Microsoft ISA Server 2000

AboutThisBook

IntendedAudience

Prerequisites

ReferenceMaterials

AbouttheCD-ROM

FeaturesofThisBook

Notes

Conventions

NotationalConventions

KeyboardConventions

ChapterandAppendixOverview

FindingtheBestStartingPointforYou

WheretoFindSpecificSkillsinThisBook

InstallingISAServer

ConfiguringandTroubleshootingISAServerServices

Configuring,Managing,andTroubleshootingPoliciesandRules

Deploying,Configuring,andTroubleshootingtheClientComputer

Monitoring,Managing,andAnalyzingISAServerUse

GettingStarted

HardwareRequirements

SoftwareRequirements

SetupInstructions

TheMicrosoftCertifiedProfessionalProgram

MicrosoftCertificationBenefits

MicrosoftCertificationBenefitsforIndividuals

Microso8CertificationBenefitsforEmployersandOrganizations

RequirementsforBecomingaMicrosoftCertifiedProfessional

TechnicalTrainingforComputerProfessionals

Self-PacedTraining

OnlineTraining

MicrosoftCertifiedTechnicalEducationCenters

TechnicalSupport

Chapter1IntroductiontoMicrosoftInternetSecurityand

AccelerationSewer2000

AboutThisChapter

BeforeYouBegin

LessonlOverviewofISAServer

EditionsComparison

ISAServerEnterpriseEdition

ISAServerStandardEdition

KeyDifferences

ISAServerRoles

InternetFirewall

SecureServerPublishing

ForwardWebCachingServer

ReverseWebCachingServer

IntegratedFirewallandWebCacheServer

Windows2000Integration

Scalability

Extensibility

ISAServerArchitecture

Practice:ISAServerOverviewPresentation

LessonSummary

Lesson2IntroductiontotheISAServerFirewall

FilteringMethods

IPPacketFiltering

Circuit-Level(Protocol)Filtering

ApplicationFiltering

BandwidthRules

IntegratedVirtualPrivateNetworking

IntegratedIntrusionDetection

PacketFilterIntrusions

SecurePublishing

LessonSummary

Lesson3OverviewofISAServerCaching

High-PerformanceWebCache

ForwardWebCachingServer

ReverseWebCachingServer

ScheduledContentDownload

ActiveCaching

CARPandCacheServerScalability

HierarchicalCaching

WebProxyRouting

LessonSummary

Lesson4ISAServer'sManagementFeatures

IntuitiveUserInterface

IntegratedAdministration

Policy-BasedAccessControl

TieredPolicy

ArrayPolicy

EnterprisePolicy

LessonSummary

Review

Chapter2InstallingMicrosoftInternetSecurityand

AccelerationServer2000

AboutThisChapter

BeforeYouBegin

LessonlPlanningforanISAServerInstallation

CapacityPlanning

MinimalRequirements

RemoteAdministrationRequirements

FirewallRequirements

ForwardCachingRequirements

PublishingandReverseCachingRequirements

ArrayConsiderations

ArrayRequirements

StandaloneServersandSingle-ServerArrays

ISAServerMode

InternetConnectivityConsiderations

PublishingandConnectivity

ISAServerintheNetwork

WindowsNT4.0Domain

ISAServerConfigurationData

InternetConnectionServer

RemoteAccessServer

ISAServerNetworkTopologyScenarios

Small0fficeScenario

EnterpriseScenario

EnterpriseNetworkConfiguration

WebPublishingTopologies

Co-LocatedWebServer

WebServeronLocalNetwork

ExchangeServerPublishingTopologies

Co-LocatedExchangeServer

ExchangeServeronLocalNetwork

PerimeterNetwork(DMZ)Scenarios

Back-to-BackPerimeterNetworkConfiguration

Three-HomedPerimeterNetwork(DMZ)Configuration

LessonSummary

Lesson2PerforminganISAServerInstallation

