Contents Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity Overview Introducing Proxy Server Designing a Functional Proxy Server Solution Securing a Proxy Server Solution 15 Enhancing a Proxy Server Design for Availability 26 Optimizing a Proxy Server Design for Performance 31 Lab A: Designing a Proxy Server Solution 41 Review 54 Information in this document is subject to change without notice The names of companies, products, people, characters, and/or data mentioned herein are fictitious and are in no way intended to represent any real individual, company, product, or event, unless otherwise noted Complying with all applicable copyright laws is the responsibility of the user No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Microsoft Corporation If, however, your only means of access is electronic, permission to print one copy is hereby granted Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property  2000 Microsoft Corporation All rights reserved Microsoft, Active Directory, ActiveX, BackOffice, FrontPage, JScript, MS-DOS, NetMeeting, PowerPoint, Visual Basic, Visual C++, Visual Studio, Win32, Windows, Windows Media, Windows NT, are either registered trademarks or trademarks of Microsoft Corporation in the U.S.A and/or other countries/regions Project Lead: Don Thompson (Volt Technical) Instructional Designers: Patrice Lewis (S&T OnSite), Renu Bhatt NIIT (USA) Inc Instructional Design Consultants: Paul Howard, Susan Greenberg Program Managers: Jack Creasey, Doug Steen (Independent Contractor) Technical Contributors: Thomas Lee, Bernie Kilshaw, Joe Davies Graphic Artist: Kirsten Larson (S&T OnSite) Editing Manager: Lynette Skinner Editor: Kristen Heller (Wasser) Copy Editor: Kaarin Dolliver (S&T Consulting) Online Program Manager: Debbi Conger Online Publications Manager: Arlo Emerson (Aditi) Online Support: Eric Brandt (S&T Consulting) Multimedia Development: Kelly Renner (Entex) Test Leads: Sid Benevente, Keith Cotton Test Developer: Greg Stemp (S&T OnSite) Production Support: Lori Walker (S&T Consulting) Manufacturing Manager: Rick Terek (S&T OnSite) Manufacturing Support: Laura King (S&T OnSite) Lead Product Manager, Development Services: Bo Galford Lead Product Manager: Ken Rosen Group Product Manager: Robert Stewart Other product and company names mentioned herein may be the trademarks of their respective owners Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity iii Instructor Notes Presentation: 60 Minutes Lab: 45 Minutes This module provides students with the information and experiences needed to evaluate and design Internet connectivity solutions by using Microsoft Proxy Server 2.0 (Proxy Server) in a Microsoft® Windows® 2000 network infrastructure Proxy Server is a separately purchased family of services that runs on Windows 2000 Proxy Server connects private networks to the Internet while protecting private network resources At the end of this module, students will be able to: Evaluate Proxy Server as a solution for Internet connectivity Evaluate and create a functional Proxy Server Internet connectivity solution Select appropriate strategies to secure a Proxy Server solution Select appropriate strategies to enhance Proxy Server availability Select appropriate strategies to improve Proxy Server performance On completion of the lab, students will be able to evaluate and design Proxy Server solutions to support the Internet connectivity requirements of an organization Course Materials and Preparation This section provides you with the materials and preparation needed to teach this module Required Materials To teach this module, you need the following materials: Microsoft PowerPoint® file 1562B_07.ppt Preparation Tasks To prepare for this module, you should: Review the contents of this module Review RFC 1918 Be familiar with a variety of Internet connectivity design requirements that can be met by using Proxy Server Review any relevant information in the Windows 2000 Help files, Windows 2000 Resource Kit, or documents provided on the Instructor CD Review the discussion material and be prepared to lead class discussions on the topics Complete the lab and be prepared to elaborate beyond the solutions found there Read the review questions and be prepared to elaborate beyond the answers provided in the text iv Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity Module Strategy Use the following strategy to present this module: Introducing Proxy Server Proxy Server provides Internet access to users on a private network while protecting the network’s resources In this section: • Explain that Proxy Server is not included with Microsoft Windows 2000 but runs on a Microsoft Windows 2000–based server Throughout the module, Proxy Server with initial capitalization is used to indicate the Microsoft Proxy Server 2.0 product When proxy server appears without initial capitalization, it indicates a computer that is providing proxy services • Emphasize that the design requirements for a Proxy Server solution include the security requirements, network configuration, number of Internet-exposed resources, and number of locations • Emphasize that Proxy Server works in routed or non-routed environments, provides restriction to the Internet on a user-by-user basis, and restricts access to private networks on a resource-by-resource basis • Point out that Proxy Server integrates with other networking services to take advantage of their features Designing a Functional Proxy Server Solution The solution provided by Proxy Server is based on the requirements for Internet Protocol (IP) addresses and Internet