Forefront Security ISA
Microsoft TechNet Seminar 2006 Agenda ISA Server 2006 What’s New What’s Improved SSO Publishing Demo Intelligent Application Gateway 2007 What is it? How does it Work? Custom Publishing Demo Seminar Name
Microsoft TechNet Seminar 2006 ISA Server 2006 – Improved Exchange Publishing Support for Exchange 2007 Certificate Management Forms Based Authentication Custom Forms Multi-Language Support Authentication Enhancements Certificates, OTP, Radius, LDAP Seminar Name
ISA Server 2006 – New Features Microsoft TechNet Seminar 2006 ISA Server 2006 – New Features Single Sign On Cookie based authentication SharePoint publishing Specialised Wizard driven publishing Cross Array Link Translation Seminar Name
Custom FBA and Single Sign On Microsoft TechNet Seminar 2006 Demo Custom FBA and Single Sign On Seminar Name
IAG 2007 The Problem The Solution VPN PPTP/L2TP IAG Problems connecting NAT-T To much access Client Check The Solution IAG SSL/ VPN OEM Box Endpoint Security Easy connectivity
Microsoft TechNet Seminar 2006 What Is IAG 2007? Generic Applications Applications Knowledge Centre OWA … ………... Citrix …….. Sharepoint . ……….... ISO7799 Corporate Governance SarbOx Basel2 Policy & Regulation Awareness Centre WHAT? COMPLIANT? Web Java/Browser Embedded Tunneling Authentication Application Aware Modules Client/Server Devices Knowledge Centre PDA ….... Linux …….. Windows . ………... MAC …..... SSL VPN Gateway Security Authorization User Experience WHO? Specific Applications High-Availability, Management, Logging, Reporting, Multiple Portals Client Exchange/ Outlook OWA WHERE? SharePoint/Portals Citrix Seminar Name
Integrated Solution Benefits 8/2/2018 11:31 AM Integrated Solution Benefits Feature Area ISA Server Standalone Intelligent Application Gateway Branch Office Gateway for site-to-site connectivity and security Delivered by ISA Server Proxy / Web Cache Data center Internet access control and Web caching with full network-layer firewall Application Access Control Access Publish, secure and pre-authenticate access to specific Web services (Exchange, SharePoint) Flexible app-aware SSL VPN from any device or location Differentiated and policy-driven access to a broad range of network, server and data resources Highly granular access and security policy Customizable, identity-based Web portal experience Protect Assets Network edge protection through stateful packet inspection Application protection with advanced protocol filtering and validation Integration with enterprise infrastructure helps ensure the integrity and safety of network resources and applications Adaptable Web application firewall enforces app-specific filtering to protect apps from unmanaged PCs and networks Extensive monitoring and logging helps drive policy compliance by tracking user activity and data usage Safeguard Information Full IPsec VPN network connectivity integrated w/firewall engine for managed-PC access Strong endpoint security management and verification helps ensure endpoint health compliance and session control More granular control at the browser over users’ access to Web and non-Web resources Helps meet corporate information usage guidelines through client-side cleanup © 2003-2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.
Custom Application Publishing with IAG 2007 Microsoft TechNet Seminar 2006 Demo Custom Application Publishing with IAG 2007 Seminar Name
Gateway Roadmap Today Early-2007 2008 Unified Access Gateway “Longhorn” Svr-wave OEM appliances Software availability Integrated appliances with ISA Server 2006 + Whale IAG Standard Edition Enterprise Edition Whale Intelligent Application Gateway * (incl. ISA Server 2004) Express Edition Enterprise Edition Application Optimizers Network Connectivity Modules NAP, IPv6, 64-bit support Consistent policy framework Broader authentication tools (ADFS, smartcard) Enhanced network connectivity Improved enterprise application support Updated software for ISA and IAG OEM-ready Continued 3rd-party application support Single-server config