Contents
Overview 1
Introducing ISA Server 2
Using Caching 8
Using Firewalls 11
Deployment Scenarios for ISA Server 19
Review 24
Module 1: Overview of
Microsoft ISA Server
Information in this document is subject to change without notice. The names of companies,
products, people, characters, and/or data mentioned herein are fictitious and are in no way intended
to represent any real individual, company, product, or event, unless otherwise noted. Complying
with all applicable copyright laws is the responsibility of the user. No part of this document may
be reproduced or transmitted in any form or by any means, electronic or mechanical, for any
purpose, without the express written permission of Microsoft Corporation. If, however, your only
means of access is electronic, permission to print one copy is hereby granted.
Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual
property rights covering subject matter in this document. Except as expressly provided in any
written license agreement from Microsoft, the furnishing of this document does not give you any
license to these patents, trademarks, copyrights, or other intellectual property.
Identify common deployment scenarios for ISA Server.
Materials and Preparation
This section provides the materials and preparation tasks that you need to teach
this module.
Required Materials
To teach this module, you need the Microsoft PowerPoint
®
file 2159A_01.ppt.
Preparation Tasks
To prepare for this module, you should:
Read all of the materials for this module.
Study the review questions and prepare alternative answers to discuss.
Anticipate questions that students may ask. Write out the questions and
provide the answers.
Review the ISA Server Web page (www.microsoft.com/isaserver/) for
updated information about ISA Server.
Read “Deployment scenarios” in ISA Server Help.
Read “ISA Server Usage Scenarios” in the white paper entitled “Internet
Security and Acceleration Server 2000 Installation and Deployment Guide”
under Additional Reading on the Trainer Materials compact disc.
Read the white paper titled “Internet Security and Acceleration Server 2000
Enterprise Edition: Deploying the Secure Firewall, Proxy, and Web Cache
Web content. Explain the three types of caching that ISA Server can use to
accelerate Web performance for both internal and external clients.
Using Firewalls
Discuss how a firewall protects the internal network from intruders on the
Internet by allowing only specific network traffic to come in to or to go out
of an internal network.
Describe the three types of firewall designs presented in the module.
Explain that this course uses the term perimeter network to refer to a
network that is separate from both the Internet and the private network and
that contains resources to make available to users on the Internet in a secure
manner. Because the terms DMZ and screened subnet are also commonly
used, tell students that these terms are interchangeable.
Ensure that students understand the terms and concepts associated with
controlling network access. These terms and concepts will be presented in
more detail throughout the course.
Deployment Scenarios for ISA Server
Before you discuss the different deployment scenarios, explain that the
examples that the module presents are just some of many possible scenarios.
Tell students that they can find more deployment scenarios in ISA Server
Help and in the printed product documentation.
Customization Information
This section identifies the lab setup requirements for a module and the
configuration changes that occur on student computers during the labs. This
information is provided to assist you in replicating or customizing Microsoft
Official Curriculum (MOC) courseware.
There are no labs in this module, and as a result, there are no lab setup
requirements or configuration changes that affect replication or customization.
access. Finally, ISA Server includes management and administration features
that enable organizations to centrally control and manage Internet use and
access.
After completing this module, you will be able to:
Explain the use of ISA Server.
Describe the use of Web caching.
Describe the use of firewalls.
Identify common deployment scenarios for ISA Server.
Topic Objective
To provide an overview of
the module topics and
objectives.
Lead-in
In this module, you will learn
about using ISA Server as a
cache server and as an
enterprise firewall.
2 Module 1: Overview of Microsoft ISA Server
Introducing ISA Server
Module 1: Overview of Microsoft ISA Server 3 ISA Server Editions
ISA Server Standard Edition
ISA Server Enterprise Edition
*****************************
ILLEGAL FOR NON
-
TRAINER USE
******************************
ISA Server is available in two editions that are designed to meet the business
and networking needs of your organization.
