ISA Server 2006 Technical Overview

Document Sample
ISA Server 2006 Technical Overview Powered By Docstoc
					ISA Server 2006 Technical
Overview


 Howard Chow
 Microsoft MVP
What Will We cover?

• ISA Server 2006 Security Features
• ISA Server 2006 Tool Set
• Branch Office Benefits
• ISA Server 2006 Tools
Helpful Experience

• Experience with the Windows UI
• Experience Supporting Networks
• Experience with firewall applications



 Level 200
Agenda

• Introduction to ISA Server 2006
• Secure Application Publishing
• Branch Office Protection
• Firewall and Proxy Enhancements
• Monitoring ISA with MOM
Introducing ISA Server 2006

                   ISA Server 2006

             • Protects resources
            What is ISA Server 2006?
              •   Connects directly to the Internet
                  and your private network
              •   Screens network traffic
              •   Acts as a proxy for internal services
              •   Windows XP and later includes ICF
ISA Server 2006 Editions
ISA Server 2006 Appliances
                                Content Filtering
                         Key Benefits
                        Easy to deploy
                        Cost-effective
                        Hardware loaded & tested
                        Hardened configuration
                        Better value
                        Web-based admin tools
Protocol Accelerators      Antivirus Gateways
                        Warranty and Support
What’s New in ISA Server 2006
           Efficient Management
             Integrated Security
            Fast, Secure Access

• • Enhanced certificate administration
    Single sign on
  Enhanced multi-factor authentication
• • Web publishing load balancing
  • Comprehensive link translation
  Enhanced authentication delegation
  • Answer traffic compression and caching
• • HTTP    files
  BITS caching
  • Faster propagation, Low-bandwidth optimizations
  • Better bandwidth utilization
• • Log throttling
  Enhanced flood resiliency
• • Management Pack for Operations Manager 2005
  Enhanced worm resiliency
• Alert triggers and responses
Demo
demonstration
Introducing ISA Server 2006
   Explore the User Interface
   Create the Perimeter Network
   Configure Perimeter Access
Agenda

• Introduction to ISA Server 2006
• Secure Application Publishing
• Branch Office Protection
• Firewall and Proxy Enhancements
• Monitoring ISA with MOM
Security

  Security Concern                              Solution
Protection against attacks cloaked in
                                      SSL Bridging
encrypted content


                                       Enhanced multi-factor authentication
Increased security
                                       LDAP authentication support
Make better use of AD authentication
                                       Forms-based pre-authentication


                                       Enhanced authentication delegation
Stronger authentication methods        Improved session management
Managing Application Publishing


          Automated tools for Exchange
         Automated VPN policy Management
    Unified firewall &tools for SharePoint
     Automated tools for other Web servers
              Deep content inspection
           VPN Quarantine administration
       Enhanced certificateintegration
         Web Publishing Load Balancing
     Strong Logging & reporting capabilities
User Access

                  Single
                  sign-on



              Automatic link
               translation
Demo
demonstration
Secure Application Publishing
 Configure IIS for Secure Exchange Web
  Access
 Publish OWA

 Use OWA from the External Network
Agenda

• Introduction to ISA Server 2006
• Secure Application Publishing
• Branch Office Protection
• Firewall and Proxy Enhancements
• Monitoring ISA with MOM
New Management Features
    Branch Office Connectivity Wizard
    Answer files on removable media

    Faster propagation of enterprise policies


    Secure remote management

    Multi-network architecture
    Network templates and Configuration tools
Microsoft Update Caching
                          What is
                         Benefits it?
    Reduce the impact of downloading software updates
    Cache software updates using BITS


    Builds on ISAdays-of-risk when cache technology
    Reduce your Server’s existing new threats emerge


    Improves the value of ISA Server 2006 as an Microsoft solution
    Windows Server Update Services, Windows / integrated Update


    ISA Server will cache HTTP not have WSUS or SMS
    Ideal for remote sites that docontent-range requests


    Integral piece of the Microsoft Update platform
Branch Office Gateway Access

    HTTP traffic compression


    DiffServ IP settings


    Integrated Web caching
    Cache server array
    Distributed Hierarchical caching
Demo
demonstration
Configuring Branch Office
Gateway
 Configure HTTP Compression
 Configure Caching

 Configure DiffServ Settings
Agenda

• Introduction to ISA Server 2006
• Secure Application Publishing
• Branch Office Protection
• Firewall and Proxy Enhancements
• Monitoring ISA with MOM
More Secure Firewall and Proxy
Flood Resiliency



