1. Module 9: Configuring ISA Server for the Enterprise

2. Overview Introducing ISA Server Enterprise Edition
Installing ISA Server in the Enterprise
Using Enterprise Policies and Array Policies
Managing Network Connections
Scaling ISA Server
Extending and Automating ISA Server Functionality

3. Introducing ISA Server Enterprise Edition
Benefits of ISA Server Enterprise Edition
Using ISA Server Enterprise Edition

4. Benefits of ISA Server Enterprise Edition
Scalability
Scales ISA Server functionality by using arrays, symmetric multiprocessing, Network Load Balancing, and CARP.
Distributed and Hierarchical Caching
Enhances caching performance and fault tolerance.
Active Directory
Contains configuration and policy information and used to apply access controls to users and groups.
Tiered Policy
Enables you to create policies at both the array and enterprise level.

5. Using ISA Server Enterprise Edition
ISA Management
Action View
Configure enterprise
Internet Security and Acceleration Server
Tree
You can create one or more enterprise policies that can be applied to arrays. At the enterprise level, you control whether additional rules can be created at the array level.
Use this taskpad to configure how the enterprise policy affects the array policy.
Servers and Arrays: Array Description Type Mode Created Applied Enterprise Po
LONDON Array Integrated 1/4/2001 7:19… Enterprise Policy 1 PERTH Array Integrated 1/4/2001 7:52… Enterprise Policy 1
VANCOUVER Array Integrated 1/4/2001 7:33… Enterprise Policy 1
Welcome
Servers and Arrays
Enterprise
Backup
Monitoring
Help
Configure Enterprise
Policies
Configure Enterprise Policy Default Settings
Set Enterprise Policy for the Selected Array
Set Defaults…
Back Up…
Restore…
View
Refresh
Export List…
Properties

6. Installing ISA Server in the Enterprise
Installing ISA Server Schema in Active Directory
Using Arrays
Installing ISA Server in an Array
Creating and Deleting Arrays in ISA Management
Promoting a Stand-Alone Server
Maintaining Enterprise Configurations

7. Installing ISA Server Schema in Active Directory
ISA Enterprise Initialization
Specify how to apply the enterprise policy at the array level. After installation, you can modify these settings for any array in the enterprise.
When applying enterprise policy:
Select an option to configure enterprise policy.
Use array policy only
Use this enterprise policy:
Enterprise Policy 1
Also allow array-level access policy rules that restrict enterprise policy
Allow publishing rules
Force packet filtering on the array OK
Cancel

8. Using Arrays Guidelines for Setting Up Arrays
Configuration Settings for Arrays
Permissions Required for Adding Arrays

9. Installing ISA Server in an Array
Start
Run Setup
Install ISA Server as an Array
Create and Name Array
Select an Enterprise Policy Setting
Finish
Select Custom Policy Settings

10. Creating and Deleting Arrays in ISA Management
Creating New Arrays
Deleting Arrays

11. Promoting a Stand-Alone Server
Migrating Policy Settings
Promoting a Stand-Alone Server

12. Maintaining Enterprise Configurations
ISA Management
Action View
Configure enterprise
Internet Security and Acceleration Server
Tree
You can create one or more enterprise policies that can be applied to arrays. At the enterprise level, you control whether additional rules can be created at the array level.
Use this taskpad to configure how the enterprise policy affects the array policy.
Servers and Arrays: Array Description Type Mode Created Applied Enterprise Po
LONDON Array Integrated 1/4/2001 7:19… Enterprise Policy 1 PERTH Array Integrated 1/4/2001 7:52… Enterprise Policy 1
VANCOUVER Array Integrated 1/4/2001 7:33… Enterprise Policy 1
Welcome
Servers and Arrays
Enterprise
Backup
Monitoring
Help
Configure Enterprise
Policies
Configure Enterprise Policy Default Settings
Set Enterprise Policy for the Selected Array
Set Defaults…
Back Up…
Restore…
View
Refresh
Export List…
Properties
Backup Enterprise Configuration
Store backup configuration in this location: OK
Cancel
Browse…
Comment:
Restore Enterprise Configuration
Restore configuration from the following backup (.BEF) file:
Cancel
Browse… OK

13. Using Enterprise Policies and Array Policies
Configuring an Enterprise Policy
Configuring an Array Policy
Combining Enterprise Policies and Array Policies

14. Configuring an Enterprise Policy
Using Enterprise Policy Elements
Setting a Default Enterprise Policy
Changing Default Settings for the Enterprise Policy
Applying an Enterprise Policy to Selected Arrays

15. Configuring an Array Policy
Configuring the Cache for an Array
Forcing Packet Filtering for an Array
Allowing Publishing Rules in an Array
Configuring Server-Specific Settings in ISA Server

16. Combining Enterprise Policies and Array Policies
LONDON Properties
General OK
Cancel
Use array policy only
Apply
Specify whether enterprise policies should be enabled for this array. Then, select the enterprise policy you want to apply.
Allow publishing rules
Force packet filtering on the array
Outgoing Web Requests
Incoming Web Requests
Policies
Auto Discovery
Performance
Security
Use default enterprise policy settings
Use custom enterprise policy settings
Use this enterprise policy:
Enterprise Policy 1
Allow array-level access rules that restrict enterprise policy
Select this option to allow array-level settings.

