Microsoft Internet Security and Acceleration (ISA) Server 2004 Administrator's Pocket Consultant

by Ratliff, Bud; Ballard, Jason

• ISBN13: 9780735621886
• ISBN10: 0735621888
• Edition: 1st
• Format: Paperback
• Copyright: 2006-01-11
• Publisher: Microsoft Press

Summary

The fast-answers, daily administration guide to Microsoft Internet Security and Acceleration (ISA) Server 2004. This pocket-sized guide Features quick-reference tables, lists, and step-by-step instructions. A handy, one-stop guide to provide fast, accurate answers on the spot-whether you're at your desk or in the field!

Author Biography

Bud Ratliff is a Microsoft MVP for ISA Server. He is a Project Management Professional (PMP), MCSE, MCT, and a principal partner for The Solarity Group.

Table of Contents

Acknowledgments	p. xix
Introduction	p. xxi
Support	p. xxi
Overview of Microsoft ISA Server 2004 Administration	p. 1
ISA Server Capabilities	p. 1
How ISA Server Operates as a Caching and Firewall Server	p. 2
Firewall: The Secure Server	p. 3
Caching: The Acceleration Server	p. 3
Differences Between ISA Server 2000 and ISA Server 2004	p. 4
Choosing the Right ISA Server for Your Environment	p. 6
Product Editions and Requirements	p. 6
ISA Server Tools and Utilities	p. 11
The ISA Server 2004 Management Console	p. 11
ISA Server Wizards	p. 15
Tools	p. 15
Extending ISA Server	p. 16
Administering ISA Server Remotely	p. 16
ISA Management Console	p. 16
Terminal Services	p. 16
Remote Control Applications	p. 17
ISA Server Community	p. 17
Installing and Configuring Microsoft ISA Server 2004 Standard Edition	p. 19
Before You Begin	p. 19
Where Not to Install ISA Server	p. 20
Installing ISA Server 2004 Standard Edition	p. 21
Functionality Available with ISA Server Configured with a Single Network Adapter	p. 24
Patching ISA Server 2004 Standard Edition	p. 25
Installing ISA Server 2004 Standard Edition Unattended	p. 25
ISA Server Setup Command-Line Parameters	p. 27
Troubleshooting Setup	p. 27
Uninstalling ISA Server 2004 Standard Edition	p. 28
Installing ISA Server Administration Tools	p. 28
Installing ISA Server Administration Tools on a workstation	p. 29
Installing ISA Server Administration Tools on the ISA server	p. 29
Renaming an ISA Server 2004 Server	p. 30
Joining an ISA Server to a Domain	p. 31
Troubleshooting ISA Server Installations	p. 31
Problems Installing ISA Server on a Domain Controller	p. 31
Examine the Setup Log Files	p. 32
What to Expect After Installation	p. 32
Know Your System Policies	p. 33
Configuring ISA Server	p. 35
Assigning ISA Server Administrative Roles	p. 36
Configuring the ISA Server Cache	p. 36
Installing and Configuring Microsoft ISA Server 2004 Enterprise Edition	p. 45
Before You Begin	p. 45
Where Not to Install	p. 46
Installing Configuration Storage Server	p. 46
Ensuring Connectivity to CSS	p. 48
Creating an ISA Server Array	p. 49
Installing ISA Server 2004 Enterprise Edition	p. 49
Installing Firewall Share and Message Screener	p. 52
Adding Servers to the ISA Server Array	p. 52
Installing CSS on a Domain Controller	p. 52
Installing a CSS from Media	p. 54
Installing Enterprise Edition Unattended	p. 54
Troubleshooting Setup	p. 56
Installing ISA Server 2004 Enterprise Edition into a Workgroup	p. 56
Workgroup Scenario	p. 57
Workgroup Enterprise Scenario	p. 57
Back-to-Back Scenario	p. 58
Renaming the CSS	p. 61
Specifying an Alternative CSS Server	p. 62
Uninstalling ISA Server 2004 Enterprise Edition	p. 63
Troubleshooting Installation	p. 63
Upgrading from ISA Server 2000	p. 63
Examining the Setup Log Files	p. 63
Configuring ISA Server Enterprise Edition	p. 64
Assigning ISA Administrative Roles	p. 65
Remote Administration	p. 66