connectivity In this section: • Explain that the required public and private IP addresses are obtained from an Internet service provider (ISP) or Internet registry, and then assigned to the appropriate interfaces and devices • Describe how to determine the appropriate interface and select the appropriate connection • Explain that the private network address ranges are specified and the appropriate software is selected to connect the private network computers to the Proxy Server • Make sure students understand the illustration, scenario description, and directions for the Discussion Direct them to read through the scenario and answer the questions Be prepared to clarify if necessary Lead a class discussion on the students’ responses Securing a Proxy Server Solution Isolating the private network from the Internet and restricting traffic between the private network and the Internet enhance the security of a Proxy Server solution Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity v In this section: • Explain that access to Internet resources can be restricted on a user-byuser basis, with users defined in the Active Directory™ directory service, or as local user accounts on member servers • Emphasize that screened subnets are used to prevent traffic from passing through the proxy server The required number of screened subnets is based on the organization’s security requirements • Emphasize that to ensure a secure network, traffic must not pass between the private network and the Internet Explain the use of Proxy Server packet filters to prevent traffic between the private network and the Internet • Describe the use of Proxy Server domain filters to restrict private network traffic to Internet resources • Point out that to restrict inbound traffic, access to Hypertext Transfer Protocol (HTTP) or File Transfer Protocol (FTP) servers that are located in the private network can be enabled with Proxy Server Web Publishing Enhancing a Proxy Server Design for Availability The availability of the Proxy Server solution can be enhanced for both outbound and inbound client requests In this section: • Emphasize that using a proxy array provides failover for outbound client requests • Emphasize that multiple Proxy Servers can be combined with either round robin DNS entries, or Network Load Balancing Optimizing a Proxy Server Design for Performance Selecting a cache method, organizing the servers hierarchically, and distributing IP traffic across multiple Proxy Servers can optimize the performance of the Proxy Server solution In this section: • Emphasize that the Proxy Server cache stores copies of requests for Internet-based objects on a local drive on the Proxy Server • Emphasize that organizing Proxy Servers in a hierarchy and using caching reduces the use of the wide area network (WAN) connection and the Internet connection • Emphasize that distributing IP traffic across multiple Proxy Servers and using round robin DNS entries, proxy arrays, or Network Load Balancing, optimizes the performance of the Proxy Server solution • Make sure students understand the illustration, scenario description, and directions for the Discussion Direct them to read through the scenario and answer the questions Be prepared to clarify if necessary Lead a class discussion on the students’ responses vi Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity Lab Strategy Use the following strategy to present this lab Lab A: Designing a Proxy Server Solution In the lab, students will design a Proxy Server solution based on specific requirements outlined in the given scenario Students will review the scenario and the design requirements and read any supporting materials They will use this information, and the knowledge gained from the module, to develop a detailed design by using Proxy Server as a solution To conduct the lab: Read through the lab carefully, paying close attention to the instructions and to the details of the scenario Divide the class into four teams and assign each team one section (either the Regional Reservations Center or one of the types of airports) of the lab exercise Present the lab, and make sure students understand the instructions and the purpose of the lab Direct students to use the Design Worksheet to record their solutions Remind students to consider any functionality, security, availability, and performance criteria provided in the scenario, and how they will incorporate strategies to meet these criteria in their design Allow some time to discuss the solutions after the lab is completed A solution is provided in your materials to assist you in reviewing the lab results Encourage students to critique each other’s solutions and to discuss any ideas for improving their designs Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity Overview Slide Objective To provide an overview of the module topics and objectives Lead-in In this module, you will evaluate and create Internet connectivity solutions by using Microsoft Proxy Server 2.0 Point out that, throughout the module, Proxy Server with initial capitalization is used to indicate the Microsoft Proxy Server 2.0 product When proxy server appears without initial capitalization, it indicates a computer that is providing proxy services Introducing Proxy Server Designing a Functional Proxy Server Solution Securing a Proxy Server Solution Enhancing a Proxy Server Design for Availability Optimizing a Proxy Server Design for Performance Organizations connect to the Internet to provide Internet access to users on the private network, and to allow users on the Internet access to