1. TNT1-111

2. ISA Server 2004 Technical Overview

3. What we will cover:  Improvements over ISA Server 2000  Exploring the new user interface  Configuring filtering and firewall policies  Publishing Web and mail servers  Enabling and configuring VPN  Viewing and configuring monitoring and alert options

4. Prerequisite Knowledge  Experience with the Windows user interface  Experience supporting Microsoft Networks  Experience with firewall applications Level 200

5. Agenda  Introducing ISA Server 2004  Filtering and Policies  Server Publishing and VPN  Monitoring and Alerts

6. Introducing ISA Server 2004 Firewall Overview  Protects resources on your network  Connects directly to the Internet and your private network  Screens network traffic  Inbound or outbound  Allows only the data you want in or out  Denies everything else  Acts as a proxy for internal services  Users, Web and email servers  Windows XP and later includes ICF

7. Introducing ISA Server 2004 Firewall Overview  Protects resources on your network  Connects directly to the Internet and your private network  Screens network traffic  Inbound or outbound  Allows only the data you want in or out  Denies everything else  Acts as a proxy for internal services  Users, Web and email servers  Windows XP and later includes ICF

8. Introducing ISA Server 2004 New and Improved Features Extensive protocol support New Multiple network configuration New Unique per-network policies New Network relationships New VPN administration Improved Stateful inspection for VPN New Management and interface Improved Export and import New Delegated permissions New Cache rules Improved

9. Introducing ISA Server 2004 New and Improved Features Extensive protocol support New Multiple network configuration New Unique per-network policies New Network relationships New VPN administration Improved Stateful inspection for VPN New Management and interface Improved Export and import New Delegated permissions New Cache rules Improved

10. Introducing ISA Server 2004 ISA Server 2000 User Interface

11. Introducing ISA Server 2004 ISA Server 2004 User Interface

12. Introducing ISA Server 2004 Firewall Configurations: Edge Firewall Web Server Mail Server Domain Controller

13. Introducing ISA Server 2004 Firewall Interaction Web Server Mail Server

14. Introducing ISA Server 2004 Firewall Interaction Web Server Mail Server

15. Introducing ISA Server 2004 Firewall Configurations: Perimeter Network Domain Controller Mail Server Web Server SQL Server VPN Clients

16. Introducing ISA Server 2004 Multinetworking Improvements  ISA Server 2000 Local Address Table (LAT)  All internal IP address ranges  Determines where packet filters are applied  Determines where NAT or routing is performed  ISA Server 2004 Multinetworking  Unlimited multiple networks  Stateful inspection on all network traffic  Configure policies and relationships on a per- network basis

17. Introducing ISA Server 2004 Network Rules Branch Office Headquarters Perimeter Network Internet Routed NAT

18. Introducing ISA Server 2004 Network Rules Branch Office Headquarters Perimeter Network Internet Routed NAT

19. Introducing ISA Server 2004 Introducing ISA Server 2004 Explore the User Interface Create Perimeter Network demonstration demonstration

20. Agenda  Introducing ISA Server 2004  Filtering and Policies  Server Publishing and VPN  Monitoring and Alerts

21. Filtering and Policies Filtering Overview  Determines which packets to allow through firewall  Can apply to inbound and/or outbound traffic  Filter by protocol, port, or packet content  Allows certain traffic while denying others  Application filtering  Authentication and virus checking  Dynamic packet filtering  Opens ports as needed

22. Filtering and Policies Application Filters  Filters based on packet contents  FTP  Dynamically opens ports  Intrusion detection  DNS attacks  POP3 buffer overflow attacks  STMP  Block spam, viruses, and dangerous code  Streaming media  Specify streaming media protocols

23. Filtering and Policies Application Filters  Filters based on packet contents  FTP  Dynamically opens ports  Intrusion detection  DNS attacks  POP3 buffer overflow attacks  STMP  Block spam, viruses, and dangerous code  Streaming media  Specify streaming media protocols

