1

Overview of Microsoft ISA Server 2006

2

Introducing ISA Server

• Protects resourcesProtects resources

• Connects directly to Connects directly to the Internet and your the Internet and your private networkprivate network

• Screens network trafficScreens network traffic

• Acts as a proxy for Acts as a proxy for internal servicesinternal services

3

Introducing ISA Server

4

Microsoft ISA Server

Proxy Server 2.0• Optimize Internet web browsing by caching

the images and text from web pages to local servers.

Clients access to Internet quickly !

5

Microsoft ISA Server

Microsoft Internet Security & Acceleration Server 2000

• Is an internet firewall and web cache which is capable of integrating into an existing Windows infrastructure.

• Focus more attention on the product’s security capabilities!

6

Microsoft ISA Server

ISA Server 2004• was vastly improved over the previous

versions of the product, and it quickly became noticed in the wider security community.

• was originally released with only a standard edition of the product!

• Finally, predating the release of ISA Server 2006!

7

ISA Server 2006’s Features

Fast, Secure Access!!Fast, Secure Access!!

Caching

Firewal

l

8

Caching

• ISA Server supports caching as a way to improve the speed of retrieving information from the Internet

CacheCache

9

FirewallsWhat is a Firewall?What is a Firewall?• A firewall is hardware, software, or a

combination of both that is used to prevent unauthorized programs or Internet users from accessing a private network and/or a single computer.

InternetInternet

10

Firewalls

Firewall Rules:• Allow – traffic that flows automatically

because it has been deemed as “safe”.• Block – traffic that is blocked because it has

been deemed dangerous to your computer.• Ask – asks the user whether or not the traffic

is allowed to pass through.

11

How ISA Server protects networks?

• ISA Server has full screening capabilities:– Packet filtering– Stateful inspection– Application-level inspection

• ISA Server blocks all network traffic unless you allow it.

• ISA Server is ICSA and Common Criteria certified.

12

Network perimeters

The Internet Branch offices Business partners Remote users Wireless networks Internet applications

Network perimeters include connections to:

Business Partner

LAN

Main Office

LAN

LAN

Wireless Network

Remote User

Internet

Branch OfficeBranch Office

13

ISA Server 2006’s New Features• Multiple network support and per-network

policies.• Support for complex and customizable protocols

14

ISA Server 2006’s New Features

• New server and OWA(Outlook Web Access) publishing rules

• Remote Procedure Call (RPC) filtering support.

• End-to-end secure web publishing capabilities.

15

ISA Server 2006’s New Features

• RADIUS and SecurID authentication support.• Stateful inspection for VPN connections.• VPN quarantine control features.• Enhanced monitoring, logging, and reporting.• Forms-based authentication for all web sites.• Enhanced branch office support tools.