Implementing Microsoft Internet Security and Acceleration (ISA) Server 2004

Introduction
This five-day instructor-led course providesstudents with the knowledge and skills to deploy and manage Microsoft Internet Securityand Acceleration (ISA) Server 2004 as part of a larger security infrastructure.The course introduces security concepts unique to ISA Server 2004 and providesbest practices for their implementation.

Audience
The audience will be IT Professionals who areresponsible for implementing network and perimeter security measures, includingInternet firewalls, application layer filters, and screened networks. They willalso implement caching servers and additional mechanisms to protectpublic-facing Web servers. These individuals will have a need to simplifyongoing management, reduce support costs and prevent security breaches.

At Course Completion
After completing this course, students will gainthe skills to:

Describe the functionality provided by ISA Server 2004, and explain valid deployment scenarios for ISA Server 2004.

Install and maintain ISA Server 2004, and install and configure ISA Server clients.

Configure secure access to Internet resources for internal network clients using ISA Server 2004.

Configure ISA Server 2004 as a firewall between the Internet and the internal network.

Configure secure access to internal network resources for Internet clients who are using Web and server publishing rules.

Configure ISA Server to provide secure access to Exchange Server for servers and clients located on the Internet.

Implement application and Web filters on ISA Server 2004.

Implement a virtual private network for remote clients and remote networks using ISA Server 2004.

Implement Web proxy caching on ISA Server 2004.

Monitor server performance, security, and usage on ISA Server 2004.

Prerequisites
This course requires that students meet thefollowing prerequisites:

Successful completion of Course 2810 : Fundamentals of Network Security, or equivalent knowledge of networking security.

Successful completion of Course 2273 : Managing and Maintaining a Microsoft Windows Server 2003 Environment, or equivalent knowledge of the Windows Server 2003 operating system and network concepts, or equivalent knowledge of Microsoft Windows® 2000 Server operating system and network concepts.

Experience implementing network resources such as Web, FTP, and Microsoft Exchange servers. Detailed knowledge about deploying these resources is not required.

Microsoft Certified Professional Exams
No Microsoft Certified Professional exams areassociated with this course currently.

Course Materials
The student kit includes a comprehensive workbookand other necessary materials for this class.
The following software is provided in the studentkit:

Evaluation copy of ISA Server 2004 for classroom use only.

Course Outline
Module1: Overview of Microsoft ISA Server 2004
This module provides an introduction to ISA Server2004. It introduces the core functionality provided by ISA Server 2004 andpresents an overview of how ISA Server 2004 integrates with other securitypractices to form a defense-in-depth approach to network security. The modulealso describes the most common deployment scenarios for ISA Server 2004.
Lessons

Introducing ISA Server 2004
DeploymentScenarios for ISA Server 2004

Lab A: Introducing ISA Server 2004


Designing an ISA Server Deployment at Contoso Pharmaceuticals
Designingan ISA Server Deployment at Blue Yonder Airlines
After completing this module, students will be ableto:

Describe the features and functionality in ISA Server 2004 Standard Edition and Enterprise Edition.

List common deployment scenarios for ISA Server.

Module2: Installing and Maintaining ISA Server 2004
This module describes how to install ISA Server 2004,how to install and configure the ISA Server client software, and how tomaintain ISA Server 2004 after installation.
Lessons

Installing ISA Server 2004

Choosing ISA Server Clients

Installing and Configuring Firewall Clients

Advanced Firewall Client Configuration

Securing ISA Server 2004

Maintaining ISA Server 2004


Lab A: Installing and Maintaining ISA Server 2004


Performing an Unattended Installation of ISA Server 2004

Migrating an ISA Server Configuration

Securing ISA Server 2004
After completing this module, students will be ableto:

Install ISA Server 2004.

Install and configure ISA Server 2004 clients.

Improve the security of ISA Server.

Maintain ISA Server.

Module3: Enabling Access to Internet Resources
This module explains how to provide access toInternet resources for internal corporate clients while maintaining networksecurity. The module discusses different ways to implement this and also how toconfigure rules for access.
Lessons

ISA Server 2004 as a Proxy Server

Configuring Multi-Networking on ISA Server

Configuring Access Rule Elements

Configuring Access Rules for Internet Access


Lab A: Enabling Access to Internet Resources


Configuring ISA Server Access Rule Elements

Configuring ISA Server Access Rules

Testing ISA Server Access Rules
After completing this module, students will be ableto:

Describe access to Internet resources and how ISA Server 2004 enables access.

Describe how ISA Server 2004 works as a proxy server.

Configure multiple networks on ISA Server.

Configure access rule elements.

Configure ISA Server to provide access to Internet resources.

