1 ISA Server 2004 Installation & Configuration Overview By Nicholas Quinn

2 This presentation will detail the following 3 steps. The Installation of ISA Server 2004 The Installation of ISA Server 2004 The Configuration of an Allow Policy The Configuration of an Allow Policy The Configuration of a Deny Policy The Configuration of a Deny Policy

3 Step 1 – Install ISA Server

4 Begin the Installation Insert ISA CD and double click ICON. Insert ISA CD and double click ICON. The Installation Wizard will open The Installation Wizard will open Agree to the licensing agreement Agree to the licensing agreement Enter your Customer Information Enter your Customer Information

5 Select Setup Type Select to install a Custom setup Select to install a Custom setup Select the Firewall Client Installation Share option Select the Firewall Client Installation Share option And Install this feature on the local hard drive And Install this feature on the local hard drive

6 Configure Internal NIC Click Add to specify internal address ranges Click Add to specify internal address ranges Select Internal under Network Adapter Select Internal under Network Adapter Click Select Network Adapter and choose the IP range required Click Select Network Adapter and choose the IP range required

7 Finish Installation ISA’s Installation Wizard will now install your configuration ISA’s Installation Wizard will now install your configuration ISA Server 2004 is now installed ISA Server 2004 is now installed The Next Step is to configure your allow policy The Next Step is to configure your allow policy

8 Step 2 - Configure Allow Policy

9 Enable ICMP Click on Firewall Policy Click on Firewall Policy Click on Create New Access Rule Click on Create New Access Rule Find ICMP in the list Find ICMP in the list Make sure the Enable check box is selected Make sure the Enable check box is selected Click on the Form tab Click on the Form tab

10 Add Internal NIC Click the Add button to add the Internal NIC Click the Add button to add the Internal NIC Expand Networks Expand Networks Highlight the Internal option and click Add Highlight the Internal option and click Add Make sure you click the Apply button Make sure you click the Apply button

11 Create the Network Select the Networks option from the list Select the Networks option from the list Click the Networks tab Click the Networks tab Highlight the Internal option Highlight the Internal option Right Click and select properties Right Click and select properties

12 Configure IP Range Click the Addresses tab Click the Addresses tab Click the Remove button to remove any addresses Click the Remove button to remove any addresses Click Add Click Add Select Internal Network Adapter Select Internal Network Adapter

13 Apply IP Range Configuration Your IP address range will appear automatically Your IP address range will appear automatically If it is correct click the Apply tab If it is correct click the Apply tab

14 Setup Internet Access Click on the Web Chaining tab Click on the Web Chaining tab Click the Create New Web Chaining Rule option Click the Create New Web Chaining Rule option Name the New Web Chaining Rule Name the New Web Chaining Rule

15 Select Destination On the Web Chaining Rule Destination page click Add On the Web Chaining Rule Destination page click Add Highlight External and click Add Highlight External and click Add Click Next Click Next

16 Configure Proxy Server Select Redirect Requests to a Specified Upstream Server Select Redirect Requests to a Specified Upstream Server Click Next Click Next

17 Configure Proxy Server Enter the IP address of the server Enter the IP address of the server Change the Port number to 80 instead of 8080 Change the Port number to 80 instead of 8080 the SSL Port number to 443 instead of 8443 the SSL Port number to 443 instead of 8443

18 Configure Backup Action Select Ignore Request under the heading When the Primary Route is Unavailable Select Ignore Request under the heading When the Primary Route is Unavailable Click Finish Click Finish Make sure you click the Apply button Make sure you click the Apply button

19 Firewall Policy Expand icon next to the word Server Expand icon next to the word Server Select the Firewall Policy option Select the Firewall Policy option Select the Create New Access Rule Select the Create New Access Rule Enter a name for the rule Enter a name for the rule Select Allow Select Allow

20 Configure Access Rule Source Select All Outbound Traffic click Next Select All Outbound Traffic click Next Click Add Click Add Expand Networks Expand Networks Highlight Internal then click Add Highlight Internal then click Add Repeat the previous step and select External Repeat the previous step and select External

21 Configure User Sets Select all users Select all users Click Next Click Next Click Finish Click Finish Make sure you click the Apply button Make sure you click the Apply button

22 Step 3 – Deny Policy

23 Configure IP Address Open Network Connections and Properties Open Network Connections and Properties Configure the IP address and the Subnet Mask Configure the IP address and the Subnet Mask The Preferred DNS Server must be the IP address of the Exchange Server The Preferred DNS Server must be the IP address of the Exchange Server

24 Connect to the Domain Right click on My Computer and select Properties Right click on My Computer and select Properties Click on the Computer Name tab Click on the Computer Name tab Click Change Click Change Enter Domain Name Enter Domain Name Change Primary DNS to Domain name Change Primary DNS to Domain name

25 Configure ISA Server Open ISA Server Open ISA Server Select Firewall Policy Select Firewall Policy Create New Access Rule Create New Access Rule Name the New Access Rule Name the New Access Rule Click Deny Click Deny

26 Select Protocol Select the Selected Protocols option Select the Selected Protocols option Expand the Common Protocols folder Expand the Common Protocols folder Highlight HTTPS to block a webpage Highlight HTTPS to block a webpage Click Add Click Add Click Close Click Close

27 Configure Access Rule Source Add Network Entities Add Network Entities Expand Networks Expand Networks Highlight Internal and click Add Highlight Internal and click Add Highlight Local Host and click Add Highlight Local Host and click Add Click Close Click Close

28 Access Rule Destination On the Access Rule Destinations screen click Add On the Access Rule Destinations screen click Add Click New and Select URL Set Click New and Select URL Set

29 Configure URL Set Enter the name of the website you wish to block Enter the name of the website you wish to block Click New Click New Enter the address of the website Enter the address of the website Click Ok Click Ok

30 Add Network Entities Expand URL Sets Expand URL Sets Highlight Google Highlight Google Click Add Click Add Click Close Click Close

31 Create User Set Highlight All Users and click Remove Highlight All Users and click Remove Click Add Click Add On the URL Sets screen click New On the URL Sets screen click New Name the User Set Name the User Set Click Next Click Next

32 Add Users Sets to Block On the Users screen click Add and Select Windows User and Groups On the Users screen click Add and Select Windows User and Groups Click Locations Click Locations Enter the Administrator account User Name and Password Enter the Administrator account User Name and Password

33 Find Users to Block Expand Entire Directory Expand Entire Directory Expand the domain that the users are in Expand the domain that the users are in Select the required organisational unit Select the required organisational unit Click Ok Click Ok

34 Select Users to Block Enter the user name you wish to block Enter the user name you wish to block Click Check Names Click Check Names The full name should appear The full name should appear Click Ok Click Ok Check information Check information Click Ok Click Ok

35 Add User Set On the Add Users screen highlight the group you have created and click Add On the Add Users screen highlight the group you have created and click Add Click Next Click Next Click Finish Click Finish Make sure you click the Apply button Make sure you click the Apply button