Dr. Tom Shinder's Configuring ISA Server 2004

Debra Littlejohn Shinder is a technology consultant, trainer and writer who has authored a number of books on computer operating systems, networking, and client and server security over the last fourteen years. These include Scene of the Cybercrime: Computer Forensics Handbook, published by Syngress, and Computer Networking Essentials, published by Cisco Press. She is co-author, with her husband, Dr. Thomas Shinder, of the best-selling Configuring ISA Server 2000, Configuring ISA Server 2004, and ISA Server and Beyond. Deb has been a tech editor, developmental editor and contributor on over 20 additional books on networking and security subjects, as well as study guides for Microsoft's MCSE exams, CompTIA's Security+ exam and TruSecure’s ICSA certification. She formerly edited the Element K Inside Windows Server Security journal. She authored a weekly column for TechRepublic’s Windows blog, called Microsoft Insights and a monthly column on Cybercrime, and is a regular contributor to their Security blog, Smart Phones blog and other TR blogs. She is the lead author on Windowsecurity.com and ISAServer.org, and her articles have appeared in print magazines such as Windows IT Pro (formerly Windows & .NET) Magazine. She has authored training material, corporate whitepapers, marketing material, webinars and product documentation for Microsoft Corporation, Intel, Hewlett-Packard, DigitalThink, GFI Software, Sunbelt Software, CNET and other technology companies. Deb specializes in security issues, cybercrime/computer forensics and Microsoft server products; she has been awarded Microsoft’s Most Valuable Professional (MVP) status in Enterprise Security for eight years in a row. A former police officer and police academy instructor, she has taught many courses at Eastfield College in Mesquite, TX and sits on the board of the Criminal Justice Training Center there. She is a fourth generation Texan and lives and works in the Dallas-Fort Worth area. Dr. Tom Shinder is a 17 year veteran of the IT industry. Prior to entering IT, Dr. Tom graduated from the University of Illinois College of Medicine with a Doctor of Medicine and was a practicing neurologist with special interests in epilepsy and multiple sclerosis. Dr. Tom began his career in IT as a consultant, and has worked with many large companies, including Fina Oil, Microsoft, IBM, HP, Dell and many others. He started his writing career toward the end of the 1990s and has published over 30 books on Windows, Windows Networking, Windows Security and ISA Server/TMG, UAG and Microsoft DirectAccess. For over a decade, ISA Server and TMG were Tom’s passions, and he ran the popular web site www.isaserver.org, in addition to writing 8 books on ISA/TMG. Tom joined Microsoft in December of 2009 as a member of the UAG DirectAccess team and started the popular “Edge Man” blog that covered UAG DirectAccess. He is currently a Principal Knowledge Engineer in the Server and Cloud Division Information Experience Group Solution’s Team and his primary focus now is private cloud – with special interests in private cloud infrastructure and security.

