What is Internet Security and Acceleration (ISA) Server 2006?
ISA server is a complete network and
security management application for today’s IT infrastructure. ISA
server acts as a gateway that eliminates the threats from Internet to
your network environment. ISA also provides fast and secure access to
applications and data. With new features such as Array policy, rules,
policy based administration, firewall, VPN support, client deployment
etc, ISA provide a large significance to information security
professional, network and system administrator and overall to the total
IT infrastructure.
Why to use ISA 2006?
Provides a protection against internal
and external Internet threats coming to your network. ISA acts as a
gateway and blocks the threats like malware, harmful web sites and
files.
With ISA, we can now securely access
remote applications, data, documents etc. Web based applications,
exchange, sharepoint applications access are now possible for both
internal and external corporate networks to access securely.
With limited usage of bandwidth, securely connect to your branch offices.
ISA 2006 Editions:
ISA 2006 comes in two flavors, ISA Server
2006 Standard Edition and ISA Server 2006 Enterprise Edition.
Enterprise Edition has all the full functionality of ISA server
available, whereas Standard edition has some of the features are not
available or are limited to certain extent such as Windows Network Load
Balancing (NLB) Support is not available and some of the policy features
are limited to local server and not to whole AD structure.
Components of ISA Server 2006
Configuration Storage server: stores all
the configuration information of the arrays in the network using a
mechanism called Active Directory Application Mode (ADAM).
ISA Server service: ISA server service
could be installed on same computer along with other ISA components or
can be installed to other computer. ISA server service runs the virtual
private network (VPN), caching information and firewall.
Array: if more than one ISA server 2006
enterprise edition is running on the network then it is called Array.
Each Array is connected physically and shares the same configuration.
ISA Server Management: This is the user
interface or the Microsoft Management Console (MMC) for administrator to
manage ISA server.
Installation of ISA Server 2006 on Windows Server 2003
ISA server is not part of the Windows
components and we can’t install it from Server Manager either by adding a
new roles or new features. ISA Server needs to be downloaded from
Microsoft site to install and configure or can be installed via other
methods such as ISA Server CD/DVD etc.
We will use the trail 180 days Enterprise
Edition of ISA Server with SP1 for installation and will install all
the components in a single server.
Note: We can also install ISA on two
separate computers, Configuration Storage Server on first computer and
ISA Server services on second computer.
#1. Run the
ISA2006SP1-ENU-EE-EVAL.exe (if you are installing a trail version) or
ISAAutorun.exe (if you are installing the licensed version). Installer
will then run and extract the setup files for installation.
#2. Select Install ISA Server 2006 SP1 on the installation dialog.
#3. The installation wizard will provide a setup installation sequence dialog.
#4. On the welcome installation wizard click next.
#5. Click on I accept the terms of the license agreement and click next.
#6. Provide user name, organization and product serial number information and select next.
#7. Choose the third option Install both ISA Server services and Configuration Storage server and click next.
#8. Select the default configuration and click next.
#9. Since we are creating a new ISA server enterprise, select create a new ISA server enterprise and click next.
#10. A warning will appear that this computer will be configured as Configuration Storage manager, click next.
#11. On the Internal Network page, click on Add.
#12. Click on Add Adapter, select the Adapter that are connected to the network and click OK.
#13. On the IP Address page provide the IP address range and Click OK.
#14. Netowrk address range will now display on the Internal Network page, click Next.
#15. Leave the default setting and click on Next on next screen.
#16. Click next on the service warning page.
#17. Click Install on the installation wizard dialog to start installation.
#18. Installation will
then start installing Core Components, Additional Components and System
Initialization. The whole process will take some time to complete. Click
Finish once done.
Configure ISA Server
#19. Open Start->Program->Microsoft ISA Server->ISA Server Management.
Create a New Array
#20. Select Array right click and select New Array.
#21. On the New Array wizard type an Array name and click next.
#22. Type Array’s DNS name and click next.
#23. Since this is a new server, choose Default Policy and click next.
#24. Leave the default and click next.
#25. Review your customizations changes and click finish.
#26. New Array installation will then start, Once done click OK.
#27. New Array that we created will now appear under Array section. Click Apply to update the changes.
#28. Configuration changes will now save click OK once done.
Configure Networks
#29. On the New Array that was just created, Expand configuration and select Networks.
#30. On the middle network page select internal->right click->select property.
#31. Select Addresses
tab, click on Add Adapter->Select a Network->Add an IP address
range to this Array (same way as we created during installation).
Once done click OK.
#32. On the task section select Enable Network Load balancing integration.
#33. Click next on the Network Load balancing integration wizard.
#34. Set a Virtual IP
for both External and Internal networks (by clicking on Set Virtual IP
and providing an IP address) and click next.
#35. Click finish to complete the Network Load balancing integration wizard.
Repeat the same procedure for the other Networks that are defined on the Array.
#36. Enable the firewall for the network interface that we created.
Select the Internal network->right click->select property->Select the Firewall client.
#37. Select Enable Firewall client support for this network and click ok.
#38. Same way we can also select Cache Array Routing Protocol (CARP).
Select the Internal network->right
click->select property->Select CARP->Select Enable CARP on this
network and click OK.
#39. Once the configuration are done, select Apply to save the changes and click ok once done.