Installing and Configuring Microsoft ISA Server 2004 Clients	p. 67
Overview of ISA Server Client Types	p. 67
Choosing the Right Client	p. 68
Working with the SecureNAT Client	p. 69
Installation	p. 69
Configuration	p. 71
Working with the Web Proxy Client	p. 72
Installation	p. 72
Configuration	p. 74
Troubleshooting	p. 75
Working with the Firewall Client	p. 76
Make the Firewall Client Share Available	p. 76
Install the Firewall Client	p. 77
Configure the Firewall Client	p. 80
Using Infrastructure Servers to Automate Client Settings	p. 86
Troubleshooting	p. 87
Upgrading from Microsoft ISA Server 2000	p. 89
Changes When Migrating From 2000 to 2004	p. 89
Performing an In-Place Upgrade	p. 90
Migrating an ISA Server 2000 Configuration to a Clean ISA Server 2004 Server	p. 93
Exporting the ISA Server 2000 Configuration	p. 93
Installing ISA Server 2004	p. 94
Importing the ISA Server Configuration	p. 94
Migrating RRAS Configuration	p. 95
Upgrading ISA Server Enterprise Edition	p. 95
Exporting the ISA Server 2000 Enterprise Edition Configuration	p. 96
Installing CSS	p. 97
Importing the Configuration to the ISA Server 2004 Enterprise Edition Computer	p. 99
Installing ISA Server 2004 on the ISA Server	p. 100
Upgrading From ISA Server 2004 Standard Edition to Enterprise Edition	p. 102
Troubleshooting ISA Server Upgrades	p. 103
Missing Components	p. 103
ISA Server Migration Wizard Command Lines	p. 103
Configuration Import Errors	p. 104
Monitoring and Reporting	p. 105
Monitoring Components	p. 105
Dashboard	p. 105
Configuring Refresh Rate Settings	p. 106
Alerts	p. 106
Viewing Predefined Alerts	p. 106
Creating an Alert	p. 107
Configuring an Alert	p. 111
Viewing Alerts	p. 112
Resetting and Acknowledging Alerts	p. 112
Services	p. 113
Starting and Stopping ISA Services	p. 114
Sessions	p. 114
Monitoring Sessions	p. 114
Filtering Sessions	p. 115
Creating Connectivity Verifiers	p. 116
Disconnecting a Session	p. 117
Exporting and Importing Filter Definitions	p. 118
Events	p. 118
Monitoring Events	p. 118
Analyzing Events	p. 118
Logs	p. 119
Configuring Logging to an SQL Server Database	p. 119
Configuring Logging to MSDE	p. 121
Configuring Logging to a File	p. 121
Filtering Logging	p. 122
Reports	p. 122
Report Types	p. 122
Generating a Report	p. 123
Creating a Report Job	p. 125
Publishing a Report	p. 126
Viewing a Report	p. 126
Customizing a Report	p. 127
Configuring Log Summaries	p. 128
Performance Monitor	p. 129
Using Performance Monitor on Your ISA Server	p. 129
Configuring Toolbox Elements	p. 131
Protocols	p. 133
Identifying Predefined Protocols	p. 133
Creating a Protocol	p. 134
User Sets	p. 135
Creating a User Set	p. 136
Content Types	p. 136
Creating a Content Type	p. 136
Schedules	p. 137
Creating a Schedule	p. 138
Network Objects	p. 138
Networks	p. 139
Network Sets	p. 140
Configuring the Internal Network Object	p. 140
Computers	p. 141
Address Ranges	p. 142
Subnets	p. 143
Computer Sets	p. 144
URL Sets	p. 144
Domain Name Sets	p. 145
Web Listeners	p. 146
Creating and Configuring a Web Listener Object	p. 147
Configuring Microsoft ISA Server Firewall Policy	p. 149
Understanding How ISA Server Processes Traffic	p. 149
System Policy	p. 150
Editing the System Policy	p. 157
Exporting and Importing System Policy	p. 158
An Overview of Firewall Policy	p. 159
Best Practices	p. 159
Lockdown Mode	p. 160
Exporting and Importing Firewall Policy	p. 160
Configuring FTP Filtering	p. 162
Configuring HTTP Filtering	p. 163
Configuring RPC Filtering	p. 166
Access Rules	p. 168
Creating an Access Rule	p. 169
Disabling an Access Rule	p. 170
Deleting an Access Rule	p. 171
Changing the Order of an Access Rule	p. 172
Web Publishing	p. 172
Publishing a Web Server	p. 172