17. Managing Network Connections
Routing Overview
Configuring Routing for Web Proxy Client Requests
Configuring Routing for Firewall Client and SecureNAT Client Requests
Automatic Discovery Overview
Configuring Automatic Discovery
Configuring Clients for Automatic Discovery
Customizing Client Discovery Information

18. Routing Overview Array 3 Overseas ISP Array 2 Local Requests Array 1
ISA Server
Corporate Office
Overseas Branch Office

19. Configuring Routing for Web Proxy Client Requests
Start
Name the Rule
Select a Destination Set
Specify a Request Action
Configure Primary Routing
Configure Backup Routing
Configure Cache Retrieval
Finish
Configure Cache Storage

20. Configuring Routing for Firewall Client and SecureNAT Client Requests
Network Configuration Properties
Firewall Chaining OK
Cancel
Use this page to specify how requests from Firewall and SecureNat clients are forwarded to upstream servers.
To route requests to upstream servers:
Use primary connection
Apply
Chain to this computer:
Use dial-up entry
LONDON
Browse…
Use this account: NWTRADERS\Admin
Set Account…
Select Server or Array
Select one from the following servers:
Domain
Name
Type
nwtraders.msft LONDON Server OK
Cancel
Set Account
Use this following account:
User:
Password:
Confirm password:
LONDON\Administrator
Browse… OK
Cancel

21. Automatic Discovery Overview
WPAD entry on DHCP or DNS Server points to the ISA Server. 2
Client contacts DNS or DHCP server for ISA Server information. 1
Alias Name FQDN
WPAD isa.domain.msft
DNS or DHCP
Server
Client
Client forwards Internet requests to ISA Server based on configuration information. 4
Client retrieves configuration information from ISA Server. 3
ISA Server
isa.domain.msft

22. Configuring Automatic Discovery
Configuring ISA Server for Automatic Discovery
Configuring a DNS Server for Automatic Discovery
Configuring a DHCP Server for Automatic Discovery

23. Configuring Clients for Automatic Discovery
Setting Automatic Discovery for Firewall Clients
Setting Automatic Discovery for Internet Explorer

24. Customizing Client Discovery Information
Customizing Settings for Web Proxy Clients
Customizing Settings for Firewall Clients

25. Scaling ISA Server Understanding CARP Configuring CARP
Understanding Network Load Balancing

26. Understanding CARP Array Membership List Server 1 Internet Server 2
Server 2 Server 3 Server 4
Server 5
Server 1
Internet
Server 2
Server 3
Server 4
array.dll?Get.Info.v1
Server 5
Web Proxy Client

27. Configuring CARP Type a number to set the load factor.
LONDON Properties
Policies
Auto Discovery
Performance
Security
LONDON Properties
General
Outgoing Web Requests
Incoming Web Requests
General
Array Memberships
Identification
Use the same listener configuration for all internal IP addresses.
Configure listeners individually per IP address
Intra-array communication
Use this IP address for intra-array communication:
Server IP Address Display N… Authentic… Server C…
LONDON <All inter… Integrated
Find…
Add…
Remove
Edit…
Load Factor
TCP port: 8080
SSL port: 8443
Specify the load factor for this server. This number indicates the relative cache availability of this server compared to the rest of the array members:
Enable SSL listeners
Connections
100
Connection settings
Configure…
Type a number to set the load factor.
Ask unauthenticated users for identification
Resolve requests within array before routing
Select to enable CARP. OK
Cancel
Apply OK
Cancel
Apply

28. Understanding Network Load Balancing
ISA Server Array
Cache
Cache
Cache
Internet
Published Server

29. Extending and Automating ISA Server Functionality
Automating Administration Tasks
Extending Functionality By Using Filters

30. Automating Administration Tasks
Using the ISA Server SDK
Extending ISA Management
Managing Cache Content
Adding Custom Events and Alerts

31. Extending Functionality By Using Filters
Creating Application Filters
Creating Web Filters

32. Lab A: Configuring ISA Server for the Enterprise

33. Review Introducing ISA Server Enterprise Edition
Installing ISA Server in the Enterprise
Using Enterprise Policies and Array Policies
Managing Network Connections
Scaling ISA Server
Extending and Automating ISA Server Functionality