BeforeYouInstallISAServer

SettingUptheNetworkAdapter

TCP/IPSettings

SettingUpaModemorISDNAdapter

Windows2000RoutingTable

InstallingISAServer

InitializingtheEnterprise

InstallationProcedure

ConstructingtheLocalAddressTable

Windows2000RoutingTable

DefaultSettings

TroubleshootingISAServerInstallation

Practice:InstallingISAServerEnterpriseEdition

Exercise1:InitializingtheEnterprise

Exercise2:InstallingISAServerSoftware

LessonSummary

Lesson3MigratingfromProxyServer2.0

MigratingfromMicrosoftProxyServer2.O

OperatingSystemConsiderations

ProxyServeronWindows2000

ProxyServeronWindowsNT4.O

ProxyServer2.OArrayConsiderations

MigratingtoanArray

MigratingProxyServer2.OConfiguration

ProxyChains

WebProxyClientRequests

Publishing

Cache

SOCKS

RulesandPolicies

LessonSummary

Review

Chapter3ConfiguringSecureInternetAccess

AboutThisChapter

BeforeYouBegin

LessonlConfiguringLocalClientsforSecureInternetAccess

AboutISAServerClients

AssessingClientRequirements

ConfiguringSecureNATClients

ConfiguringSecureNATClientsonaSimpleNetwork

ConfiguringSecureNATClientsonaComplexNetwork

AdditionalSecureNATConfigurationforDial-upNetworks

ResolvingNamesforSecureNATClients

InternetAccessOnly

InternalNetworkandInternetAccess

FirewallClients

FirewallClientApplicationSettings

AdvancedClientConfiguration

SampleWspcfg.iniFile

WebProxyService

ConfiguringWebProxyClients

DirectAccess

Practicel:EstablishingSecureInternetAccessforWebProxyClients

Exercise1:CreatingaProtocolRule

Exercise2:ConfiguringInternetExplorertoUsetheWebProxyService

Practice2:InstallingFirewallClient

Exercise:InstallingFirewallClientovertheLocalNetwork

Lesson-Summary

Lesson2ConfiguringISAServerDial-upConnections

ConfiguringDial-upEntries

Dial-on-Demand

ConfiguringDial-on-Demand

LimitingISAServerDial-outtoExternalSites

ClosingDial-upConnections

Practice:ConfiguringaDial-upEntry

Exercise1:TestingInternetConnectivity

Exercise2:CreatingaNewDial-upEntry

Exercise3:ConfiguringISAServertoRoutethroughtheDial-upEntry

Exercise4:RestartingtheFirewallService

Exercise5:ViewingSecureNATSessionInformation

LessonSummary

Lesson3ConfiguringAutomaticDiscoveryofISAServer

AutomaticDiscovery

ConfiguringWPADandWSPADontheDNSorDHCPServer

AutomaticDiscoveryforFirewallClients

VerifyingAutomaticDiscoveryforFirewallClients

AutomaticDiscoveryforWebProxyClients

TroubleshootingAutomaticDiscovery

Practice:ConfiguringAutomaticDiscovery

Exercise1:PublishingAutomaticDiscovery

Exercise2:CreatingaWPADAlias(CNAME)

RecordinDNS

Exercise3:EnablingAutomaticDiscoveryonaFirewallClient

Exercise4:TestingAutomaticDiscovery

LessonSummary

Lesson4TroubleshootingISAServerClientConnectivity

TroubleshootingClientConnections

TroubleshootingDial-upEntries

RestartingServicesafterConfigurationChanges

LessonSummary

Review

Chapter4ConfiguringInternetSecurityUsingAccessPolicies

AboutThisChapter

BeforeYouBegin

LessonlCreatinganAccessPolicywithISAServer

ControllingOutgoingRequests

ConfiguringAccessPolicy

RulesandAuthentication

SecureNATClientsandAuthentication

FirewallClientsandAuthentication

WebProxyClientsandAuthentication

ISAServerSystemSecurity(SystemHardening)

