ISA Server Technical Overview

Course details

Elements of this syllabus are subject to change.

This lab can help you use Internet Security and Acceleration (ISA) Server 2006 to securely publish content for remote access, connect and secure branch offices, and defend against external and internal web-based threats.

Target Audience

This course is intended for IT developers.

Objectives

• After completing this course, students will be able to:
• Configure outbound Internet access.
• Publish web servers and other servers.
• Publish a Microsoft Exchange Server.
• Enable VPN connections.
• Use ISA Server 2006 as a branch office gateway.
• Manage ISA Servers in the enterprise.
• Configure load balancing.
• Use monitoring, alerting, and logging.

Course Outline

This lab explores the user interface of ISA Server and explores how ISA Server uses multiple networks, uses a single list of firewall rules, and uses monitoring.

Exercises:

• Exploring the User Interface
• Ease of Use: Multiple Networks
• Ease of Use: Single Rule Base
• Ease of Use: Monitoring

Lab B: Configuring Outbound Internet Access

This lab explains how to configure ISA Server to allow outbound Web access for client computers on the internal network; to allow ICMP network traffic, used by the Ping command, from client computers on the internal network; to allow outbound access from the ISA Server computer; and to block a large number of TCP connections from the same IP address.

Exercises:

• Allowing Outbound Web Access from Client Computers
• Enabling the Use of the Ping Command from Client Computers
• Allowing Outbound Access from the ISA Server
• Configuring ISA Server for Flood Resiliency

Lab C: Publishing Web Servers and Other Servers

This lab explains how to configure ISA Server to publish a Web server on the internal network to client computers on the Internet; to publish a Web Server on the ISA Server to client computers on the Internet; to enable link translation for a published Web site; and to publish Microsoft SharePoint Server. It also explains how to publish two Web servers (10.1.1.21 and 10.1.1.22) as a Web farm, and how to configure ISA Server to publish a terminal server (remote desktop) on the internal network and on the ISA Server computer.

Exercises:

Publishing a Web Server on the Internal Network
Publishing the Web Server on the ISA Server Computer
Performing Link Translation on a Published Web Server
Using Cross-Site Link Translation to Publish SharePoint Server
Publishing a Web Farm for Load Balancing
Publishing Multiple Terminal Servers

Lab D: Publishing a Microsoft Exchange Server

This lab explains how to enable access to the Microsoft Exchange Server for clients that use Microsoft Office Outlook Web Access (OWA). It also explains how to configure server publishing rules on the ISA Server to allow access to the Exchange Server by using the SMTP and POP3 protocols; how to publish the Exchange Server (Denver) for Remote Procedure Call (RPC) access by Outlook clients; and how to configure ISA Server to tunnel RPC traffic inside HTTP (HTTPS) traffic.

Exercises:

• Publishing Exchange Web Access - Certificate Management
• Publishing an Exchange Server for SMTP and POP3
• Publishing an Exchange Server for Outlook (RPC)
• Publishing an Exchange Server for RPC over HTTP

Lab E: Enabling VPN Connections

This lab explains how to configure ISA Server to accept incoming VPN connections from client computers on the Internet; how to configure a client computer on the Internet to establish a VPN connection to the ISA Server computer; how to configure ISA Server so that client computers on the Internet are allowed access to the internal network by establishing a VPN connection; how to configure ISA Server so that it can allow phased network access to VPN clients; how to create and distribute a Connection Manager profile for use with network access quarantine; and how to use the network access quarantine by creating a VPN connection from the VPN client to the ISA Server.

Exercises:

• Configuring ISA Server to Accept Incoming VPN Connections
• Configuring a Client Computer to Establish a VPN Connection
• Allowing Internal Network Access for VPN Clients
• Configuring VPN Quarantine on ISA Server
• Creating and Distributing a Connection Manager Profile
• Using VPN Quarantine on the Client Computer

Lab F: ISA Server 2006 as Branch Office Gateway

This lab explains how to configure ISA Server to compress HTTP content when responding to requests from client computers and to request compressed HTTP content when connecting to other servers; how to configure ISA Server to cache Background Intelligent Transfer Service (BITS) content and request ranges from cached files; and how to configure ISA Server to use Differentiated Services (DiffServ) tagging of HTTP and HTTPS network packets.

Exercises:

• Configuring HTTP Compression to Reduce Bandwidth Usage
• Configuring ISA Server to Cache BITS Content
• Configuring DiffServ Settings to Prioritize Network Traffic

Lab G: Enterprise Management of ISA Servers

This lab explains how to create an enterprise policy and apply this policy to multiple ISA Server arrays; how to configure ISA Server to allow remote management; and how ISA Server uses a Configuration Storage server (CSS) to save configuration data.

Exercises:

• Enterprise Policies and Array Policies
• Remote Management and Role-Based Administration
• Working with Configuration Storage Servers (Optional)

Lab H: Configuring Load Balancing

This lab explains how to configure ISA Server to use network load balancing (NLB) for load-balanced and fault-tolerant outbound and inbound access; how ISA Server configures and controls the NLB driver to provide load balancing functionality for array members; how to disable NLB integration on an array; how to configure ISA Server to use Cache Array Routing Protocol (CARP); and how to configure ISA Server to use CARP and a content download job to update cache content.

Exercises:

• Configuring NLB
• Examining Details on NLB
• Using CARP to Distribute Cache Content
• Using CARP and Scheduled Content Download Jobs

Lab I: Using Monitoring, Alerting, and Logging

This lab explains the monitoring, connectivity checking, and logging functions of ISA Server.

Exercises:

• Monitoring the ISA Server
• Checking Connectivity from the ISA Server
• Logging Client Computer Acces