Course 2824B: Implementing Microsoft internet security and acceleration server 2004 - Module 12

Module 12: Implementing ISA Server 2004 enterprise edition: back-to-back firewall scenario. The primary focus of this module is the lab where the students will implement ISA Server Enterprise Edition in a back-to-back firewall configuration that includes network load balancing and shared caching. The module information will introduce the complexities of implementing a back-to-back firewall configuration and then provide guidelines for deploying this configuration. In the lab, the students will implement and test a back-to-back firewall scenario.
Nội dung trích xuất từ tài liệu:
Course 2824B: Implementing Microsoft internet security and acceleration server 2004 - Module 12 Module 12:Implementing ISA Server 2004Enterprise Edition: Back-to-BackFirewall ScenarioOverview Implementing a Back-to-Back Firewall Scenario Lab: Implementing a Back-to-Back Firewall ScenarioLesson: Implementing a Back-to-BackFirewall Scenario Issues in Deploying a Back-to-Back Firewall Solution Guidelines for Configuring ISA Servers in a Workgroup Guidelines for Implementing Network Load Balancing Guidelines for Configuring a Front-End Firewall Array Guidelines for Configuring a Back-End Firewall ArrayIssues in Deploying a Back-to-Back FirewallSolution Issues in deploying a back-to-back firewall configuration Using public include: or private IP addresses in the perimeter network Deploying the ISA Server computers in a domain or workgroup Configuring network load balancing Configuring name resolution and network routing Configuring access to Configuration Storage servers Configuring configure publishing rules and access rules Configuring SSL connections Configuring user authenticationGuidelines for Configuring ISA Servers in aWorkgroup ISA Server Enterprise Edition supports the following deployment scenarios: Deploying all ISA Server components on domain members Deploying all ISA Server components on workgroup members Deploying ISA Server components in a mixed configuration You can change the deployment configuration after deploymentGuidelines for Implementing Network LoadBalancing Configuring intra-array addressing: Used by array members to communicate with other array members If not enabling NLB, use the internal network for the intra-array network If enabling NLB, create a separate IP address or a separate network for the intra- array addresses When configuring network load balancing: Do not use a layer-2 switch to connect array members If all networks are enabled for NLB, add an additional network adapter and create a separate network for intra-array trafficGuidelines for Configuring a Front-EndFirewall Array When configuring a back-to-back firewall, begin by defining the Internal and External networks for both arrays OnNetwork the front-end routing firewall array, you need to configure: The Internal network IP addresses The network relationship Access to resources on the perimeter network Access to resources on the Internal network SSL publishing for perimeter network servers SSL publishing for Internal network servers AuthenticationGuidelines for Configuring a Back-EndFirewall Array OnThe a back-end firewall array, you need to internal network IP addresses configure: Network routing The perimeter network on the internal array Network objects Access to perimeter network resources Access for front-end ISA Server computers Access to resources on the Internal network Internal network access for domain membersPractice: Planning a Back-to-Back FirewallDeployment In this practice, you will analyze a scenario describing an organization’s requirements for deploying a back-to-back firewall solution and plan the front-end array and back-end array configurationLab 12: Implementing a Back-to-BackFirewall Scenario Den-DC-01 Den-ISA-01 Exercise 1: Enabling Gen-Web-01 Network Den-ISA-03 Load Balancing for the MainFront-End Array ExerciseDen-Web-01 2: Installing andDen-CSS-01 Configuring the Front-EndInternet Array Server Exercise 3: Configuring Den-ISA-02 Den-Msg-01 Firewall Rules for Resource Access Den-ISAEE-01 Den-DC-01 Den-CSS-01 Den-ISAEE-02 Den-Msg-01 Den-ISAEE-03 Den-Web-01 Gen-Web-01 Host1 Host2