Examinsight for Internet Security and Acceleration (ISA) Server 2000 Enterprise Edition: Examination 70-227, Installing Configuring, and Administering Microsoft Internet Security and Acceleration Server 2000, Enterprise Edition PDF
Preview Examinsight for Internet Security and Acceleration (ISA) Server 2000 Enterprise Edition: Examination 70-227, Installing Configuring, and Administering Microsoft Internet Security and Acceleration Server 2000, Enterprise Edition
ExamInsight For Internet Security and Acceleration (ISA) Server 2000 Enterprise Edition Examination 70-227 Installing, Configuring, & Administering Microsoft Internet Security and Acceleration Server 2000 Enterprise Edition Author Michael Yu Chak Tin MCSE 4.0/2000, MCSD, MCDBA 4.0/ 2000, CISSP CCNA, CCDA, CCSE, OCP, CSA Published by TotalRecall Publications, Inc. 1103 Middlecreek Friendswood, TX 77546 281-992-3131 NOTE: THIS IS BOOK IS GUARANTEED: See details at www.TotalRecallPress.com TotalRecall Publications, Inc. This Book is Sponsored by BeachFront Quizzer, Inc. Copyright 2003 by TotalRecall Publications, Inc. All rights reserved. Printed in the United States of America. Except as permitted under the United States Copyright Act of 1976, No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means electronic or mechanical or by photocopying, recording, or otherwise without the prior permission of the publisher. If you are dissatisfied with the products or services provided, please contact Bruce Moran at, TotalRecall Publications, Inc., 1103 Middlecreek, Friendswood, TX 77546 . The views expressed in this book are solely those of the author, and do not represent the views of any other party or parties. Printed in United States of America Printed and bound by Data Duplicators of Houston Texas Printed and bound by Lightning Source, Inc. in the USA and UK ISBN: 1-59095-609-5 UPC: 6-43977-02227-1 The sponsoring editor is Bruce Moran and the production supervisor is Corby R. Tate. Worldwide eBook distribution by: InsideScoop®, TotalRecall™, ExamInsight™, and ExamWise™ are Trademarks of TotalRecall Publications, Inc. This publication is not sponsored by, endorsed by, or affiliated with Microsoft, Inc. The “Windows® 2000, MCSE™, MCSD™, MCSE+I™, MCT™” Microsoft logos are trademarks or registered trademarks of Microsoft, Inc. in the United States and certain other countries. All other trademarks are trademarks of their respective owners. Throughout this book, trademarked names are used. Rather than put a trademark symbol after every occurrence of a trademarked name, we used names in an editorial fashion only and to the benefit of the trademark owner. No intention of infringement on trademarks is intended. Disclaimer Notice: Judgments as to the suitability of the information herein for purchaser’s purposes are necessarily the purchaser’s responsibility. BeachFront Quizzer, Inc. and TotalRecall Publications, Inc. extends no warranties, makes no representations, and assumes no responsibility as to the accuracy or suitability of such information for application to the purchaser’s intended purposes or for consequences of its use. Dedication This book is dedicated to my parents John and Esther Yu for their support and encouragement. Michael Yu Chak Tin ExamInsight For Windows® 2000 (ISA) Server Certification Examination 70-227 Installing, Configuring, & Administering Microsoft® Internet Security and Acceleration Server 2000 Enterprise Edition BY Michael Yu Chak Tin MCSE 4.0/2000, MCSD, MCDBA 4.0/ 2000, CISSP CCNA, CCDA, CCSE, OCP, CSA About the Author Born in Hong Kong and educated in the US, Michael Yu Chak Tin has worked for Fortune 500 companies as well as small high-tech startups, both in Hong Kong and in the US. During his time in Silicon Valley, Michael developed invaluable experience in internal process improvement applications that automated much of his employer's operations. At Pacific Rim Networks Ltd., Michael has participated in the management of technology projects, and the evaluation of new technologies for business applications. For years, Michael has been providing content and writing exam study guides for the leading IT Certification sites worldwide. Michael has been working extensively on new Internet venture development. His experience and knowledge in shaping strategic framework are valuable assets essential to the success of a venture. Michael has been an active member and winner of high school Swimming and VolleyBall teams. Michael loves VolleyBall and Jet Skiing. About the Editor Mark Eader holds a BS in Computer Information Systems from the University of Houston. He has many years of experience in networking, Cisco, Unix, Sun, Linux, Windows NT 4.0, Windows 2000, programming, and Web development in the IT arena. He is an entrepreneur who has worked for both big corporations and small IT companies. A Quick overview of this book chapters: Chapter 1: Installing ISA Server 1 Chapter 2: Configuring ISA Server Services 39 Chapter 3: Policies and Rules 99 Chapter 4: The Client Computers 149 Chapter 5: Using ISA Servers 185 Appendix A: 233 Index 287 Money Back Book Guarantee 291 70-227 Practice Exam Purchase 292 Table of Contents VII Table of Contents About the Author ......................................................................................IV About the Editor ........................................................................................V About the Book......................................................................................XIV Introduction ............................................................................................ XV Foreword ............................................................................................... XVI How to read this book .......................................................................... XVII 70-227 Exam Preparation Guide ........................................................ XVIII Skills Being Measured .......................................................................... XIX Chapter 1: Installing ISA Server 1 Getting Ready - Questions ............................................................... 1 Getting Ready - Answers .................................................................. 2 I Introduction ............................................................................................... 2 II Pre-configuring network interfaces ........................................................... 3 Verifying Internet connectivity ................................................................... 3 Verifying DNS name resolution................................................................. 3 Pop Quiz 1.1 ........................................................................................ 3 III ISA Server installation modes................................................................... 5 Local Address Table (LAT). ...................................................................... 8 Constructing the LAT ........................................................................... 8 Modifying the LAT ................................................................................ 9 The cache and configuration................................................................... 10 Calculating and Configuring the Size of the cache ............................ 11 Configuring HTTP Caching ................................................................ 11 Configuring FTP Caching................................................................... 12 Configuring Active Caching................................................................ 12 Configuring Negative Caching ........................................................... 12 Configuring Scheduled Download...................................................... 13 Installing the ISA Server as a member of an array ................................. 15 Pop Quiz 1.2 ...................................................................................... 15 IV Upgrading Proxy 2.0 Server to ISA Server ............................................ 17 Backing up the Proxy Server 2.0 configuration....................................... 17 V Setup problems that may occur .............................................................. 18 Pop Quiz 1.3 ...................................................................................... 19 VI Chapter 1: Summary............................................................................... 