GettingStartedWizard

LessonSummary

Lesson2CreatingCustomizedPolicyElements

PolicyElements

Array-LevelandEnterprise-LevelPolicyElements

ConfiguringSchedules

ConfiguringDestinationSets

ClientAddressSets

ClientUsersandGroups

ConfiguringProtocolDefinitions

Direction

ConfiguringContentGroups

Practice:CreatingPolicyElements

Exercisel:CreatingaSchedule

Exercise2:CreatingaDestinationSet

LessonSummary

Lesson3ConfiguringProtocolRules

ProtocolRules

ProtocolRuleConfigurationScenario

ProtocolAvailability

ApplicationFiltersandProtocolAvailability

ProcessingOrder

Array-LevelandEnterprise-LevelProtocolRules

WebProtocols

ProtocolDefinitionsthatareInstalledwithISAServer

Practice:AssigningProtocolRulestoUserAccounts

Exercisel:MonitoringSessionsinISAManagement

Exercise2:RequiringAuthenticationforWebSessions

Exercise3:AssigningaProtocolRuletoaWindows2000User

LessonSummary

Lesson4ConfiguringSiteandContentRules

SiteandContentRules

ProcessingOrder

AllowandDenyActions

DestinationSetsandPathProcessing

Array-LevelandEnterprise-LevelSiteandContentRules

SampleSiteandContentRule

ContentGroups

Practice:CreatingNewSiteandContentRules

Exercise1:DenyingUserlAccesstoAudioandVideoContent

Exercise2:TestingtheConfiguration

LessonSummary

Lesson5ConfiguringIPPacketFilters

WhentoUseIPPacketFilters

CreatingIPPacketFilters

ConfiguringPacketFilterOptions

IPFragmentFiltering

IPOptionsFiltering

LoggingPackets

Practice:RunningInternetServicesontheISAServerComputer

Exercise1:CreatinganIPPacketFilterforIncoming(POP3)Mail

Exercise2:CreatinganIPPacketFilterforOutgoing(SMTP)Mail

Exercise3:CreatinganIPPacketFilterforNNTP

Exercise4:CreatingallIPPacketFiltertoAllowOutgoingWebRequests(DNSQueries)

Exercise5:CreatinganIPPacketFilterforWebContent(HTTP)

LessonSummary

Lesson6ConfiguringISAServertoDetectExternalAttacksandIntrusions

IntrusionTypesandAlerts

PortScanAttack

AIIPortsScanAttack

EnumeratedPortScanAttack

IPHalfScanAttack

LandAttack

PingofDeathAttack

UDPBombAttack

WindowsOut-of-BandAttack(WinNuke)

