Course 2824B: Implementing Microsoft internet security and acceleration server 2004 - Module 11

Module 11: Implementing ISA Server 2004 enterprise edition. This module will focus on the concepts related to planning and implementing an ISA Server 2004 infrastructure. This module will highlight the differences between ISA Server 2004 Standard Edition and Enterprise Edition and explain how to implement the Enterprise Edition features.
Nội dung trích xuất từ tài liệu:
Course 2824B: Implementing Microsoft internet security and acceleration server 2004 - Module 11 Module 11:Implementing ISA Server 2004Enterprise EditionOverview Overview of ISA Server 2004 Enterprise Edition Planning an ISA Server 2004 Enterprise Edition Deployment Implementing ISA Server 2004 Enterprise EditionLesson: Overview of ISA Server 2004Enterprise Edition Animation: Comparing ISA Server 2004 Enterprise Edition and Standard Edition Why Deploy ISA Server Enterprise Edition? What Is Active Directory Application Mode? What Is a Configuration Storage Server? What Are Enterprise Policies? What Are Enterprise Networks? What Are Arrays and Array Policies? What Are Effective Policies? How Enterprise Edition Integrates with Network Load Balancing How Enterprise Edition Enables Virtual Private Networking How Enterprise Edition Enables Distributed Caching Using CARPAnimation – Comparing ISA Server 2004Enterprise Edition and Standard EditionWhy Deploy ISA Server EnterpriseEdition? ISA Server 2004 Enterprise Edition enables: Easier management of multiple-server deployments More scalable Web proxy caching More scalable and fault-tolerant deployments ISA Server 2004 Enterprise Edition deployment scenarios: Deploying multiple ISA Server computers with the same configuration Deploying ISA Server computers in a distributed administration scenario Deploying ISA Server computers without Active DirectoryWhat Is Active Directory ApplicationMode? Active Directory Application Mode: Is a special mode of the Active Directory directory service Is an LDAP-compatible directory that does not require DNS or domains Enables multiple-master replication between ADAM servers ADAM is installed when you install Configuration Storage server You use ISA Server Management to manage the directory information stored in ADAMWhat Is a Configuration StorageServer? Configuratio n Storage ServerMS Firewall StorageReplication Port 2173MS Firewall Control Port 3847 ISA ServerMS Firewall Managem Storage ent Configuratio Port n Storage2172/2121 ServerWhat Are Enterprise Policies? Definition An ordered set of access rules and policy elements defined at the enterprise level Options Unless you configure enterprise policies, only array policies apply You can configure enterprise polices to be applied before or after the array policy Configure policy elements that can be used when configuring enterprise or array rulesWhat Are Enterprise Networks? Definition A range of enterprise-level IP addresses that do not cross a security boundary ToUse usethe enterprise networks, predefined you enterprise can: networks, which are associated with array networks of the same name Define enterprise rules using enterprise networks Use enterprise networks to enable communication between arrays Manage the IP address space in the organizationWhat Are Arrays and Array Policies? Array definition A group of ISA Server 2004 computers that share the same configuration Includes a Configuration Storage server and ISA Server Management computers Requires that ISA Server computers have a similar server configuration Array policy definition A set of access rules and publishing rules applied to all array members An array policy definition includes: •Policy elements that can define array rules •Array networks that define network configuration optionsWhat Are Effective Policies? Definition The resultant policy applied to an array member after the system policy, enterprise policy and the array policy rules are evaluated based on rule order Enterprise policy rules applied before array firewall Example: policy •Allow HTTP and HTTPS access to the Internet for all users. Branch office array firewall policy rules •Allow all protocol access from the Internal network to the Internet for all authenticated users •Allow DNS protocol traffic from branch-office DNS servers Enterprise policy rules applied after array firewall policy •Enable DNS protocol traffic from main-office DNS serversHow Enterprise Edition Integrates withNetwork Load Balancing Enterprise Edition integrates with network load balancing (NLB) by: NLB configuration is performed using ISA Server Management ISA Server provides NLB health monitoring Each network in an array can be configured for NLB ISA Server enables single affinity so clients always connect to the same ISA Server computer ...