21 VII Chapter 1: Practice Test ......................................................................... 22 VIII Chapter 1: Exercises............................................................................... 34 Lab 1.1 Installing Windows 2000 Server for ISA Server .................... 34 Lab 1.2 Installing ISA Server .............................................................. 36 VIII Table of Contents Chapter 2: Configuring ISA Server Services 39 Getting Ready - Questions ............................................................. 39 Getting Ready - Answers ................................................................ 40 I Introduction ............................................................................................. 40 II Configuring outbound Internet access .................................................... 42 Troubleshooting outbound Internet access............................................. 44 Pop Quiz 2.1.......................................................................................45 III Configuring ISA Server hosting roles...................................................... 47 Configuring ISA Server for Web publishing ............................................ 47 Configuring ISA Server for Server Proxy ................................................ 52 Configuring ISA Server for server publishing.......................................... 52 Pop Quiz 2.2.......................................................................................53 IV Configuring H.323 Gatekeeper ............................................................... 55 Audio and video conferencing................................................................. 55 Configuring Gatekeeper rules ................................................................. 57 Gatekeeper Telephone Rules ............................................................ 58 Gatekeeper E-mail Rules ................................................................... 59 Gatekeeper Internet Protocol (IP) Rules............................................ 59 Configuring Gatekeeper destinations...................................................... 60 Pop Quiz 2.3.......................................................................................61 V Routing and remote access connections ................................................ 63 Setting up dial-up connections................................................................ 63 Troubleshooting dial-up connections ...................................................... 63 Setting up routing connections................................................................ 64 Troubleshooting routing connections ...................................................... 64 Configuring remote access service and connections ............................. 65 Troubleshooting remote access connections ......................................... 65 Setting up dial-on-demand connections.................................................. 65 Troubleshooting dial-on-demand connections........................................ 66 Setting up and verifying routing rules...................................................... 66 Pop Quiz 2.4.......................................................................................67 VI Virtual Private Network (VPN)................................................................. 69 Configuring Virtual Private Network (VPN) access................................. 69 Using the VPN Wizard ............................................................................ 70 Configuring VPN on the ISA Server without using the VPN Wizard....... 72 Troubleshooting Virtual Private Network (VPN) access ......................... 74 Setting up and troubleshooting connections for VPN ............................. 74 Pop Quiz 2.5.......................................................................................75 VII Configuring multiple ISA Server scalability ............................................. 77 Configuring Network Load Balancing (NLB) ........................................... 77 Configuring Cache Array Routing Protocol (CARP) ............................... 78 VIII Chapter 2: Summary............................................................................... 80 IX Chapter 2: Practice Test ......................................................................... 81 Table of Contents IX X Chapter 2: Exercises............................................................................... 88 Lab 2.1 Windows 2000 ISA Server Internet Access............................ 88 Lab 2.2 Configuring ISA Server Web publishing ................................. 90 Lab 2.3 Configuring ISA Server for Server Proxy................................ 92 Lab 2.4 Virtual Private Networks (VPN) .............................................. 94 Lab 2.5 Multiple ISA Server scalability ................................................ 96 Chapter 3: Policies and Rules 99 Getting Ready – Questions............................................................. 99 Getting Ready - Answers .............................................................. 100 I Introduction ........................................................................................... 100 II Corporate standard policies and rules .................................................. 101 Configuring security templates.............................................................. 101 Configuring the firewall ......................................................................... 102 Securing the firewall.............................................................................. 108 Troubleshooting the firewall .................................................................. 109 III Controlling Outbound Access ............................................................... 110 Configuring access control policies....................................................... 110 Configuring bandwidth priority .............................................................. 112 Configuring bandwidth policies ............................................................. 113 Creating bandwidth rules to manage Internet access........................... 113 Creating site and content rules to restrict Internet access.................... 114 Creating protocol rules to manage Internet access .............................. 115 Creating routing rules to manage Internet access ................................ 116 Pop Quiz 3.1 .................................................................................... 117 IV Troubleshooting access problems ........................................................ 119 User based access problems................................................................ 119 Packet-based access problems ............................................................ 120 V Creating new policy elements ............................................................... 121 Policy elements ..................................................................................... 121 Schedules ............................................................................................. 123 Bandwidth priorities............................................................................... 123 Destination sets..................................................................................... 123 Client address sets ............................................................................... 124 Protocol definitions................................................................................ 124 Content groups...................................................................................... 125 Pop Quiz 3.2 .................................................................................... 125 VI Managing ISA Server arrays................................................................. 127 Creating an array of Proxy Servers....................................................... 127 Assigning an enterprise policy to an array ............................................ 128 Managing remote arrays ....................................................................... 130 VII Chapter 3: Summary............................................................................. 131 VIII Chapter 3: Practice Test ....................................................................... 132
The list of books you might like
