If there is one question that comes up repeatedly on the ISAserver.org web boards, it’s the question “how do I publish a DNS server”. The standard answer is to “create a server publishing rule”. While its true that you need to create a publishing rule to allow inbound access to the internal DNS server, there is a little more thinking that goes on to make it work.
A subject that gets a lot of discussion on the ISAserver.org Web boards and mailing list is the SMTP Message Screener. The reason for this is that the Message Screener takes a bit of tweaking to get working right. The SMTP Message Screener does provide functionality that you would otherwise have to obtain from third party solutions. The good news is that it does indeed work!
You can make Web Sites on your internal network available by using ISA Server Web and Server Publishing Rules. These rules allow you to redirect requests arriving at the external interface of the ISA Server to an internal Web Server. You never have to directly expose your Internet accessible servers directly to Internet hosts; all requests will be evaluated by the ISA Server before they ever touch your Internet Web servers.
ISA Server uses packet filtering to control inbound and outbound access to and from the external interface of the ISA Server. Packet filtering is the ISA Server's first line of defense against inbound attack. The ISA packet filtering feature supplements the RRAS packet filtering. If you have RRAS packet filtering enabled, you should not use it to control inbound and outbound access to and from the external interface of the ISA Server.
“How do I configure the ISA Server interfaces?”
A common issue that pops up on the www.isaserver.org web boards is how to configure a DMZ segment on a trihomed ISA Server. Setting up a trihomed ISA Server with a directly attached segment acting as a DMZ is fairly simple.
This article discusses the particulars of ISA configuration to support each client type; SecureNAT, Web Proxy And Firewall.
This article deals with the setup and configuration of SecureNAT and Web Proxy clients
Windows 2000 Server performance issues can be a big headache for administrators. After all, Windows 2000 is a complex system, and when things aren’t running quite the way they should, finding and resolving the performance problem can be difficult.
ISA Server is a product that directly meets the needs of network clients while protecting the network from intruders and content that is not allowed. Monitoring that system and the effectiveness of the server is another administrative job often forced on your plate. The good news, however, is that ISA Server provides with some helpful capabilities that allow you to easily monitor ISA Server and client usage.