private network resources The Internet connectivity solution must prevent unauthorized users from accessing private network resources Microsoft Proxy Server 2.0 (Proxy Server) provides solutions to Internet connectivity requirements for Microsoft® Windows® 2000 networks Proxy Server is a group of services that is not included with Windows 2000 but runs on Windows 2000 At the end of this module, you will be able to: Evaluate Proxy Server as a solution for Internet connectivity Evaluate and design a functional Proxy Server solution for baseline Internet connectivity Select appropriate strategies to secure a Proxy Server solution Select appropriate strategies to enhance Proxy Server availability Select appropriate strategies to improve Internet connectivity performance Note Throughout the module, Proxy Server with initial capitalization is used to indicate the Microsoft Proxy Server 2.0 product When proxy server appears without initial capitalization, it indicates a computer that is providing proxy services Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity Introducing Proxy Server Slide Objective To identify Proxy Server as a solution for Internet connectivity in a Windows 2000 network infrastructure Lead-in Proxy Server connects private networks to the Internet, while also preventing unauthorized access to private network resources Design Decisions for a Proxy Server Solution Features of Proxy Server Integration Benefits Proxy Server connects private networks to the Internet, while also protecting private network resources from unauthorized users Proxy Server supports the essential requirements for any Internet connectivity design, and provides additional features to enhance the security, availability, and performance of the Internet connectivity solution To design an Internet connectivity solution based on Proxy Server, you must: Identify the design decisions that influence a Proxy Server solution Identify how the features provided by Proxy Server support the design requirements for Internet connectivity Identify the benefits provided by integrating Proxy Server with other services in Windows 2000 Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity Design Decisions for a Proxy Server Solution Slide Objective To introduce the factors that influence the development of a Proxy Server solution Internet Private Network Lead-in By using Proxy Server, you can design an Internet connectivity solution based on the security requirements of the private network, and the Internet connectivity requirements of the organization Proxy Server Secure Internet and Private Network Access Required? Routed or Non-routed Network? Number of Resources Shared with Internet? Number of Locations? b Refer to the questions on the diagram to identify the information required for making design decisions for a Proxy Server solution By using Proxy Server, your design decisions for an Internet connectivity solution must be based on the security requirements, the network configuration, the number of Internet-exposed resources, and the number of geographically distributed locations of the organization Proxy Server is an appropriate solution for Internet connectivity if: Internet and private network access is restricted on a user-by-user basis or on a resource-by-resource basis The private network is in a routed or nonrouted environment A number of private network resources need to be shared with Internetbased users The private network encompasses multiple geographic locations Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity Features of Proxy Server Slide Objective To introduce the features of Proxy Server Lead-in To incorporate Proxy Server into your solution, you need to identify how the features of Proxy Server support an organization’s Internet connectivity requirements Internet Private Network Proxy Server Screened Subnet A Screened Subnet B Isolate the Private Network Restrict Internet and Private Network Traffic Cache FTP and HTTP Requests Integrate Into Existing Networks To incorporate Proxy Server into your network design, you need to identify how the features of Proxy Server support the Internet connectivity requirements Isolating the Private Network Proxy Server enhances the security of an organization by isolating the private network from the Internet, and acting as an intermediary in the exchange of traffic between the Internet and the private network With the private network isolated, you can reduce the number of required public addresses by selecting a private addressing scheme Restricting Internet and Private Network Traffic Proxy Server allows you to restrict the traffic between the Internet and private network so that you can limit the access of private network users to Internetbased resources, and limit Internet user access to private, network-based resources You can use Proxy Server to restrict the traffic between the Internet and the private network by: Granting Internet access to authorized users Establishing filters that forward or discard Internet Protocol (IP) packets based on the IP address and protocol numbers Intercepting inbound Uniform Resource Locater (URL) requests and determining whether the requests must be forwarded to a private network resource Using screened subnets to provide the required level of network security 42 Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity Exercise Designing a Proxy Server Solution In this exercise, you are presented with the task of creating a Proxy Server design solution for a domestic airline This airline has three types of airports and one regional reservation