Benutzerhandbuch für Microsoft 2004

Inhaltsverzeichnis

• Introduction

  4
• Learn about ISA Server 2004 features

  5
• Practice configuring the ISA Server 2004 firewall

  6
• The ISA Server 2004 Configuration Guide Lab Configuration

  7
  • ISA Server 2004 Configuration Guide Network Diagram

    7
  • Installing and Configuring the Internal Network Domain Controller

    9
    • Installing Windows Server 2003

      9
    • Install and Configure DNS

      11
  • Installing and Configuring Microsoft Exchange on the Domain Controller

    13
• Conclusion

  16
• Introduction

  18
• Install Internet Information Services 6.0

  19
• Install Microsoft Certificate Services in Enterprise CA Mode

  20
• Conclusion

  23
• Introduction

  25
• Installing the Microsoft Internet Authentication Service

  26
• Configuring the Microsoft Internet Authentication Service

  27
• Conclusion

  31
• Introduction

  33
• Installing the WINS Service

  34
• Configuring the DHCP Service

  36
• Conclusion

  40
• Introduction

  42
• Configure DHCP WPAD Support

  43
• Configure DNS WPAD Support

  46
• Create the Wpad Entry in DNS

  47
• Configure the Client to Use the Fully Qualified wpad Alias

  51
• Configure the Client Browser to Use Autodiscovery

  53
• Conclusion

  54
• Introduction

  56
• Installing the DNS Server Service

  57
• Configuring the DNS Server as a Secure Caching-only DNS Server

  58
• Conclusion

  62
• Introduction

  64
• Installing ISA Server 2004

  65
• Viewing the System Policy

  71
• Backing Up the Post-Installation Configuration

  77
• Conclusion

  79
• Introduction

  81
• Backing up the Firewall Configuration

  82
• Restoring the Firewall Configuration from the Backup File

  84
• Exporting Firewall Policy

  87
• Importing Firewall Policy

  89
• Conclusion

  91
• Introduction

  93
• Scenario 1: The Edge Firewall Configuration

  94
• Scenario 2: The 3-Leg Perimeter Configuration

  102
• Conclusion

  114
• Introduction

  116
• Configuring the SecureNAT Client

  118
• Configuring the Web Proxy Client

  121
• Configuring the Firewall Client

  123
• Conclusion

  131
• Introduction

  133
• Create a User Account

  135
• Disable the Access Rules created by the Network Template

  137
• Create an Access Rule Limiting Protocols and Sites Users Can Access

  139
• Create an Access Rule Providing Administrators Greater Access to Protocols and Sites

  147
• Create a DNS Server Access Rule Allowing Internal Network DNS Servers Access to Internet DNS Servers

  151
• Use HTTP Policy to Prevent Access to Suspect Web Sites

  155
• Test the Access Rules

  158
• Conclusion

  160
• Introduction

  162
• Configure the Web Site

  163
• Configure the FTP Site

  167
• Disable the Custom Rules and Enable the Template Created Rules

  170
• Create the Web Publishing Rule

  172
• Create the FTP Server Publishing Rule

  180
• Test the Connection

  182
• Conclusion

  185
• Introduction

  187
• Restore the System to its Post-installation State

  188
• Assign a second IP address to the Internal interface of the ISA Server 2004 firewall

  189
• Install and Configure the SMTP Service

  190
• Install the SMTP Message Screener

  193
• Create the SMTP Server Publishing Rules

  195
• Create the Outbound SMTP Access Rule

  200
• Configure SMTP Message Screener Logging

  202
• Test SMTP Filtering

  204
• Conclusion

  205
• Introduction

  207
• Restore the System to its Post-installation State

  208
• Create the OWA Web Publishing Rule

  209
• Create the SMTP Server Publishing Rule

  219
• Create the POP3 Server Publishing Rule

  221
• Test the connection

  223
• Conclusion

  226
• Introduction

  228
• Enable the VPN Server

  229
• Create an Access Rule Allowing VPN Clients Access to the Internal Network

  234
• Enable Dial-in Access for the Administrator Account

  236
• Test the VPN Connection

  237
• Conclusion

  239
• Introduction

  241
• Create the Remote Site at the Main Office

  242
• Create the Network Rule at the Main Office

  247
• Create the Access Rules at the Main Office

  249
• Create the VPN Gateway Dial-in Account at the Main Office

  252
• Set the Shared Password in the RRAS Console at the Main Office

  253
• Create the Remote Site at the Branch Office

  254
• Create the Network Rule at the Branch Office

  256
• Create the Access Rules at the Branch Office

  257
• Create the VPN Gateway Dial-in Account at the Main Office

  259
• Set the Shared Password in the RRAS Console at the Branch Office

  261
• Activate the Site to Site Links

  262
• Conclusion

  263