Modifying an Existing Web Publishing Rule	p. 174
Publishing a Secure Web Server	p. 176
Server Publishing	p. 182
Creating a Server Publishing Rule	p. 182
Publishing a Mail Server	p. 184
Troubleshooting Firewall Policy	p. 188
Configuring Multinetworking	p. 189
Working with Network Templates	p. 189
Creating an Edge Firewall	p. 190
Creating a 3-Leg Perimeter	p. 192
Creating a Front Firewall	p. 193
Creating a Back Firewall	p. 194
Creating a Single Network Adapter Configuration	p. 195
Configuring Networks	p. 196
Exporting and Importing Networks	p. 198
Configuring Network Sets	p. 199
Network Sets	p. 199
Configuring Network Rules	p. 200
Web Chaining	p. 201
Creating a Web Chaining Rule	p. 201
Modifying a Web Chaining Rule	p. 203
Firewall Chaining	p. 203
Microsoft ISA Server Security and Administration	p. 205
ISA Server Administration	p. 205
Delegating Administration	p. 205
Configuring Firewall Chaining	p. 206
Configuring Dial-Up Preferences	p. 207
Certificate Revocation	p. 208
Defining Firewall Client Settings	p. 209
Viewing ISA Server Details	p. 210
Configuring Link Translation	p. 211
Security Policy Administration	p. 212
Defining RADIUS Servers	p. 212
Configuring Intrusion Detection	p. 214
Defining IP Preferences	p. 216
Defining Connection Limits	p. 217
Securing Virtual Private Network Access	p. 219
Remote Access Configuration	p. 219
Enabling and Configuring VPN Client Access	p. 220
Configuring the User Accounts	p. 228
Creating Access Rules for VPN Clients to Access Other Networks	p. 228
Configuring the Client Computers	p. 229
Site-to-Site Configuration	p. 230
Analyzing and Selecting the VPN Protocol	p. 232
Creating the VPN Gateway Dial-In Accounts for Authentication	p. 232
Creating the Primary Site VPN Gateway	p. 233
Creating a Remote Site Network	p. 234
Creating Network Rules to the Remote Site	p. 237
Creating Access Rules	p. 238
Configuring the Secondary Site VPN Gateway	p. 239
Testing the Site-to-Site VPN Connection	p. 239
VPN Quarantine	p. 240
Scripting with Microsoft ISA Server 2004	p. 241
Overview	p. 241
VBScript Essentials	p. 242
Preparing Your Environment	p. 243
Installing ISA Server 2004 SDK	p. 243
ShowBasiclnfo1.vbs	p. 244
ShowBasiclnfo2.vbs	p. 249
AddComputer.vbs	p. 250
CreateHTTPAllowRule.vbs	p. 253
ExportServers.vbs	p. 255
ImportServers.vbs	p. 260
Next Steps	p. 263
Configuring Arrays Using Centralized Management	p. 265
Working with Arrays and Array Members	p. 265
Creating an Array	p. 265
Configuring an Array	p. 266
Renaming an Array	p. 269
Deleting an Array	p. 269
Moving a Server to Different Array	p. 270
Managing an Array	p. 270
Array Communication Explained	p. 271
Troubleshooting Array Configuration	p. 273
Using Enterprise and Array Policies	p. 275
Enterprise and Array Policies Explained	p. 275
Enterprise and Array Decisions	p. 276
Configuring Enterprise Policy Settings	p. 276
Enterprise Policy Administration	p. 276
Creating Enterprise Policies	p. 277
Creating Enterprise Access Rules	p. 277
Enterprise Administration and Permissions	p. 279
Backing Up and Restoring an Enterprise Configuration	p. 279
Deleting Enterprise Policies	p. 281
Connecting to Remote Enterprise and Arrays	p. 282
Settings Contained in the Default Enterprise Policy	p. 283
Array Policy Administration	p. 284
Rules of Effective Array Policy	p. 284
Array Administration and Permissions	p. 284
Array Firewall Policy Rule Types	p. 285
Configuring Array Policies	p. 286
Backing Up, Restoring, and Deleting an Array Configuration	p. 286
Working with Enterprise Technologies and Microsoft ISA Server 2004	p. 287
Cache Array Routing Protocol (CARP)	p. 287
Enabling Caching	p. 287
Enabling CARP for Web Requests	p. 288
Configuring and Securing Intra-Array Communication	p. 289
