Course 2824B: Implementing Microsoft internet security and acceleration server 2004 - Module 2

Chia sẻ: Nothing Nothing | Ngày: | Loại File: PPT | Số trang:45

Thêm vào BST

Báo xấu

40
lượt xem 4
download

Download Vui lòng tải xuống để xem tài liệu đầy đủ

Module 2: Installing and maintaining ISA Server. This module describes how to install ISA Server 2004, how to install and configure the ISA Server client software, and how to maintain ISA Server 2004 after installation.

Chủ đề:

Bình luận(0) Đăng nhập để gửi bình luận!

Lưu

Nội dung Text: Course 2824B: Implementing Microsoft internet security and acceleration server 2004 - Module 2

Module 2: Installing and Maintaining ISA Server
Overview Installing ISA Server 2004 Choosing ISA Server Clients Installing and Configuring Firewall Clients Advanced Firewall Client Configuration Securing ISA Server 2004 Maintaining ISA Server 2004
Lesson: Installing ISA Server 2004 System and Hardware Requirements for ISA Server 2004 Installation Types and Components Configuration Choices During Installation How to Perform an Unattended Installation of ISA Server 2004 How to Verify an Installation of ISA Server 2004 Default Configuration for ISA Server 2004 How to Modify the ISA Server Installation Upgrade Options from ISA Server 2000 to ISA Server 2004
System and Hardware Requirements for ISA Server 2004 RAM Windows Server CPU 2000 or Windows Server 2003 256 MB 500 MHz Hard Disk Hard Disk Format Space NTFS 150 MB Internal External
Installation Types and Components
Configuration Choices During Installation
Practice: Installing ISA Server 2004 Installing ISA Server 2004 Den-ISA-01 Internet Den-DC-01
How to Perform an Unattended Installation of ISA Server 2004 Why Use an Unattended Installation of ISA Server? Modifying the Msisaund.ini File [Setup Property Assignment] PIDKEY=xxxxxxxxxxxxxxxxxxxxxxxxx INTERNALNETRANGES=1 192.168.1.0192.168.1.255 INSTALLDIR=C:\Program Files\Microsoft ISA Server COMPANYNAME=Coho Vineyards DONOTDELLOGS=1 DONOTDELCACHE=1 ADDLOCAL=MSFirewall_Management,MSFirewall_ Services,Message_Screener,MSDE Running an Unattended Setup D:\Setup.exe /V” /qn FULLPATHANSWERFILE= \”c:\MSISAUND.INI\””
How to Verify an Installation of ISA Server 2004 Verify that the ISA Server services are installed and started Verify that the MSDE services are installed and started Review the setup log files Check the Application Log in the Event Viewer Check for ISA Server Alerts
Default Configuration for ISA Server 2004 Only Administrators can modify firewall policies Traffic A rule Caching Web between enabling Proxyis disabledthe Internal access requests to will bethenetwork, Firewall retrieved System Only Traffic No Traffic policy Administrators is servers is routedrouted are permits between can published between access theVPN ISA modify the toand ISA Server theall Traffic the ClientVPN directly isnetwork, routed installation from the between the share Internet isthe Quarantine VPN configured ISAnetworks Server other Server firewall and but policies all access other rules deny all networks network network, if you and and install the the Internal Internet Firewall network will use Client network Traffic between traffic the through Internal the ISA network, theServer VPN network installation address files translation network, the VPN Quarantine network, and the Internet will use network address translation Traffic is routed between the VPN network and the Internal network System policy permits access to the ISA Server but access rules deny all network traffic through the ISA Server No servers are published Web Proxy requests will be retrieved directly from the Internet Caching is disabled A rule enabling access to the Firewall Client
Practice: Verifying the Installation and Default Configuration of ISA Server 2004 Verifying the successful installation of ISA Server 2004 Examining the default installation of ISA Server 2004 Den-ISA-01 Internet Den-DC-01
How to Modify the ISA Server Installation Options
Upgrade Options from ISA Server 2000 to ISA Server 2004 In-Place Upgrade Install ISA Server 2004 ISA Server 2000 Extract Import the ISA Migration Server the ISA Server Configuration 2000 configurati on ISA Server 2000 Install ISA Server 2004
Lesson: Choosing ISA Server Clients Types of ISA Server Clients How to Configure a SecureNAT Client How to Configure Web Proxy Clients Guidelines for Choosing an ISA Server Client
Types of ISA Server Clients Does not require you to deploy client software Internet SecureNAT Client ISA Server Web Proxy Client Firewall Client Improves the Allows internet performance of Web access only requests for internal for authenticated clients users
How to Configure a SecureNAT Client SecureNAT clients do not require client installation or client configuration On a single subnet network, configure the IP address of the internal network interface as the SecureNAT client default gateway On a multiple subnet network, configure the IP address of the router as the SecureNAT client default gateway
How to Configure Web Proxy Clients
Guidelines for Choosing an ISA Server Client If you need to… Then use… Avoid deploying client SecureNAT clients software Use ISA Server only for SecureNAT or Web forward caching Proxy clients Allow access only for Firewall clients or Web authenticated clients Proxy clients Publish servers on your SecureNAT clients internal network Improve Web performance for non- SecureNAT or Web Windows operating Proxy clients systems
Practice: Configuring SecureNAT and Web Proxy Clients Configuring ISA Server to log client connections Configuring and testing a SecureNAT client Configuring and testing a Web Proxy client Den-ISA-01 Internet Den-Clt-01Den-DC-01
Lesson: Installing and Configuring Firewall Clients How to Configure Firewall Client Settings The Firewall Client Installation and Configuration Process Options for Automating the Firewall Client Installation