Module 3: Enabling Access to Internet Resources Overview ISA Server 2004 as a Proxy Server Configuring Multi-Networking on ISA Server Configuring Access Rule Elements Configuring Access Rules for Internet Access Lesson: ISA Server 2004 as a Proxy Server How ISA Server Enables Secure Access to Internet Resources Why Use a Proxy Server? How Does a Forward Web Proxy Server Work? What Is a Reverse Web Proxy Server? How to Configure ISA Server as a Proxy Server DNS Configuration for Internet Access How to Configure Web Chaining How to Configure Dial-Up Connections How ISA Server Enables Secure Access to Internet Resources Is the … User allowed access? Computer allowed access? Protocol allowed? Destination allowed? Content allowed? ISA Server Web Server Proxy Server Why Use a Proxy Server? ISA Server Improved Internet access security: User authentication Filtering client requests Content inspection Logging user access Hiding the internal network details Improved Internet access performance Web Server How Does a Forward Web Proxy Server Work? Is the … User allowed access? Protocol allowed? Destination allowed? ISA Server Web Server What Is a Reverse Web Proxy Server? Is the … Request allowed? Web Server Protocol allowed? Destination allowed? DNS Server ISA Server How to Configure ISA Server as a Proxy Server DNS Configuration for Internet Access If no internal DNS server is available to resolve Internet addresses, configure the ISA Server clients to use an Internet DNS server Configure ISA Server clients to use an internal DNS server if the DNS server can resolve Internet addresses ISA Server can proxy DNS requests for Web proxy and Firewall clients but not for SecureNAT clients ISA Server includes a DNS cache that caches the results of all DNS lookups performed through ISA Server How to Configure Web Chaining Internet Branch Office Branch Office Head Office How to Configure Protocol Elements How to Configure User Elements How to Configure Content Type Elements Define the MIME types and file extensions to include How to Configure Schedule Elements Define the times when this schedule is active or inactive How to Configure Domain Name Sets and URL Sets Use this to configure access to an entire domain Use this to configure access to a URL Practice: Configuring Firewall Rule Elements Configuring a new user set Configuring a new content type element Configuring a new schedule element Configuring a new URL set Den-ISA-01 Internet Den-DC-01 Lesson: Configuring Access Rules for Internet Access What Are Access Rules? How Network Rules and Access Rules Are Applied About Authentication and Internet Access How to Configure Access Rules How to Configure HTTP Policy How to Troubleshoot Access to Internet Resources What Are Access Rules? Access rules always define: Allow Deny User Destination Network Destination IP Destination Site action on traffic from user from source to destination with conditions Protocol IP Port/Type Source network Source IP Schedule Content Type How Network Rules and Access Rules Are Applied Network Rules Access Rules Domain Controller ISA Server Web Server About Authentication and Internet Access Authentication and ISA Server Clients Authentication Methods  Basic authentication  Digest authentication  Integrated Windows authentication  Digital certificates authentication  RADIUS authentication  RSA SecureID authentication How to Configure Access Rules How to Configure HTTP Policy Configure maximum header length Configure maximum payload length Configure maximum URL and query length Configure additional filtering options Practice: Managing Access Rules Creating a DNS Lookup Rule Creating a Managers Access Rule Testing Internet Access Den-ISA-01 Internet Den-Clt-01 Den-DC-01 How to Troubleshoot Access to Internet Resources To troubleshoot Internet access issues: Check for DNS name resolution Determine the extent of the problem Review access rule objects and access rule configuration Review access rule order Check access rule authentication Use ISA Server logging to determine which access rule is granting or denying access Lab: Enabling Access to Internet Resources Exercise 1: Configuring ISA Server Access Rule Elements Exercise 2: Configuring ISA Server Access Rules Exercise 3: Testing ISA Server Access Rules Den-ISA-01 Den-DC-01 Internet Den-ISA-02 ... Managing Access Rules Creating a DNS Lookup Rule Creating a Managers Access Rule Testing Internet Access Den-ISA-01 Internet Den-Clt-01 Den-DC-01 How to Troubleshoot Access to Internet Resources To. .. Authentication and Internet Access How to Configure Access Rules How to Configure HTTP Policy How to Troubleshoot Access to Internet Resources What Are Access Rules? Access rules always define: Allow Deny... Den-ISA-01 Internet Den-DC-01 Lesson: Configuring Access Rules for Internet Access What Are Access Rules? How Network Rules and Access Rules Are Applied About Authentication and Internet Access How to