center Your instructor will assign you to either the regional center or one of the airport types You will work either individually, or in a team, to design a Proxy Server solution that supports an organization’s Internet connectivity requirements You will record your solution on the specific Design Worksheet for your assigned location Review the scenario, the design requirements, and the diagram for your assigned location Follow the Design Worksheet Instructions to complete the Design Worksheet At the end of the exercise, be prepared to report your results to the class, and to participate in a discussion of the collective results Circle your assignment from the following list: a Regional Reservation Center b Hub Airport c Full Service Airport d Shuttle Airport Scenario A U.S domestic airline is converting their existing reservation and ticketing system from a mainframe solution to a solution based on Windows 2000 As the director of information services, you are responsible for the transition from the mainframe solution to the Windows 2000–based solution The airline has three regional reservation centers that provide telephone-based reservations and customer support The three regional reservation centers also provide the human resource and administration resources for each region The airline services 60 airports within its service routes The types of airports serviced by the airline are: Hub airports: Located in metropolitan cities, these airports can be a connecting point to final destinations These airports have a travelers club that provides Internet access, and printing and fax services to the customers Hub airports have the largest number of computers used by customer service agents and the baggage handling staff Full service airports: Located in larger cities that are final destinations, these airports are frequented by larger aircraft Some of these airports have a travelers club that provides Internet access, and printing and fax services to the customers Full service airports have fewer computers than the hub airports for customer service agents and the baggage handling staff Shuttle airports: Located in smaller cities that are final destinations, these airports are frequented by smaller commuter aircraft These airports have the minimal number of computers for customer service agents and the baggage handling staff, and are the smallest of the airport types Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity 43 Design Requirements By examining existing documentation, and conducting interviews with the airline personnel, you have established the design requirements that must be achieved Make sure your solution meets or exceeds these requirements Applications The domestic airline uses a number of applications to conduct the day-to-day operations Your solution must provide: Support for a mission-critical Web-based application that manages customer reservations, ticketing, baggage handling, and baggage tracking Support for a mission-critical Web-based application that allows customers to make reservations and purchase the tickets over the Internet Private network access to all shared folders and Web-based applications from the central and regional offices Internet access from the regional offices and the airports Active Directory as the directory services for the airline Proxy Server response times such that the application response time is not reduced Pilot tests on approved proxy servers indicate that each proxy server can support no more than 1,200 hosts while providing performance within given application response times Support for all mission-critical applications to be available 24-hours-a-day, 7-days-a-week Connectivity The applications used by the domestic airline require connectivity between the regional offices and airport offices Your solution must provide: Support for the airports to connect to the regional reservation centers by using dedicated connections over the Internet Isolation of the regional reservation centers and the airports from the Internet 44 Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity This is the high-level network diagram of the domestic airline network Additional detail for the regional reservation centers and the various airports is shown in subsequent diagrams Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity 45 Design Worksheet Instructions To complete the Proxy Server Design Worksheet for the section assigned to you or your team, you need to: Assign a name to the Windows 2000–based server that will run Proxy Server Use the name when specifying options Record this under Server name On the subnet, decide where you will place the Windows 2000–based server that runs Proxy Server Record this under Server placement Explain your reasons for the placement of the proxy server Record this under Reason for placing server Select the Proxy Server and Proxy Server client-specific options required for your solution Record this under Networking service options Explain the reason why you added the Proxy Server–specific options to the Proxy Server design Record this under Reason for specifying option 46 Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity This is the existing network at the regional reservation centers of the domestic airline The network configuration in the other regional reservation centers is identical Proxy Server Design Worksheet – Regional Reservation Center Server name Server placement Reason for specifying option To restrict traffic between the reservation center and the firewall Enable access to PRXYSRV1 for all users within the regional reservation