Course 2824B: Implementing Microsoft internet security and acceleration server 2004 - Module 10

Chia sẻ: Nothing Nothing | Ngày: | Loại File: PPT | Số trang:41

Thêm vào BST

Báo xấu

39
lượt xem 3
download

Download Vui lòng tải xuống để xem tài liệu đầy đủ

Module 10: Monitoring ISA Server 2004. This module explains how administrators can use monitoring features of ISA Server to track network activity and monitor ISA Server performance. After completing this module, students will be able to: Describe how to use monitoring features on ISA Server 2004, configure alerts on ISA Server 2004, configure monitoring of connectivity on ISA Server 2004,...

Chủ đề:

Bình luận(0) Đăng nhập để gửi bình luận!

Lưu

Nội dung Text: Course 2824B: Implementing Microsoft internet security and acceleration server 2004 - Module 10

Module 10: Monitoring ISA Server 2004
Overview Monitoring Overview Configuring Alerts Configuring Session Monitoring Configuring Logging Configuring Reports Monitoring Connectivity Monitoring Services and Performance
Lesson: Monitoring Overview Why Implement Monitoring? ISA Server Monitoring Components Designing a Monitoring and Reporting Strategy Using the ISA Server Dashboard for Monitoring
Why Implement Monitoring? Use monitoring to: Monitor traffic between networks to ensure that only legitimate traffic passes between networks Troubleshoot network connectivity between ISA Server clients, servers, and networks Collect information about attacks and to detect attacks as they occur Plan future modifications to the ISA Server or Internet access infrastructure
ISA Server Monitoring Components Componen Explanation ts Monitors ISA Server for configured events Alerts and then performs actions when the specified events occur Provides information on the current client Sessions sessions Provides detailed archived information Logging about the Web Proxy, Microsoft Firewall service, or SMTP Message Screener Summarizes information about the usage Reports patterns on ISA Server Connectivit Monitors connections from ISA Server to any other computer or URL on any y network Performanc Monitors server performance in real time, create a log file of server performance or
Designing a Monitoring and Reporting Strategy When: Determine: Which events should trigger an alert Monitoring The event threshold before the alert is real-time triggered information The information that you need to monitor server performance The information you need to monitor server performance over time Collecting The information you need to monitor long-term server usage information The information you need to monitor security events Developing How to respond to the critical events a response that occur on the ISA Server strategy
Using the ISA Server Dashboard for Monitoring Monitor connections Monitor alerts Monitor sessions Monitor traffic
Lesson: Configuring Alerts What Is an Alert? How to Configure Alert Definitions How to Configure Alert Events and Conditions How to Configure Alert Actions Alert Management Tasks
What Is an Alert? An alert is: A notification of an event or action that has occurred on ISA Server Triggered according to the conditions and trigger thresholds specified for the event associated with the alert When a server event takes place and The ISA records anServer alert: Management console displays the alert in the Alerts view An entry appears in the alerts view that lists column headings such as type of alert, the date and time, status, and category
How to Configure Alert Definitions
How to Configure Alert Events and Conditions Define the event that will trigger the alert Define specific Define the conditions for trigger the event thresholds Define subsequent alerts
How to Configure Alert Actions Configure e-mail action Define a program to run Define other alert actions
Alert Management Tasks Alerts are managed by performing the following tasks: Acknowledge registered alerts Acknowledge registered alerts Reset registered alerts When you configure an alert to stop the ISA Server Firewall Service, ISA Server goes into a lockdown mode. While in lockdown mode, ISA Server blocks most network traffic
Practice: Configuring and Managing Alerts Creating a New Alert Definition Modifying an Existing Alert Definition Gen-Web-01 Den-ISA-01 Internet Den-Clt-01Den-DC-01
Lesson: Configuring Session Monitoring What Is Session Monitoring? About Managing Sessions How to Configure Session Filtering
What Is Session Monitoring? Session monitoring: Provides real-time information about client sessions hosted through ISA Server Includes information on: When the session was established The session type The source network The client user name and computer name Provides the ability to immediately stop any unwanted sessions
About Managing Sessions Right click session Use these options to disconnect to manage sessions
How to Configure Session Filtering Add multiple filters Configure filters to view specific sessions
Practice: Configuring Session Monitoring Monitoring Sessions Applying a Session Filter Gen-Web-01 Den-ISA-01 Internet Den-Clt-01Den-DC-01
Lesson: Configuring Logging What Is Logging? Log Storage Options How to Configure Logging How to View ISA Server Logs How to Configure Log Filter Definitions