Configuring the CARP Load Factor	p. 290
CARP and Scheduled Content Download Jobs	p. 291
Network Load Balancing	p. 291
Integrated and Nonintegrated Network Load Balancing	p. 292
Prerequisites	p. 292
Installing and Configuring Network Load Balancing	p. 292
Configuring Microsoft ISA Server with Microsoft Exchange Server 2003	p. 297
Configuring DNS Resolution	p. 297
Overview of ISA Server 2004 and Exchange Server 2003 Integration	p. 298
Connecting Remote Exchange Clients with Outlook Web Access	p. 298
Publishing Outlook Web Access	p. 299
Providing Full-Featured Remote Access for Exchange Clients	p. 304
Publishing Outlook RPC for MAPI Clients	p. 306
Publishing RPC over HTTP for Outlook Clients	p. 308
Publishing Basic Mail: SMTP, POP3, and IMAP4	p. 313
Configuring Microsoft ISA Server with Microsoft SharePoint Portal Server 2003	p. 315
SharePoint Portal Server 2003 and Windows SharePoint Services Overview	p. 315
Key SharePoint Portal Server 2003 Features	p. 315
Key Windows SharePoint Services Features	p. 316
How ISA Server Improves SharePoint Portal Server and Windows SharePoint Services Access	p. 317
Publishing Windows SharePoint Services	p. 317
Allow Windows SharePoint Services to Connect to the Internet	p. 318
Defining the Web Listener	p. 318
Creating the Web Publishing Rule	p. 318
Modifying the Web.Config File for Outbound Internet Access	p. 321
Publishing SharePoint Portal Server	p. 322
Network Services	p. 322
Authentication	p. 323
Link Translation	p. 323
Publishing SharePoint Portal ServerPublishing SPS with ISA Server 2004	p. 324
Configuring SharePoint Portal Server to Work With ISA Server	p. 329
Modifying the Default URL for the Portal Site	p. 329
Configuring Microsoft ISA Server with Microsoft Operations Manager 2005	p. 331
Microsoft Operations Manager 2005 Overview	p. 331
Getting Started with MOM 2005	p. 332
Installing Microsoft Operations Manager 2005	p. 333
Deploying the MOM Client to Your ISA Servers	p. 333
Agent Communication	p. 335
Installing the ISA Server 2004 Management Pack	p. 337
Managing ISA Servers with MOM 2005	p. 340
Rule Groups and Adding Custom Event Rules	p. 340
Working with Maintenance Mode	p. 342
Removing a Computer from Maintenance Mode	p. 343
Creating Computer Groups	p. 343
Monitoring ISA Server Performance with MOM 2005	p. 345
Configuring Microsoft ISA Server with Microsoft Virtual Server 2005	p. 347
Virtual Server 2005 Overview	p. 347
Key Features of Virtual Server 2005	p. 348
Usage Scenarios for Virtual Server 2005 and ISA Server	p. 348
Virtual Disks	p. 350
Virtual Networks	p. 351
Configuring an ISA Server Test Environment Using Virtual Machines	p. 351
Best Practices	p. 351
Gotchas	p. 352
Creating a Virtual Server Environment	p. 352
Setting Up a Production ISA Server Virtual Machine	p. 361
Best Practices	p. 362
Configuring Microsoft ISA Server 2004 with Microsoft Small Business Server 2003	p. 363
Overview of Small Business Server 2003 and ISA Server 2004	p. 363
How Different SBS Versions Interact with ISA Server 2004	p. 363
Installing ISA Server 2004 on Small Business Server 2003	p. 364
Documenting and Backing Up ISA Server 2000 Settings	p. 365
Applying SBS Service Pack 1	p. 365
Installing ISA Server 2004	p. 366
Running the Configure E-Mail and Internet Connection Wizard	p. 367
Troubleshooting ISA Server 2004 on Small Business Server 2003	p. 374
Setup Issues	p. 374
You Cannot Connect to Exchange Server from Outlook After Installing SBS Service Pack 1	p. 375
You Receive "Service Not Responding" Errors in the Event Log	p. 375
Web Publishing Rule Is Invalid	p. 375
Additional Resources	p. 377
Index	p. 383
Table of Contents provided by Ingram. All Rights Reserved.