• DedicationsAcknowledgmentsAbout the AuthorsTechnical EditorA Note From the PublisherFrom Deb and Tom Shinder, AuthorsChapter 1: Evolution of a Firewall: From Proxy 1.0 to ISA 2004The Book: What it Covers and Who It’s ForSecurity: The New Star of the ShowFirewalls: The Guardians at the GatewayISA: From Proxy Server to Full-Featured FirewallSummaryChapter 2: Examining the ISA Server 2004 Feature SetThe New GUI: More Than Just a Pretty InterfaceTeaching Old Features New TricksNew Features on the BlockMissing in Action: Gone but Not ForgottenSummarySolutions Fast TrackChapter 3: Stalking the Competition: How ISA 2004 Stacks UpFirewall Comparative IssuesComparing ISA 2004 to Other Firewall ProductsSummarySolutions Fast TrackChapter 4: ISA 2004 Network Concepts and Preparing the Network InfrastructureOur Approach to ISA Firewall Network Design and Defense TacticsTom and Deb Shinder’s Configuring ISA 2004 Network LayoutHow ISA Firewall’s Define Networks and Network RelationshipsWeb Proxy Chaining as a Form of Network RoutingFirewall Chaining as a Form of Network RoutingConfiguring the ISA Firewall as a DHCP ServerSummarySolutions Fast TrackChapter 5: ISA 2004 Client Types and Automating Client ProvisioningUnderstanding ISA 2004 Client TypesAutomating ISA 2004 Client ProvisioningAutomating Installation of the Firewall ClientSummaryChapter 6: Installing and Configuring the ISA Firewall SoftwarePre-installation Tasks and ConsiderationsPerforming a Clean Installation on a Multihomed MachineDefault Post-installation ISA Firewall ConfigurationThe Post-installation System PolicyPerforming an Upgrade InstallationPerforming a Single NIC Installation (Unihomed ISA Firewall)Quick Start Configuration for ISA FirewallsHardening the Base ISA Firewall Configuration and Operating SystemSummarySolutions Fast TrackChapter 7: Creating and Using ISA 2004 Firewall Access PolicyIntroductionISA Firewall Access Rule ElementsConfiguring Access Rules for Outbound Access through the ISA FirewallUsing Scripts to Populate Domain Name SetsCreating and Configuring a Public Address Trihomed DMZ NetworkAllowing Intradomain Communications through the ISA FirewallSummarySolutions Fast TrackChapter 8: Publishing Network Services with ISA 2004 FirewallsOverview of Web Publishing and Server PublishingCreating and Configuring Non-SSL Web Publishing RulesCreating and Configuring SSL Web Publishing RulesSSL BridgingSSL “Tunneling” versus SSL “Bridging”What About SSL-to-HTTP Bridging?Enterprise and Standalone Certificate AuthoritiesSSL-to-SSL Bridging and Web Site Certificate ConfigurationImporting Web Site Certificates into The ISA Firewall’s Machine Certificate StoreRequesting a User Certificate for the ISA Firewall to Present to SSL Web SitesCreating an SSL Web Publishing RuleThe Publishing Mode PageThe Select Rule Action pageThe Bridging Mode PageThe Define Website to Publish PageThe Public Name Details PageThe Select Web Listener PageThe User Sets PageThe SSL Web Publishing Rule Properties Dialog BoxCreating Server Publishing RulesCreating Mail Server Publishing RulesSummarySolutions Fast TrackChapter 9: Creating Remote Access and Site-to-Site VPNs with ISA FirewallsOverview of ISA Firewall VPN NetworkingCreating a Remote Access PPTP VPN ServerCreating a Remote Access L2TP/IPSec ServerCreating a PPTP Site-to-Site VPNCreating an L2TP/IPSec Site-to-Site VPNIPSec Tunnel Mode Site-to-Site VPNs with Downlevel VPN GatewaysUsing RADIUS for VPN Authentication and Remote Access PolicyUsing EAP User Certificate Authentication for Remote Access VPNsSupporting Outbound VPN Connections through the ISA FirewallInstalling and Configuring the DHCP Server and DHCP Relay Agent on the ISA FirewallCreating a Site-to-Site VPN Between an ISA Server 2000 and ISA FirewallA Note on VPN QuarantineSummarySolutions Fast TrackChapter 10: ISA 2004 Stateful Inspection and Application Layer FilteringIntroductionApplication FiltersWeb FiltersIP Filtering and Intrusion Detection/Intrusion PreventionSummarySolutions Fast TrackChapter 11: Accelerating Web Performance with ISA 2004 Caching CapabilitiesUnderstanding Caching ConceptsUnderstanding ISA Server 2004’s Web Caching CapabilitiesConfiguring ISA Server 2004 as a Caching ServerSummaryFast TrackChapter 12: Using ISA Server 2004’s Monitoring, Logging, and Reporting ToolsIntroductionExploring the ISA Server 2004 DashboardCreating and Configuring ISA Server 2004 AlertsMonitoring ISA Server 2004 Connectivity, Sessions, and ServicesWorking with ISA Server 2004 Logs and ReportsUsing ISA Server 2004’s Performance MonitorSolutions Fast TrackIndex