24. Filtering and Policies Stateful Inspection  Inspects traffic source and destination  Also known as dynamic packet filtering  Opens ports in response to user request  Closes ports when communication ends  Outgoing packets that request specific types of incoming packets are tracked  Only replies are let back in

25. Filtering and Policies Firewall Policies Overview  Network rules  Determines how two networks are connected  Firewall policy rules  Access rules  Publishing rules  Outgoing requests  Checks network rules  Check access rules  Incoming requests  Checks publishing rules  Checks Web chaining rules

26. Filtering and Policies Firewall Policies Overview  Network rules  Determines how two networks are connected  Firewall policy rules  Access rules  Publishing rules  Outgoing requests  Checks network rules  Check access rules  Incoming requests  Checks publishing rules  Checks Web chaining rules

27. Filtering and Policies Configuring Policies  Action  Allow or deny  Protocols  Source and destination networks  Users or groups  Schedule  Application filtering  HTTP, RPC, FTP, SMTP, etc.  Change order of rule

28. Filtering and Policies Outgoing Access Requests Route or NAT?

29. Filtering and Policies Filtering and Policies Configure Perimeter-Internal Access Create and Test Internet Access Firewall Policy HTTP Scanning System Policies demonstration demonstration

30. Agenda  Introducing ISA Server 2004  Filtering and Policies  Server Publishing and VPN  Monitoring and Alerts

31. Server Publishing and VPN Publishing Rules  Allows access to servers on internal or perimeter networks from external network  Web publishing  Requires listener  HTTP or HTTPS  Mail server  RPC, POP3, SMTP clients  Web clients  OWA, OMA  Server-to-server

32. Server Publishing and VPN Publishing Rules  Allows access to servers on internal or perimeter networks from external network  Web publishing  Requires listener  HTTP or HTTPS  Mail server  RPC, POP3, SMTP clients  Web clients  OWA, OMA  Server-to-server

33. Server Publishing and VPN Mail Server Publishing - Bridging  Secure connection to clients  Secure connection to mail server  Secure connection to clients and server  Standard connections only

34. Server Publishing and VPN VPN and Quarantine  Provides phased network access for remote clients  Restricts VPN clients before allowing access to the network  RRAS forwards VPN requests to ISA  ISA Server places the connecting client in the Quarantined VPN Clients network  ISA checks firewall policy  Client is moved to VPN clients network  Once it clears quarantine

35. Server Publishing and VPN VPN and Quarantine  Provides phased network access for remote clients  Restricts VPN clients before allowing access to the network  RRAS forwards VPN requests to ISA  ISA Server places the connecting client in the Quarantined VPN Clients network  ISA checks firewall policy  Client is moved to VPN clients network  Once it clears quarantine

36. Server Publishing and VPN Server Publishing and VPN Create Web Listener Publish WideWorldImporters.com Web Site Publish Exchange for OWA Enable VPN demonstration demonstration

37. Agenda  Introducing ISA Server 2004  Filtering and Policies  Server Publishing and VPN  Monitoring and Alerts

38. Monitoring and Alerts Dashboard

39. Monitoring and Alerts Alerts

40. Monitoring and Alerts Sessions

41. Monitoring and Alerts Services

42. Monitoring and Alerts Reports

43. Monitoring and Alerts Connectivity

44. Monitoring and Alerts Logging

45. Monitoring and Alerts Monitoring the ISA Server Monitoring Connectivity Logging Client Access demonstration demonstration

46. Session Summary  ISA Server 2004 provides many benefits  Advanced application layer firewall  VPN  Web cache solution  ISA Server 2004 offers many improvements over ISA Server 2000  Enhanced user interface  New features  Improved functionality

47. For More Information…  Main TechNet Web site at www.microsoft.com/technet  Additional resources to support this Session page can be found at www.microsoft.com/technet/tnt1-111

