Course 2824B: Implementing Microsoft internet security and acceleration server 2004 - Module 10

Module 10: Monitoring ISAServer 2004. This module explains how administrators can use monitoring features of ISA Server to track network activity and monitor ISA Server performance. After completing this module, students will be able to: Describe how to use monitoring features on ISA Server 2004, configure alerts on ISA Server 2004, configure monitoring of connectivity on ISA Server 2004,...
Nội dung trích xuất từ tài liệu:
Course 2824B: Implementing Microsoft internet security and acceleration server 2004 - Module 10 Module 10:Monitoring ISAServer 2004Overview Monitoring Overview Configuring Alerts Configuring Session Monitoring Configuring Logging Configuring Reports Monitoring Connectivity Monitoring Services and PerformanceLesson: Monitoring Overview Why Implement Monitoring? ISA Server Monitoring Components Designing a Monitoring and Reporting Strategy Using the ISA Server Dashboard for MonitoringWhy Implement Monitoring? Use monitoring to: Monitor traffic between networks to ensure that only legitimate traffic passes between networks Troubleshoot network connectivity between ISA Server clients, servers, and networks Collect information about attacks and to detect attacks as they occur Plan future modifications to the ISA Server or Internet access infrastructureISAServer Monitoring Components Componen Explanation ts Monitors ISA Server for configured events Alerts and then performs actions when the specified events occur Provides information on the current client Sessions sessions Provides detailed archived information Logging about the Web Proxy, Microsoft Firewall service, or SMTP Message Screener Summarizes information about the usage Reports patterns on ISA Server Connectivit Monitors connections from ISA Server to any other computer or URL on any y network Performanc Monitors server performance in real time, create a log file of server performance orDesigning a Monitoring andReporting Strategy When: Determine: Which events should trigger an alert Monitoring The event threshold before the alert is real-time triggered information The information that you need to monitor server performance The information you need to monitor server performance over time Collecting The information you need to monitor long-term server usage information The information you need to monitor security events Developing How to respond to the critical events a response that occur on the ISA Server strategyUsing the ISAServer Dashboard forMonitoring Monitorconnections Monitor alerts Monitor sessions Monitor trafficLesson: Configuring Alerts What Is an Alert? How to Configure Alert Definitions How to Configure Alert Events and Conditions How to Configure Alert Actions Alert Management TasksWhat Is an Alert? An alert is: A notification of an event or action that has occurred on ISA Server Triggered according to the conditions and trigger thresholds specified for the event associated with the alert When a server event takes place and The ISA records anServer alert: Management console displays the alert in the Alerts view An entry appears in the alerts view that lists column headings such as type of alert, the date and time, status, and categoryHow to Configure Alert DefinitionsHow to Configure Alert Events andConditions Define the event that will trigger the alert Define specificDefine the conditions for trigger the eventthresholds Definesubsequent alertsHow to Configure Alert Actions Configure e-mail action Define a program to run Define other alert actionsAlert Management Tasks Alerts are managed by performing the following tasks: Acknowledge registered alerts Acknowledge registered alerts Reset registered alerts When you configure an alert to stop the ISA Server Firewall Service, ISA Server goes into a lockdown mode. While in lockdown mode, ISA Server blocks most network trafficPractice: Configuring and ManagingAlerts Creating a New Alert Definition Modifying an Existing Alert Definition Gen-Web-01 Den-ISA-01 Internet Den-Clt-01Den-DC-01Lesson: Configuring SessionMonitoring What Is Session Monitoring? About Managing Sessions How to Configure Session FilteringWhat Is Session Monitoring? Session monitoring: Provides real-time information about client sessions hosted through ISA Server Includes information on: When the session was established The session type The source network The client user n ...