ISA Server Standard Edition
The standard edition provides firewall security and Web caching capabilities for
small businesses, workgroups, and departmental environments. The standard
edition provides robust security, fast Web access, intuitive management, and
excellent price and performance for business-critical environments.
ISA Server Enterprise Edition
The enterprise edition is designed to meet the performance, management, and
scalability needs of high-volume Internet traffic environments with centralized
server management, multiple levels of access policy, and fault-tolerant
capabilities. The enterprise edition provides secure, scalable, and fast Internet
connectivity for mission-critical environments.
Topic Objective
To identify the ISA Server
editions.
Extensible and Open Platform
Extensible and Open Platform
*****************************
ILLEGAL FOR NON
-
TRAINER USE
******************************
ISA Server is a key member of the .NET Enterprise Server family. The
products in .NET Enterprise Server family are Microsoft’s comprehensive
family of server applications for building, deploying, and managing scalable,
integrated, Web-based solutions and services. ISA Server offers several benefits
to organizations that want fast, secure, and manageable Internet connectivity.
For more information about the .NET Enterprise Server family, view the
.NET Enterprise Servers animation, which is included on the Student Materials
compact disc.
Fast Web Access with a High-Performance Cache
ISA Server provides the following Web performance benefits:
Provides faster Web access for users by retrieving objects locally rather than
over a slower connection to the potentially congested Internet.
Reduces bandwidth costs by reducing network traffic from the Internet.
Distributes the content of Web servers and e-commerce applications
efficiently and cost-effectively to reach customers worldwide.
Protects Web, e-mail, and other application servers from external attacks by
using Web publishing and server publishing to securely process incoming
requests to internal servers.
Filters incoming and outgoing network traffic to ensure security.
Enables secure access for authorized users from the Internet to the internal
network by using virtual private networks (VPNs).
Unified Management with Integrated Administration
ISA Server provides the following management benefits:
Controls access centrally to ensure and enforce corporate policies.
Improves productivity by limiting Internet use to approved applications and
destinations.
Allocates bandwidth to match business priorities.
Provides monitoring tools and produces reports that show how Internet
connectivity is used.
Automates commonly performed tasks by using scripts.
Extensible and Open Platform
ISA Server provides the following extensibility and customization benefits:
Addresses security and performance needs that are specific to an
organization by using the ISA Server Software Development Kit (SDK) for
requests from clients to a cache server that holds the cached objects.
Firewall Mode
In firewall mode, you can secure network traffic by configuring rules that
control communication between an internal network and the Internet. You can
also publish internal servers, which enables an organization to share data on its
network with partners or customers.
Integrated Mode
In integrated mode, you can combine the firewall and cache services on a single
host computer. Although organizations can deploy ISA Server as a separate
firewall or as a separate caching server, you can combine the firewall and cache
server by choosing integrated mode. Many organizations can benefit from
unified administration of caching and firewall functions.
Topic Objective
To identify the installation
modes and associated
features of ISA Server.
Lead-in
There are three modes for
installing ISA Server.
Module 1: Overview of Microsoft ISA Server 7 Features Available with Each Mode
Depending on which mode you select, different features are available. The table
below lists the features that are available for the firewall and cache modes. In
integrated mode, all of the features are available.
Feature
Description
Yes No
Web publishing Makes internal Web servers available to
external clients.
No Yes
Server publishing Makes internal application servers
available to external clients.
Yes No
Real-time
monitoring
Enables you to centrally monitor the
ISA Server computer activity, including
alerts, sessions, and services.
Yes Yes
Alerts Notify you when specific events occur
and execute corresponding actions.
Yes Yes
Reports Summarize and analyze the activity
occurring on one or more ISA Server
computers.
Yes Yes
Delivery Tip
Explain that the tasks
associated with each of
these features will be
presented during the
course.
8 Module 1: Overview of Microsoft ISA Server
Lead-in
ISA Server caching
improves network
performance by maintaining
a cache of frequently
accessed Web objects.