ConfiguringIntrusionDetection

Practice:ConfiguringIntrusionDetectiononISAServer

Exercise:EnablingIntrusionDetection

LessonSummary

Review

Chapter5ConfiguringInternetAccelerationthroughtheISASewerCache

AboutThisChapter

BeforeYouBegin

LessonlCreatingaBasicCachePolicywithRoutingRules

HowCachingWorks

ProcessingCachingRules

CacheConfigurationProperties

RoutingRules

WhentoCacheContent

WhentoRetrieveObjectsfromtheCache

ApplyingRoutingRulestoParticularDestinations

RuleOrder

DefaultRoutingRule

ProcessingFlowforCaching

CacheFiltering

AdditionalCachePolicy

Practice:CachingDynamicContent

Exercise:CreatingaRoutingRuleCachingBothNon-DynamicandDynamicContent

LessonSummary

Lesson2ConfiguringCachePropertiesinISAServer

ConfiguringCacheDrives

CacheRequirementsandRecommendations

ConfiguringSizeandLocation

CacheContentFiles

ConfiguringHowISAServerCachesObjects

ConfiguringWhichContenttoCache

RAMCaching

ResponseHeaders

RequestHeaders

ConfiguringExpirationPolicy

HTTPObjectCaching

FTPObjectCaching

ReturningExpiredObjects

ConfiguringActiveCaching

ConfiguringNegativeCaching

Practicel:EnablingActiveCaching

Exercise:EnablingActiveCaching

Practice2:AdjustingtheAmountofRAMUsedforCaching

Exercise:AdjustingthePercentageof

AvailableMemoryUsedforCaching

LessonSummary

Lesson3SchedulingCacheContentDownloads

ScheduledCacheContentDownloads

UpdatingCacheContentAutomatically

ConfiguringPropertiesforExistingDownloadJobs

DownloadingDynamicContent

ConfiguringtheScheduleforContentDownloadJobs

Practice:CreatingaScheduledContentDownloadJob

Exercise:SchedulingaContentDownloadforMicrosoftOnlineSeminars

LessonSummary

Review

Chapter6SecureSewerPublishing

AboutThisChapter

BeforeYouBegin

LessonlPublishingServersSecurely

PublishingPolicyRules

ServerPublishingRules

HowServerPublishingWorks

ServerPublishingRuleActions

SampleRuleAction

ClientAddressSets

ServerPublishingRulesandIPPacketFilters

PublishingServersonaPerimeterNetwork

ServerontheSameComputerasISAServer

Practice:PublishinganInternalServer

Exercisel:CreatingaPublishingRuleonServerl

Exercise2:VerifyingtheFTPServerConnection

LessonSummary

Lesson2PublishingWebServersSecurely

WebPublishingRules

DestinationSetsandClientSets

WebPublishingRuleActions

SSLandHTTPBridging

RuleOrder

DefaultWebPublishingRule

SampleWebPublishingRule

PublishingaWebServerontheLocalNetwork

PublishingaWebServerHostedontheISAServerComputer

UsingPacketFilterstoPublishaWebServerontheISAServerComputer

Practice:PublishingaWebServeronaleISAServerComputer

Exercisel:ConfiguringIncomingWebRequestProperties

Exercise2:CreatingaDestinationSetforaleWebServer

Exercise3:PreparingtheWebSite

Exercise4:CreatingaWebPublishingRule

Exercise5:TestingtheCon8guration

LessonSummary

Lesson3PublishingMailServers

MailServerSecurityWizard

MailWizardSettings

ContentFiltering

ConfiguringExchangeServerontheLocalNetwork

ExchangeServerontheISAServerComputer

Practice:PublishingtheSMTPService

Exercisel:ConfiguringtheSMTPService

Exercise2:CreatingaMailWizardRule

Exercise3:configuringOutlookExpress

Exercise4:TestingtheConfiguration

LessonSummary

Review

Chapter7SecuringEnterpriseNetworkswithISAServer

AboutThisChapter

BeforeYouBegin

LessonlApplyingEnterprisePolicies

EnterprisePoliciesandArrays

HowEnterprisePoliciesareApplied

CreatinganEnterprisePolicy

ConfiguringthePolicySettingsforanEnterprise

BackingUpandRestoringallEnterpriseConfiguration

Practice:CreatingandApplyinganEnterprisePolicy

Exercise1:CreatingallEnterprisePolicy

Exercise2:CreatingaNewArraythatInheritstheDefaultEnterprisePolicy

Exercise3:TestingtheConfiguration

LessonSummary

Lesson2ConfiguringISAServerArrays

CreatingISAServerArrays

ArrayRequirements

ArraysandStandaloneServers

PromotingStandaloneServers

ArrayMemberSettings

StoringanArrayConfiguration

ControllingArrayMembership

BackingUpandRestoringanArrayConfiguration

BackingUptheConfiguration

BackingUpaStandaloneServerConfiguration

RestoringtheConfiguration

UsingArraystoProvideFaultTolerance

FaultToleranceforFirewallClients

FaultToleranceforSecureNATClients

CacheArrayRoutingProtocol

HowCARPWorks

ConfiguringCARP

ConfiguringtheLoadFactor

CARPandScheduledContentDownload

LessonSummary

Lesson3SecuringVirtualPrivateNetworkswithISAServer

IntegratingVirtualPrivateNetworkswithISAServer

ConfiguringtheNetworkforVPNConnectivity

UsingtheISAServerVPNConfigurationWizards

LocalISAServerVPNConfigurationWizard

RemoteISAServerVPNConfigurationWizard

ISAVirtualPrivateNetworkConfigurationWizard

ReconfiguringtheVPN

ISAServerandIPSec

LargeNetworkScenariowithVPNandRouting

LargeNetworkVPNDescription

MeetingNetworkRequirements

ISAServerArrayattheUnitedStatesHeadquarters

ISAServerArrayattheCanadaBranchOffice

ISAServerArrayattheUnitedKingdomBranchOffice

EnterprisePolicyatHeadquarters

ISAServerPolicyattheCanadaBranchOffice

ISAServerPolicyattheUnitedKingdomBranchOffice

LessonSummary

Review

Chapter8SecureVideoconferencingwithH.323Gatekeeper

AboutThisChapter

BeforeYouBegin

LessonlConfiguringClientstoUseH.323Gatekeeper

H.323Protocol

OverviewofH.323Gatekeeper

H.323GatekeeperSnap-in

H.323GatekeeperUsageScenarios

Intra-EnterpriseConferenceCallScenario

Inter-EnterpriseConferenceCallScenario

PSTNCallScenario

RegisteringClientswithH.323Gatekeeper

EndpointAttributes

Aliases

ClientAddressTranslation

FromwithinYourCompany

AttheDestination

InstallingH.323Gatekeeper

Practice:ConfiguringaClienttouseH.323Gatekeeper

Exercisel:AddingaGatekeeper

Exercise2:ConfiguringNetMeetingtoUseH.323Gatekeeper

Exercise3:TestingtheConfiguration

LessonSummary

Lesson2RoutingConferenceCallswithH.323Gatekeeper

CallRoutingRules

PhoneNumberRules

ExampleofaPhoneNumberRule

IPAddressRules

IPAddressRuleResolutionExample

E-mailAddressRules

RuleProcessingandDestinations

None

RegistrationDatabase

Gateway/Proxy

InternetLocatorService(ILS)

