Microsoft ISA Server 2006 Unleashed

Microsoft ISA Server 2006 Unleashed......Page 1
Table of Contents......Page 5
Introduction......Page 26
Part I: Designing, Exploring, and Understanding ISA Server 2006......Page 30
1 Introducing ISA Server 2006......Page 32
Understanding the Need for ISA Server 2006......Page 33
Detailing the Additional Advantages of ISA Server......Page 36
Understanding the History of ISA Server 2006......Page 40
Exploring ISA Server 2006’s New Features......Page 42
Detailing Deployment Strategies with ISA Server 2006......Page 45
Augmenting an Existing Security Environment with ISA Server 2006......Page 48
Administering and Maintaining an ISA Server 2006 Environment......Page 50
Using ISA Server 2006 to Secure Applications......Page 52
Reviewing ISA Server 2006 Prerequisites......Page 58
Procuring and Assembling ISA Hardware......Page 61
Building Windows Server 2003 as ISA’s Operating System......Page 63
Determining Domain Membership Versus Workgroup Isolation......Page 69
Installing the ISA Server 2006 Software......Page 72
Securing the Operating System with the Security Configuration Wizard......Page 75
Exploring the ISA Server 2006 Management Console......Page 90
Configuring Networks with ISA Console Network Wizards and Tools......Page 93
Exploring Firewall Policy Settings......Page 104
Navigating the Monitoring Node Options......Page 111
Working with the Virtual Private Networks Node......Page 116
Examining the Cache Node Settings......Page 122
Configuring Add-Ins......Page 125
Exploring the ISA General Node......Page 128
Preparing for an ISA Server 2006 Design......Page 138
Migrating from ISA Server 2000/2004 to ISA Server 2006......Page 142
Determining the Number and Placement of ISA Servers......Page 149
Prototyping a Test ISA Server Deployment......Page 150
Piloting an ISA Server Deployment......Page 151
Designing ISA Server 2006 for Organizations of Varying Sizes......Page 153
Part II: Deploying ISA Server 2006......Page 158
ISA as a Full-Function Security Firewall......Page 160
Multi-Networking with ISA Server 2006......Page 164
Defining ISA Firewall Networks......Page 165
Reviewing and Modifying Network Rules......Page 171
Understanding Firewall Policy Rules......Page 173
Examining Advanced ISA Firewall Concepts......Page 177
6 Deploying ISA Server Arrays with ISA Server 2006 Enterprise Edition......Page 182
Understanding ISA Server 2006 Enterprise Edition......Page 183
Deploying the Configuration Storage Server (CSS)......Page 184
Setting Up Enterprise Networks and Policies......Page 188
Creating and Configuring Arrays......Page 194
Installing and Configuring ISA Enterprise Servers......Page 199
Configuring Network Load Balancing and Cache Array Routing Protocol (CARP) Support......Page 203
7 Deploying ISA Server as a Reverse Proxy in an Existing Firewall DMZ......Page 210
ISA Server 2006 as a Security Appliance......Page 211
Deploying Unihomed ISA Server 2006 Security Appliances......Page 213
Configuring Existing Firewalls to Utilize ISA Server 2006 Reverse Proxy......Page 216
Publishing and Securing Services in an Existing DMZ......Page 218
Understanding Advanced ISA Security in Enterprise Environments......Page 221
Understanding the Acceleration Component of the Internet Acceleration Server 2006......Page 224
Designing ISA Server 2006 Caching Solutions......Page 226
Enabling ISA Server 2006 as a Web-Caching Server......Page 229
Configuring Proxy Clients......Page 237
9 Enabling Client Remote Access with ISA Server 2006 Virtual Private Networks (VPNs)......Page 246
Examining ISA Server 2006 VPN Capabilities and Requirements......Page 247
Designing an ISA Server 2006 VPN Infrastructure......Page 250
Enabling VPN Functionality in ISA Server......Page 252
Utilizing RADIUS Authentication for VPN Connections......Page 261
Configuring ISA for Point-to-Point Tunneling Protocol (PPTP) VPN Connections......Page 268
Creating Layer 2 Tunneling Protocol (L2TP) VPN Connections with ISA......Page 271
Creating a Public Key Infrastructure (PKI) for L2TP with IPSec Support......Page 274
Using the Connection Manager Administration Kit (CMAK) to Automate VPN Client Deployment......Page 284
Enabling ISA Server 2006 VPN Quarantine......Page 292