                   • Log throttling

                   • Control of memory consumption

                   • Control of pending DNS queries
Demo
demonstration
Implementing Web Access
Protection
   Review Flood Resiliency Settings
Agenda

• Introduction to ISA Server 2006
• Secure Application Publishing
• Branch Office Protection
• Firewall and Proxy Enhancements
• Monitoring ISA with MOM
Microsoft Operations Manager 2005

          Server health indicators
            Management content
          Knowledge basepacks
Demo
demonstration
Monitoring ISA Server with MOM
2005
   Deploy the MOM Agent
   Monitor ISA Server
Session Summary

• Standard and Enterprise editions


• Many new security features


• Many tools available
For More Information

 Visit TechNet at
   www.microsoft.com/technet
 Visit the url below for additional information

www.microsoft.com/technet/sec-03
Readiness with Skills Assessment

• Self-study learning tool free to anyone.
• Determines skills gaps.
• Provides learning plans.
• Post your Score, see how you stack up.
                    Visit
    www.microsoft.com/assessment
Become a Microsoft Certified Professional
• What are MCP certifications?
    Validation in performing critical IT functions.
• Why Certify?
    WW recognition of skills gained via experience.
    More effective deployments with reduced costs
• What Certifications are there for IT Pros?
    MCP, MCSE, MCSA, MCDST, MCDBA.

     www.microsoft.com/learning/mcp
Heard the News about TechNet?

• Software without time limits!

• Complimentary technical support.

• The most current resources on hand

www.microsoft.com/technet/subscriptions
 Find all these support options at www.microsoft.com/technet/support
 Microsoft offers a progressive series of support options starting with no-charge online support and developing
 through subscription, incident, and contract support.

1. No-Charge Online                          2. Subscription-Based                             3. Assisted Incident                          4. Contract-Based
   Support                                      Support                                           Support                                       Support
Knowledge Base                               TechNet Subscription                              E-mail Support                                Premier Support
Search a vast database of articles to        Subscribe to TechNet for a personal               Get online incident help via e-mail from a    Get the flexibility to match support
pinpoint the information you need.           library of articles, service packs, how-tos,      Microsoft Support Professional.               options to your organization and
                                             resource kits, tools, utilities, and more. Your                                                 enjoy direct access to Microsoft
Newsgroups                                   subscription includes monthly updates             Phone Support                                 technical experts at any time, day
Access over 20,000 active newsgroups         delivered on CD or DVD, so you always             Get incident help over the phone from a       or night. Premier Support delivers
on scores of topics.                         have the latest information,                      Microsoft Support Professional.               customized options for businesses
                                             straight from the source.                                                                       with complex needs, including
Product Support Centers                                                                        Phone Support Contract                        dedicated technical professionals to oversee
Get answers to frequently asked              Upgrade to a TechNet Plus subscription and        Save with a discounted 5-Pack Phone           your support, 24x7 problem resolution, and
questions, plus how-to articles and step-    add all this:                                     Support contract.                             training and workshops that keep your IT
by-step instructions organized                                                                                                               staff up to date.
by product.                                  1. Full-version evaluation software,              Advisory Services
                                                including Microsoft Office                     Add remotely delivered consultation options   Essential Support
DLL Help Database                               System and Windows Server                      from Microsoft Advisory Services for          Essential Support offers prepackaged
Search here to identify the software used       System™ products, without                      proactive support that goes far beyond        options specifically designed to meet
to install a specific DLL version.              time restrictions.                             routine product maintenance.                  the fundamental support requirements
                                             2. Free support — two complimentary                                                             of any business, large or small. Includes
Events and Errors Message
                                                incidents, plus a discount on other                                                          account management, problem
Center                                                                                                                                       resolution, and information services.
                                                support calls.
Resolve event and error messages fast
with explanations, recommendations, and      3. Unlimited, next-business-day
links to support and resources.                 access to reliable answers from
                                                the IT community and Microsoft
Support Webcasts                                Support Professionals through
Tune in to live technical presentations by
                                                Managed Newsgroups (English only).
Microsoft experts and take part in real-
time Q&A.

Chats
Chat online with Microsoft specialists
or search the transcript archives.

User Group Program
Access information and support for IT
and other interest-specific user groups.

TechNet Security Resource
Center
Get ahead of security risks with
resources that keep you current,
including security newsletters and
the Microsoft notification service.
Where Else Can I Get Help?

• Free chats and webcasts
• List of newsgroups

• Microsoft community sites

• Community events and columns

  www.microsoft.com/technet/community