Module4: Configuring ISA Server 2004 as a Firewall
This module explains how to configure ISA Server2004 to provide firewall capabilities and restrict traffic into and out of thenetwork. The module describes how to configure firewall policies and rules toprovide specific functionality.
Lessons

Using ISA Server as a Firewall

Examining Perimeter Networks and Templates

Configuring System Policies

Configuring Intrusion Detection and IP Preferences


Lab A: Configuring ISA Server as a Firewall


Restoring Firewall Access Rules

Modifying the ISA Server System Policy

Testing the Policy Modifications
After completing this module, students will be ableto:

Describe the core functionality provided by firewalls and how this functionality is implemented in ISA Server 2004.

Describe the different types of perimeter network types and use ISA Server network templates to deploy perimeter networks.

Configure system policies.

Configure intrusion detection and IP preferences on ISA Server 2004.

Module5: Configuring Access to Internal Resources
This module explains how to configure Web andserver publishing rules to publish internal network resources to the Internetwithout compromising internal network security.
Lessons

Introduction to Publishing

Configuring Web Publishing

Configuring Secure Web Publishing

Configuring Server Publishing

Configuring ISA Server Authentication


Lab A: Configuring Access to Internal Resources


Configuring ISA Server Authentication and Secure Publishing

Testing the ISA Server Configuration
After completing this module, students will be ableto:

Describe how ISA Server 2004 can be used to configure access to internal resources.

Configure Web publishing.

Configure secure Web publishing.

Configure server publishing.

Configure ISA Server authentication.

Configure publishing for additional services.

Module6: Integrating ISA Server 2004 and Microsoft Exchange Server
This module explains how Microsoft Exchange Serveris a critical network service that is virtually always accessible from theInternet and how ISA Server 2004 can be used to provide security for ExchangeServer and for securing client connections to Exchange.
Lessons

Issues in E-Mail Security

Configuring ISA Server to Secure SMTP Traffic

Configuring ISA Server to Secure WebClient Connections

Configuring ISA Server to Secure Client Connections


Lab A: Integrating ISA Server 2004 and Microsoft Exchange Server


Enabling RPC over HTTP Client Connections

Configuring a Forms-Based Authentication for Microsoft Outlook® Web Access
After completing this module, students will be ableto:

Describe the issues in e-mail security.

Configure ISA Server to secure Simple Message Transfer Protocol (SMTP) traffic.

Configure ISA Server to secure client connections.

Configure ISA Server to secure Web client connections.

Module7: Advanced Application and Web Filtering
This module explains how application and Webfiltering can be used for very specific filtering of traffic that flows throughthe ISA Server. The module shows how to configure application and Web filteringto provide advanced protection for the internal network.
Lessons

Advanced Application and Web Filtering Overview

Configuring HTTP Web Filters

Configuring Additional Application and Web Filters


Lab A: Advanced Application and Web Filtering


Identifying an Application Method and Signature

Modifying the HTTP Web Filter
After completing this module, students will be ableto:

Describe how application filtering and Web filtering work.

Configure HTTP Web filters.

Configure other application and Web filters.

Module8: Configuring Virtual Private Network Access for Remote Clients and Networks
This module explains how to provide access to theinternal network for remote users while maintaining network security by implementinga virtual private network (VPN). The module shows how to configure ISA Server2004 to provide a VPN solution.
Lessons

Virtual Private Networking Overview

Configuring Virtual Private Networking forRemote Clients

Configuring Virtual Private Networking for Remote Sites

Configuring VPN Quarantine Control Using ISAServer 2004
After completing this module, students will be ableto:

Describe how VPNs work and the components required to configure VPNs.

Configure ISA Server to enable VPNs for remote clients.

Configure ISA Server to enable VPNs for remote sites.

Configure ISA Server to enable VPN quarantine service.

Module9: Implementing Caching to Improve Browsing Performance
This module explains how ISA Server can cachecontent that clients request from the Internet to provide a quicker response tothe client. This module discusses how to configure caching for maximumefficiency.
Lessons

Caching Overview

Configuring General Cache Properties

Configuring Cache Rules

Configuring Content Download Jobs


Lab A: Configuring Caching on ISA Server 2004


Testing and Monitoring ISA Server Caching
After completing this module, students will be ableto:

Describe how caching is implemented on ISA Server 2004.

Configure caching properties on ISA Server 2004.

Configure cache rules on ISA Server 2004.

Configure content download jobs on ISA Server 2004.

Module10: Monitoring ISA Server 2004
This module explains how administrators can usemonitoring features of ISA Server to track network activity and monitor ISAServer performance.
Lessons

Monitoring Overview

Configuring Alerts

Configuring Session Monitoring

Configuring Logging

Configuring Reports

Monitoring Connectivity

Monitoring Services and Performance


Lab A: Configuring Caching on ISA Server 2004


Testing the Alerts Feature

Exercise 2: Testing the Reporting Feature

Exercise 3: Testing the Connectivity Monitoring Feature
After completing this module, students will be ableto:

Describe how to use monitoring features on ISA Server 2004.

Configure alerts on ISA Server 2004.

Configure session monitoring, logging, and reports on ISA Server 2004.

Configure monitoring of connectivity on ISA Server 2004.

Monitor services and performance on ISA Server 2004.