Understanding Branch-Office Deployment Scenarios with ISA Server 2006......Page 302
Preparing ISA Servers for Site-to-Site VPN Capabilities......Page 305
Configuring a Point-to-Point Tunneling Protocol (PPTP) Site-to-Site VPN Between Two Remote Offices......Page 311
Configuring a Layer 2 Tunneling Protocol (L2TP) Site-to-Site VPN Connection Between Two ISA Servers in Remote Sites......Page 313
Configuring ISA 2006 to Integrate with Third-Party VPN Tunnel Products......Page 317
11 Understanding Client Deployment Scenarios with ISA Server 2006......Page 322
Outlining Client Access with ISA Server 2006......Page 323
Preparing an ISA Environment for the Firewall Client......Page 325
Installing the ISA Firewall Client......Page 330
Working with the ISA Firewall Client......Page 333
Part III: Securing Servers and Services with ISA Server 2006......Page 338
12 Securing Outlook Web Access (OWA) Traffic......Page 340
Enabling Secure Sockets Layer (SSL) Support for Exchange Outlook Web Access......Page 341
Securing Exchange Outlook Web Access with ISA Server 2006......Page 354
13 Securing Messaging Traffic......Page 370
Understanding the Need for Secure Mail Access......Page 371
Configuring ISA Server 2006 to Support OMA and ActiveSync Access to Exchange......Page 372
Configuring ISA Server to Secure RPC over HTTP(S) Traffic......Page 386
Securing Exchange MAPI Access......Page 394
Securing POP and IMAP Exchange Traffic......Page 397
Managing and Controlling Simple Mail Transport Protocol (SMTP) Traffic......Page 401
14 Securing Web (HTTP) Traffic......Page 406
Outlining the Inherent Threat in Web Traffic......Page 407
Publishing and Customizing Web Server Publishing Rules......Page 408
Configuring SSL-to-SSL Bridging for Secured Websites......Page 425
Securing Access to SharePoint Sites with ISA 2006......Page 427
Understanding the Dangers of Remote Procedure Call (RPC) Traffic......Page 438
Securing RPC Traffic Between Network Segments......Page 440
Publishing RPC Services with ISA Server 2006......Page 443
Using Network Monitor for Custom RPC......Page 447
Creating Server Publishing Rules......Page 451
Part IV: Supporting an ISA Server 2006 Infrastructure......Page 456
Defining the Role of the ISA Administrator......Page 458
Deploying a Role-Based Access Control Model for ISA Server 2006......Page 460
Delegating and Customizing Administrative Access to the ISA Console......Page 462
Administering an ISA Server Remotely......Page 466
Working with ISA Server 2006 Lockdown Mode......Page 471
Performing Advanced ISA Administration......Page 472
Understanding the Importance of a Maintenance Plan for ISA......Page 476
Updating ISA’s Operating System......Page 478
Performing Daily Maintenance......Page 481
Performing Weekly Maintenance......Page 485
Performing Monthly Maintenance......Page 487
Performing Quarterly Maintenance......Page 490
Understanding ISA Server’s Backup and Recovery Capabilities......Page 494
Exporting ISA Settings for Backups......Page 496
Importing ISA Settings for Restores......Page 500
Automating ISA Server Export with Custom Scripts......Page 503
Using Traditional Backup and Restore Tools with ISA Server 2006......Page 508
Outlining the Importance of ISA Monitoring and Logging......Page 512
Configuring ISA Logging and Monitoring......Page 513
Logging ISA Traffic......Page 518
Monitoring ISA from the ISA Console......Page 521
Generating Reports with ISA Server......Page 525
Monitoring ISA Server 2006 Health and Performance with Microsoft Operations Manager (MOM)......Page 528
Understanding the Benefits of ISA Server Documentation......Page 540
Documenting the ISA Server 2006 Design......Page 543
Developing Migration Documentation......Page 555
Creating Administration and Maintenance Documentation for ISA......Page 557
Preparing Disaster Recovery Documentation......Page 558
Understanding the Importance of Performance Documentation......Page 561
Writing Training Documentation......Page 562
A......Page 564
B......Page 566
C......Page 567
D......Page 570
E......Page 573
F......Page 575
H......Page 577
I......Page 578
J–K–L......Page 581
M......Page 582
N......Page 585
O......Page 586
P......Page 587
Q......Page 589
R......Page 590
S......Page 591
T......Page 594
V......Page 595
W–Z......Page 597