center The Proxy Server default is to deny access to the PRXYSRV1 from the private network To provide greater availability and performance for the regional reservation center Enable active caching on PRXYSRV1 To improve the performance for accessing Internet Web objects Internet Explorer 5.0 installed on all workstations within the regional reservation office To allow workstations to automatically be configured to access the proxy array Filters HTTP and FTP traffic on Router between subnets B and E PRXYSRV2 Between subnets B and E To provide redundancy and load-balancing for PRXYSRV1 To force all HTTP and FTP traffic through the proxy array Enable access to PRXYSRV2 for all users within the regional reservation center The Proxy Server default is to deny access to the PRXYSRV2 from the private network PRXYSRV2 belongs to a proxy array named PRXYARRAY1 To provide greater availability and performance for the regional reservation center Enable active caching on PRXYSRV2 To improve the performance for accessing Internet Web objects Internet Explorer 5.0 installed on all workstations within the regional reservation office Filter HTTP and FTP traffic on Router between subnets B and E To allow workstations to automatically be configured to access the proxy array To force all HTTP and FTP traffic through the proxy array Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity Networking service options PRXYSRV1 belongs to a proxy array named PRXYARRAY1 PRXYSRV1 Between subnets B and E Reason for placing server 47 48 Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity This is the existing network at the hub airport of the domestic airline The network configuration in the other hub airports is identical Proxy Server Design Worksheet – Hub Airport Server name Server placement Reason for specifying option To restrict traffic between the hub airport and the firewall Enable access to PRXYSRV3 for all users within the hub airport The Proxy Server default is to deny everyone access to the PRXYSRV3 To provide greater availability and performance for the hub airport Enable active caching on PRXYSRV3 To improve the performance for accessing Internet Web objects Internet Explorer 5.0 installed on all workstations within the hub airport IP router filters on Router prevent HTTP/FTP traffic between subnets G and K PRXYSRV4 Between ubnets G and K To allow workstations to automatically be configured to access the proxy array To force all HTTP and FTP traffic through the proxy array Enable access to PRXYSRV4 for all users within the hub airport The Proxy Server default is to deny everyone access to the PRXYSRV4 PRXYSRV4 belongs to a proxy array named PRXYARRAY2 To provide greater availability and performance for the hub airport Enable active caching on PRXYSRV4 To restrict traffic between the hub airport and the firewall To improve the performance for accessing Internet Web objects Internet Explorer 5.0 installed on all workstations within the hub airport IP router filters on Router prevent HTTP/FTP traffic between subnets G and K PRXYSRV5 Between subnets I and J To restrict traffic between the travelers club network segment and the firewall To allow workstations to automatically be configured to access the proxy array To force all HTTP and FTP traffic through the proxy array Enable access to PRXYSRV5 for users within the travelers club The Proxy Server default is to deny access to the PRXYSRV5 Enable active caching on PRXYSRV5 To improve the performance for accessing Internet Web objects To force all HTTP and FTP traffic through the proxy array 49 IP router filters on Router prevent HTTP/FTP traffic between subnets I and J Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity Networking service options PRXYSRV3 belongs to a proxy array named PRXYARRAY2 PRXYSRV3 Between subnets G and K Reason for placing server 50 Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity This is the existing network at the full service airport of the domestic airline The network configuration in the other full service airports is identical, except that not all airports have a travelers club Proxy Server Design Worksheet – Full Service Airport Server name Server placement Reason for specifying option To restrict traffic between the full service airport and the firewall Enable access to PRXYSRV6 for all users within the full service airport The Proxy Server default is to deny everyone access to the PRXYSRV6 To provide greater availability and performance for the full service airport Enable active caching on PRXYSRV6 To improve the performance for accessing Internet Web objects Internet Explorer 5.0 installed on all workstations within the full service airport To allow workstations to automatically be configured to access the proxy array Filter HTTP and FTP traffic on Router between subnets M and Q The Proxy Server default is to deny everyone access to the PRXYSRV7 To provide greater availability and performance for the full service airport Enable active caching on PRXYSRV7 To restrict traffic between the full service airport and the firewall Enable access to PRXYSRV7 for all users within the full service airport PRXYSRV7 belongs to a proxy array named PRXYARRAY3 PRXYSRV7 Between subnets M and Q To force all HTTP and FTP traffic through the proxy array To improve the performance for accessing Internet Web objects Internet Explorer 5.0 installed on all workstations within the full service airport To allow workstations to automatically be configured to access the proxy array Filter HTTP and FTP traffic on Router between subnets M and Q PRXYSRV8 Between