Table Of ContentExamInsight
For
Internet Security and Acceleration (ISA)
Server 2000 Enterprise Edition
Examination 70-227
Installing, Configuring, & Administering
Microsoft Internet Security and
Acceleration Server 2000
Enterprise Edition
Author
Michael Yu Chak Tin
MCSE 4.0/2000, MCSD, MCDBA 4.0/ 2000,
CISSP CCNA, CCDA, CCSE, OCP, CSA
Published by
TotalRecall Publications, Inc.
1103 Middlecreek
Friendswood, TX 77546
281-992-3131
NOTE: THIS IS BOOK IS GUARANTEED:
See details at www.TotalRecallPress.com
TotalRecall Publications, Inc.
This Book is Sponsored by BeachFront Quizzer, Inc.
Copyright 2003 by TotalRecall Publications, Inc. All rights reserved. Printed in the
United States of America. Except as permitted under the United States Copyright Act of
1976, No part of this publication may be reproduced, stored in a retrieval system, or
transmitted in any form or by any means electronic or mechanical or by photocopying,
recording, or otherwise without the prior permission of the publisher. If you are
dissatisfied with the products or services provided, please contact Bruce Moran at,
TotalRecall Publications, Inc., 1103 Middlecreek, Friendswood, TX 77546 .
The views expressed in this book are solely those of the author, and do not represent the
views of any other party or parties.
Printed in United States of America
Printed and bound by Data Duplicators of Houston Texas
Printed and bound by Lightning Source, Inc. in the USA and UK
ISBN: 1-59095-609-5
UPC: 6-43977-02227-1
The sponsoring editor is Bruce Moran and the production supervisor is Corby R. Tate.
Worldwide eBook distribution by:
InsideScoop®, TotalRecall™, ExamInsight™, and ExamWise™ are Trademarks of
TotalRecall Publications, Inc.
This publication is not sponsored by, endorsed by, or affiliated with Microsoft, Inc. The
“Windows® 2000, MCSE™, MCSD™, MCSE+I™, MCT™” Microsoft logos are
trademarks or registered trademarks of Microsoft, Inc. in the United States and certain
other countries. All other trademarks are trademarks of their respective owners.
Throughout this book, trademarked names are used. Rather than put a trademark symbol
after every occurrence of a trademarked name, we used names in an editorial fashion only
and to the benefit of the trademark owner. No intention of infringement on trademarks is
intended.
Disclaimer Notice: Judgments as to the suitability of the information
herein for purchaser’s purposes are necessarily the purchaser’s
responsibility. BeachFront Quizzer, Inc. and TotalRecall Publications,
Inc. extends no warranties, makes no representations, and assumes no
responsibility as to the accuracy or suitability of such information for
application to the purchaser’s intended purposes or for consequences of
its use.
Dedication
This book is dedicated to my parents John
and Esther Yu for their
support and encouragement.
Michael Yu Chak Tin
ExamInsight
For
Windows® 2000 (ISA) Server Certification
Examination 70-227
Installing, Configuring, & Administering
Microsoft® Internet Security and
Acceleration Server 2000
Enterprise Edition
BY
Michael Yu Chak Tin
MCSE 4.0/2000, MCSD, MCDBA 4.0/ 2000,
CISSP CCNA, CCDA, CCSE, OCP, CSA
About the Author
Born in Hong Kong and educated in the US, Michael Yu Chak Tin has worked for
Fortune 500 companies as well as small high-tech startups, both in Hong Kong and in the
US.
During his time in Silicon Valley, Michael developed invaluable experience in internal
process improvement applications that automated much of his employer's operations. At
Pacific Rim Networks Ltd., Michael has participated in the management of technology
projects, and the evaluation of new technologies for business applications. For years,
Michael has been providing content and writing exam study guides for the leading IT
Certification sites worldwide.
Michael has been working extensively on new Internet venture development. His
experience and knowledge in shaping strategic framework are valuable assets essential to
the success of a venture.
Michael has been an active member and winner of high school Swimming and
VolleyBall teams. Michael loves VolleyBall and Jet Skiing.
About the Editor
Mark Eader holds a BS in Computer Information Systems from the University of Houston.
He has many years of experience in networking, Cisco, Unix, Sun, Linux, Windows NT 4.0,
Windows 2000, programming, and Web development in the IT arena. He is an entrepreneur
who has worked for both big corporations and small IT companies.
