Course 2824B: Implementing Microsoft internet security and acceleration server 2004 - Module 7

Module 7: Advanced application and web filtering. This module explains how application and Web filtering can be used for very specific filtering of traffic that flows through the ISA Server. The module shows how to configure application and Web filtering to provide advanced protection for the internal network.
Nội dung trích xuất từ tài liệu:
Course 2824B: Implementing Microsoft internet security and acceleration server 2004 - Module 7 Module 7:Advanced Application and Web FilteringOverview Advanced Application and Web Filtering Overview Configuring HTTP Web Filters Additional Application and Web FiltersLesson: Advanced Application and WebFiltering Overview What Is an Application Filter? What Is a Web Filter? Why Use Application and Web Filters? Application and Web Filter ArchitectureWhat Is an Application Filter? Application filters can: Enable firewall traversal for complex protocols Enable protocol-level Application intrusion detection Server Enable protocol-level content filtering Generate alerts and log events ISA ServerWhat Is a Web Filter? Web filters can: Scan and modify HTTP requests Scan and modify HTTP responses Web Block specified Server responses Log and analyze traffic Encrypt and compress data Implement custom authentication schemes ISA ServerWhy Use Application and WebFilters? Protectionand Application against Webmalicious code by filters provide: blocking packets that have worm or virus characteristics Protection against user actions by blocking the download of harmful programs or ensuring that some types of data do not leave the network Protection against specific network connections by blocking connection attempts by specific applications Integration with third-party or custom filters that have been developed using the application filter API or the Web filter APIApplication and Web FilterArchitecture Web Filter 3 s Web Filter API Web Applicati Proxy 2 on Filter Filters Application Filter API Firew all 4 1 Servic Rules Engine e Firewa ll Engin eLesson: Configuring HTTP WebFilters HTTP Web Filtering Overview How to Configure HTTP Web Filter General Properties How to Configure HTTP Web Filter Methods How to Configure HTTP Web Filter Extensions How to Configure HTTP Web Filter Headers How to Configure HTTP Web Filter Signatures How to Identify an HTTP Application Signature Best Practice: HTTP Filter Configuration for Web PublishingHTTP Web Filtering Overview Use HTTP filtering to: Filter traffic from internal clients to other networks Filter traffic from Internet clients to internal Web servers HTTP filtering is rule specific so you can configure different filters for each access or publishing rule HTTP filters enable filtering of HTTP packets based on several criteriaHow to Configure HTTP Web Filter GeneralProperties Configure maximum header length Configure maximum payload length Configure maximum URL and query lengthHow to Configure HTTP Web FilterMethods Configure allowed or blocked methodsHow to Configure HTTP Web FilterExtensions Configure allowed or blocked extensionsHow to Configure HTTP Web FilterHeaders Configure headers that will be blocked Configure server header settings Configure Via header settingsHow to Configure HTTP Web FilterSignatures Configure blocked signaturesHow to Identify an HTTP ApplicationSignature HTTP Reque st Reques GET.http://www.contoso.com/.HTTP/1.0. t .Accept:.image/gif,.image/xxbitmap, Header .image/jpeg,.image/pjpeg, .application/vnd.msexcel, .application/vnd.mspowerpoint, .application/msword,.*/*. .AcceptLanguage:.enus. .IfModifiedSince:.Fri,.11.Oct.2002.20:30:04.GMT. .IfNoneMatch:.06ee8fa6471c21:428. .UserAgent:.Mozilla/4 ...