48. For More Information…  ISA Server Web site at www.microsoft.com/ISAServer  What’s Ahead in ISA Server 2004 www.microsoft.com/isaserver/beta

49. MS Press Inside information for IT Professionals To find the latest IT Professional related titles visit www.microsoft.com/learning/books/

50. 3rd Party Publications Supplementary publications for IT Pro’s These books can be found and purchased at all good book stores and on-line retailers

51. Microsoft Learning Training Resources for IT Professionals  Course Title  Course Number:  Availability:  Detailed Syllabus: www.microsoft.com/learning To locate a training provider, please access www.microsoft.com/learning Microsoft Certified Technical Education Centers are Microsoft’s premier partners for training services

52. Assess your Readiness Microsoft Skills Assessment What is Microsoft Skills Assessment?  Self-study learning tool to evaluate readiness for product and technology solutions, instead of job-roles (certification)  Windows Server 2003, Exchange Server 2003, Windows Storage Server 2003, Visual Studio.NET, Office 2003  Free, online, unproctored, and available to anyone  Answers the question: “Am I ready?”  Determines skills gaps and provides learning plans with Microsoft Official Curriculum courses  Post your High Score to see how you stack up  visit www.microsoft.com/assessment www.microsoft.com/assessment

53. Become a Microsoft Certified Systems Administrator (MCSA)  What is the MCSA certification?  For IT professionals who manage and maintain networks and systems based on Microsoft Windows Server  How do I become an MCSA on Microsoft Windows Server 2003?  Pass 3 core exams  Pass 1 elective exam or 2 CompTIA certifications  Where do I get more information? www.microsoft.com/mcsa

54. Become A Microsoft Certified Systems Engineer (MCSE)  What is the MCSE certification?  Premier certification for IT pros who analyze the requirements, design, plan, and implement the infrastructure for business solutions based on the Microsoft Windows Server System  How do I become an MCSE on Microsoft Windows 2003?  Pass 6 core exams  Pass 1 elective exams from a comprehensive list  Where do I get more information? www.microsoft.com/mcse

55. Demonstrate Your Security or Messaging Specialization  What are MCSA/MCSE specializations?  Allows IT professionals to highlight specific expertise within their job role  Which specializations are available?  MCSA: Security  MCSA: Messaging  MCSE: Security  MCSE: Messaging  Where do I get more information? www.microsoft.com/mcsawww.microsoft.com/mcsa or www.microsoft.com/mcse www.microsoft.com/mcse www.microsoft.com/mcsa www.microsoft.com/mcse

56. What is TechNet?  Put the right answers at your fingertips  The comprehensive collection of resources to help IT pros plan, deploy and manage Microsoft products successfully  Monthly updates delivered on DVD or CD  The definitive resource to help you evaluate, deploy and maintain Microsoft products TechNet Subscription  Accessible at www.microsoft.com/technetwww.microsoft.com/technet  Online resources and community  Subscriber-only Online Services TechNet Web Site  Biweekly e-newsletter  Security updates, new resources, and special offers TechNet Flash  Briefings on the latest Microsoft products and technologies  Hands-on, “how to” information TechNet Events and Webcasts  User Groups  Managed Newsgroups TechNet Communities

57. Where Can I Get TechNet?  Visit TechNet online at www.microsoft.com/technet  Register for the TechNet Flash /technet/abouttn/subscriptions/flash_register.mspx  Join the TechNet online forum at www.microsoft.com/technet/community  Become a TechNet subscriber at www.microsoft.com/technet/abouttn/Subscriptions  Attend more TechNet events or view online www.microsoft.com/technet/community/events

59. Session Credits  Author: Aaron Clutter  Producer/Editor: Alan Le Marquand  Technical Specialists  Bob Carver  Microsoft Reviewers/Editors  Tony Baily  Josue Fontanez  Khiota Therrien