subnets O and P To restrict traffic between the travelers club network segment and the firewall To force all HTTP and FTP traffic through the proxy array Enable access to PRXYSRV8 for users within the travelers club The Proxy Server default is to deny access to the PRXYSRV8 Enable active caching on PRXYSRV8 To improve the performance for accessing Internet Web objects Filter HTTP and FTP traffic on Router between subnets O and P 51 To force all HTTP and FTP traffic through the proxy array Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity Networking service options PRXYSRV6 belongs to a proxy array named PRXYARRAY3 PRXYSRV6 Between subnets M and Q Reason for placing server 52 Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity This is the existing network at the shuttle airport of the domestic airline The network configuration in the other shuttle airports is identical Proxy Server Design Worksheet – Shuttle Airport Server name Server placement Reason for specifying option To restrict traffic between the shuttle airport and the firewall Enable access to PRXYSRV8 for all users within the shuttle airport The Proxy Server default is to deny access to the PRXYSRV8 To provide greater availability and performance for the shuttle airport Enable active caching on PRXYSRV8 To improve the performance for accessing Internet Web objects Internet Explorer 5.0 installed on all workstations within the shuttle airport IP router filters on Router 12 prevent HTTP/FTP traffic between subnets R and S PRXYSRV9 Between subnets R and S To restrict traffic between the shuttle airport and the firewall To allow workstations to automatically be configured to access the proxy array To force all HTTP and FTP traffic through the proxy array Enable access to PRXYSRV9 for all users within the shuttle airport The Proxy Server default is to deny everyone access to the PRXYSRV9 PRXYSRV9 belongs to a proxy array named PRXYARRAY4 To provide greater availability and performance for the shuttle airport Enable active caching on PRXYSRV9 To improve the performance for accessing Internet Web objects Internet Explorer 5.0 installed on all workstations within the shuttle airport IP router filters on Router 12 prevent HTTP/FTP traffic between subnets R and S To allow workstations to automatically be configured to access the proxy array To force all HTTP and FTP traffic through the proxy array Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity Networking service options PRXYSRV8 belongs to a proxy array named PRXYARRAY4 PRXYSRV8 Between subnets R and S Reason for placing server 53 54 Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity Review Slide Objective To reinforce module objectives by reviewing key points Lead-in The review questions cover some of the key concepts taught in the module Introducing Proxy Server Designing a Functional Proxy Server Solution Securing a Proxy Server Solution Enhancing a Proxy Server Design for Availability Optimizing a Proxy Server Design for Performance Describe the Internet connectivity needs addressed by Proxy Server and how Proxy Server addresses each of these needs Proxy Server provides protection by isolating and filtering IP traffic between the private network and the Internet Proxy Server provides enhanced security by hiding internal IP addresses from the Internet Proxy Server increases performance by locally caching Web content for access by computers on the private network Proxy Server enhances security by restricting access to Web and FTP servers inside the private network A network administrator wants to restrict users to a list of approved Internet Web sites How might Proxy Server be configured to restrict the Internet Web sites available to private network users? Proxy Server can be configured to filter all traffic not destined for the approved Internet Web sites The approved Web sites can be specified by IP address, domain name, or subdomain name Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity 55 Two remote offices are using Microsoft NetMeeting® for video conferencing across the Internet Recently, Proxy Server was installed at both locations Now the remote offices are unable to connect by using NetMeeting What has happened? One possibility is that when implementing Proxy Server, filters were created that inadvertently filtered out the NetMeeting port numbers or IP addresses Another possibility is the computers that run NetMeeting not have the Proxy Server client software installed or properly configured Due to increased network traffic, response times through a proxy server have decreased How might the implementation of the proxy server be changed to address the increased demand? The number of processors in the proxy server can be increased, but a better solution would be to create a proxy array The proxy array would provide increased performance and availability In addition, Windows Clustering can be used to increase the availability of Proxy Server THIS PAGE INTENTIONALLY LEFT BLANK ... 2000 At the end of this module, you will be able to: Evaluate Proxy Server as a solution for Internet connectivity Evaluate and design a functional Proxy Server solution for baseline Internet connectivity. .. for a Web object How frequently the Web object changes Module 7: Microsoft Proxy Server 2.0 as a Solution for Internet Connectivity 33 34 Module 7: Microsoft Proxy Server 2.0 as a Solution for. .. organization Note Include a proxy array at remote locations if the number of users, or need for availability, requires additional proxy servers 36 Module 7: Microsoft Proxy Server 2.0 as a Solution