Gatekeeper

MulticastGatekeeper

DNS

ActiveDirectoryDirectoryServices

LocalNetwork

ApplyingRulestoCalls

InboundCalls

OutboundCalls

LessonSummary

Review

Chapter9MonitoringandOptimizingISASewerPerformance

AboutThisChapter

BeforeYouBegin

LessonlConfiguringAlerts

PreconfiguredAlerts

AlertConditions

EventLocation

EventThresholds

AlertsAction

ISAServerEvents

Practice:ConfiguringanAlertstoSendanE-mailMessage

Exercise:ConfiguringtheIntrusionDetectedAlertstoSendYouanE-mailMessage

LessonSummary

Lesson2LoggingISAServerActivity

ManagingISAServerLogs

LoggingtoaFile

W3CFormat

ISAFormat

LogFileNames

LogFileOptions

LoggingtoaDatabase

LoggingPackets

FirewallandWebfoxyLogFields

PacketFilterLogFields

Practice:ReadingWebLogs

Exercise:AnalyzingaWebLog

LessonSummary

Lesson3CreatingISAServerReports

ConfiguringReports

ViewingReports

SummaryReports

WebUsageReports

ApplicationUsageReports

Traffic&UtilizationReports

SecurityReports

ConfiguringReportJobs

ReportJobCredentials

ConfiguringReportLogSummaries

ReportDatabase

Practice:CreatingandViewingReports

Exercise1:CreatingaReportJob

Exercise2:ViewingReports

LessonSummary

Lesson4ControllingBandwidth

DeterminingEffectiveBandwidth

EffectiveBandwidthforDial-upConnections

EffectiveBandwidthforDedicatedNetworkConnections

ConfiguringBandwidthPriorities

ConfiguringBandwidthRules

RuleOrder

DefaultBandwidthRule

Practice:CreatingaBandwidthRule

Exercisel:CreatingaNewBandwidthPriorityPolicyElement

Exercise2:CreatingaNewBandwidthRule

LessonSummary

Lesson5AdditionalTuningandMonitoringTools

TuningISAServerPerformance

TuningCachePerformance

ISAServerPerformanceObjectsandCounters

ISASewerPerformanceMonitor

PerformanceObjectsandCountersIncludedinISAServer

LessonSummary

Review

Chapter10TroubleshootingISAServer

AboutThisChapter

BeforeYouBegin

LessonlTroubleshootingToolsinISAServer

TroubleshootingTools

ISAServerReports

EventViewer

PerformanceMonitor

Netstat

Telnet

NetworkMonitor

TheRoutingTable

TheRouteDeterminationProcess

TroubleshootingRoutingTables

Practice:TestingPortStatus

Exercise:TestingISAServerports

LessonSummary

Lesson2TroubleshootingStrategiesinISAServer

TroubleshootingUserAccess

Authentication

TroubleshootingPacket-BasedAccessProblems

VPNNetworkConsiderations

AdditionalTroubleshootingNotes

LessonSummary

Review

AppendixAQuestionsandAnswers

AppendixBDeployingandAdministeringISASewerinaComplexNetwork

AboutThisAppendix

BeforeYouBegin

ScenarioBackground

Questions

AppendixCEventMessages

AlertEventMessages

BandwidthEventMessages

CacheEventMessages

CommonServiceEventMessages

Dial-upConnectionEvents

FirewallServiceEventMessages

WinsockErrorCodeMessages

IntrusionDetectionEventMessages

LogEventMessages

ControlServiceEventMessages

PacketFilterEventMessages

ServerEventMessages

WebProxyServiceEventMessages

HTTPMessages

HTMLMessages

GopherMessages

FTPMessages

InternetMessages

AppendixDGlossary

Index