A Quick overview of this book chapters:
Chapter 1: Installing ISA Server 1
Chapter 2: Configuring ISA Server Services 39
Chapter 3: Policies and Rules 99
Chapter 4: The Client Computers 149
Chapter 5: Using ISA Servers 185
Appendix A: 233
Index 287
Money Back Book Guarantee 291
70-227 Practice Exam Purchase 292
Table of Contents VII
Table of Contents
About the Author ......................................................................................IV
About the Editor ........................................................................................V
About the Book......................................................................................XIV
Introduction ............................................................................................ XV
Foreword ............................................................................................... XVI
How to read this book .......................................................................... XVII
70-227 Exam Preparation Guide ........................................................ XVIII
Skills Being Measured .......................................................................... XIX
Chapter 1: Installing ISA Server 1
Getting Ready - Questions ............................................................... 1
Getting Ready - Answers .................................................................. 2
I Introduction ............................................................................................... 2
II Pre-configuring network interfaces ........................................................... 3
Verifying Internet connectivity ................................................................... 3
Verifying DNS name resolution................................................................. 3
Pop Quiz 1.1 ........................................................................................ 3
III ISA Server installation modes................................................................... 5
Local Address Table (LAT). ...................................................................... 8
Constructing the LAT ........................................................................... 8
Modifying the LAT ................................................................................ 9
The cache and configuration................................................................... 10
Calculating and Configuring the Size of the cache ............................ 11
Configuring HTTP Caching ................................................................ 11
Configuring FTP Caching................................................................... 12
Configuring Active Caching................................................................ 12
Configuring Negative Caching ........................................................... 12
Configuring Scheduled Download...................................................... 13
Installing the ISA Server as a member of an array ................................. 15
Pop Quiz 1.2 ...................................................................................... 15
IV Upgrading Proxy 2.0 Server to ISA Server ............................................ 17
Backing up the Proxy Server 2.0 configuration....................................... 17
V Setup problems that may occur .............................................................. 18
Pop Quiz 1.3 ...................................................................................... 19
VI Chapter 1: Summary............................................................................... 21
VII Chapter 1: Practice Test ......................................................................... 22
VIII Chapter 1: Exercises............................................................................... 34
Lab 1.1 Installing Windows 2000 Server for ISA Server .................... 34
Lab 1.2 Installing ISA Server .............................................................. 36
VIII Table of Contents
Chapter 2: Configuring ISA Server Services 39
Getting Ready - Questions ............................................................. 39
Getting Ready - Answers ................................................................ 40
I Introduction ............................................................................................. 40
II Configuring outbound Internet access .................................................... 42
Troubleshooting outbound Internet access............................................. 44
Pop Quiz 2.1.......................................................................................45
III Configuring ISA Server hosting roles...................................................... 47
Configuring ISA Server for Web publishing ............................................ 47
Configuring ISA Server for Server Proxy ................................................ 52
Configuring ISA Server for server publishing.......................................... 52
Pop Quiz 2.2.......................................................................................53
IV Configuring H.323 Gatekeeper ............................................................... 55
Audio and video conferencing................................................................. 55
Configuring Gatekeeper rules ................................................................. 57
Gatekeeper Telephone Rules ............................................................ 58
Gatekeeper E-mail Rules ................................................................... 59
Gatekeeper Internet Protocol (IP) Rules............................................ 59
Configuring Gatekeeper destinations...................................................... 60
Pop Quiz 2.3.......................................................................................61
V Routing and remote access connections ................................................ 63
Setting up dial-up connections................................................................ 63
Troubleshooting dial-up connections ...................................................... 63
Setting up routing connections................................................................ 64
Troubleshooting routing connections ...................................................... 64
Configuring remote access service and connections ............................. 65
Troubleshooting remote access connections ......................................... 65
Setting up dial-on-demand connections.................................................. 65
Troubleshooting dial-on-demand connections........................................ 66
Setting up and verifying routing rules...................................................... 66
Pop Quiz 2.4.......................................................................................67
VI Virtual Private Network (VPN)................................................................. 69
Configuring Virtual Private Network (VPN) access................................. 69
Using the VPN Wizard ............................................................................ 70
Configuring VPN on the ISA Server without using the VPN Wizard....... 72
Troubleshooting Virtual Private Network (VPN) access ......................... 74
Setting up and troubleshooting connections for VPN ............................. 74
Pop Quiz 2.5.......................................................................................75
VII Configuring multiple ISA Server scalability ............................................. 77
Configuring Network Load Balancing (NLB) ........................................... 77
Configuring Cache Array Routing Protocol (CARP) ............................... 78
VIII Chapter 2: Summary............................................................................... 80
IX Chapter 2: Practice Test ......................................................................... 81
Table of Contents IX
X Chapter 2: Exercises............................................................................... 88
Lab 2.1 Windows 2000 ISA Server Internet Access............................ 88
Lab 2.2 Configuring ISA Server Web publishing ................................. 90
Lab 2.3 Configuring ISA Server for Server Proxy................................ 92
Lab 2.4 Virtual Private Networks (VPN) .............................................. 94
Lab 2.5 Multiple ISA Server scalability ................................................ 96
Chapter 3: Policies and Rules 99
Getting Ready – Questions............................................................. 99
Getting Ready - Answers .............................................................. 100
I Introduction ........................................................................................... 100
II Corporate standard policies and rules .................................................. 101
Configuring security templates.............................................................. 101
Configuring the firewall ......................................................................... 102
Securing the firewall.............................................................................. 108
Troubleshooting the firewall .................................................................. 109
III Controlling Outbound Access ............................................................... 110
Configuring access control policies....................................................... 110
Configuring bandwidth priority .............................................................. 112
Configuring bandwidth policies ............................................................. 113
Creating bandwidth rules to manage Internet access........................... 113
Creating site and content rules to restrict Internet access.................... 114
Creating protocol rules to manage Internet access .............................. 115
Creating routing rules to manage Internet access ................................ 116
Pop Quiz 3.1 .................................................................................... 117
IV Troubleshooting access problems ........................................................ 119
User based access problems................................................................ 119
Packet-based access problems ............................................................ 120
V Creating new policy elements ............................................................... 121
Policy elements ..................................................................................... 121
Schedules ............................................................................................. 123
Bandwidth priorities............................................................................... 123
Destination sets..................................................................................... 123
Client address sets ............................................................................... 124
Protocol definitions................................................................................ 124
Content groups...................................................................................... 125
Pop Quiz 3.2 .................................................................................... 125
VI Managing ISA Server arrays................................................................. 127
Creating an array of Proxy Servers....................................................... 127
Assigning an enterprise policy to an array ............................................ 128
Managing remote arrays ....................................................................... 130
VII Chapter 3: Summary............................................................................. 131
VIII Chapter 3: Practice Test ....................................................................... 132
