300 likes | 420 Views
Installing and Maintaining ISA Server 2006. Planning an ISA Server Deployment. Understand the current network infrastructure . Review company security policies . Plan the required network infrastructure . Plan for branch office installations . Plan for availability and fault tolerance .
E N D
Planning an ISA Server Deployment • Understand the current network infrastructure. • Review company security policies. • Plan the required network infrastructure. • Plan for branch office installations. • Plan for availability and fault tolerance. • Plan for access to the Internet. • Plan the ISA Server client implementation and deployment. • Plan for server publishing. • Plan for VPN deployment. • Plan the implementation.
Network infrastructure External interface connects to the Internet Internal interface connects to internal network
Network Infrastructure Requirements • DNS • Domain controllers • DHCP
Domain Name System Requirements • To connect to resources on the Internet. • To enable access to Internet resources Use: • Internal DNS Server • External DNS Server
Domain Controller Requirements • Restrict access to Internet resources based on user accounts • Require authentication before users can access published servers • ISA Server 2006 provides several options for authenticating the users.
Dynamic Host Configuration Protocol Requirements • DHCP is not required to support an ISA Server infrastructure! • is highly recommendedto simplify network management. • The advantage of using DHCP is that it can provide the IPconfiguration for all the client computers on your network automatically. This can makeyour ISA Server deployment much more efficient.
Choosing an ISA Server Client ISA Server Client Options • Firewall clients • SecureNAT clients • Web Proxy clients
What Is a Firewall Client? Install Firewall client Use the Firewall Client application when initiating connectionsto the ISA Server computer!
Advantages of using Firewall client • Firewall clients enable user or group based access control and logging. • When a Firewall client connects to ISA Server, the Firewall service automaticallyauthenticates the user. • The Firewall Client software can configure the Web Proxy browserautomatically.
Disadvantages of using Firewall client • Must install the Firewall Client software on the client computers. • A large number of client computers in organization and have no means ofautomating the client installation, it will require a significant effort to deploy theclient. • The Firewall client can only be installed on Windows computers.
What is a SecureNAT Client? • Do not have Firewall Client software. • Configure thedefault gateway on the SecureNAT clients and configure network routing, so that alltraffic destined to the Internet is sent through the ISA Server computer.
Advantages of using SecureNAT Client • SecureNAT clients also provide almost as much functionality as Firewall clients. • Requests from SecureNAT clients can be passed to application filters, which canmodify the requests to enable handling of complex protocols. • SecureNAT can use the Web Proxy service for Web access filtering and caching. • Any operating system that supports Transmission Control Protocol/Internet Protocol. • (TCP/IP) can be configured as a SecureNAT client.
Advantages of using SecureNAT Client • Cannot control access to Internet resources based on users and groups • SecureNAT clients may not be able to use all protocols.
Example How to configure the client computers route Internet requests to theISA Server computer?
What Is a Web Proxy Client? • A Web Proxy client is a client computer that has an HTTP 1.1–compliant Web browserapplication and is configured to use the ISA Server computer as a Web Proxy server. • Do not have to install any software toconfigure Web Proxy clients. • Must configure the Web applications onthe client computers to use the ISA Server computer as a proxy server.
Maintaining ISA Server 2006 • Export the ISA Server Configuration. • Import the ISA Server Configuration. • Back Up the ISA Server Configuration. • Restore the ISA Server Configuration.
How to Export and Import the ISA Server Configuration • Cloning a server • Saving a partial configuration. • Sending a configuration fotroubleshooting. • Rolling back a configuration change.
How to Install ISA 2006 Add Internal Network adress