSAPI AV scanners for it. Finally, using its message screener really helps cut down on the junk one normally would see.
|