Introduction

This five-day instructor-led course provides students with the knowledge and skills to deploy and manage Microsoft® Internet Security and Acceleration (ISA) Server 2004 as part of a larger security infrastructure. The course introduces security concepts unique to ISA Server 2004 and provides best practices for their implementation. This course includes information on both the Standard Edition and Enterprise Edition of ISA Server 2004.

Audience

The audience will be IT Professionals who are responsible for implementing network and perimeter security measures, including Internet firewalls, application layer filters, and screened networks. They will also implement caching servers and additional mechanisms to protect public-facing Web servers. These individuals will have a need to simplify ongoing management, reduce support costs and prevent security breaches.
This course will also help to prepare individuals pursuing the MCSA: Security or MCSE: Security certification specializations.

At Course Completion

After completing this course, students will be able to:

• Describe the functionality provided by ISA Server 2004, and explain valid deployment scenarios for ISA Server 2004.
• Install and maintain ISA Server 2004, and install and configure ISA Server clients.
• Configure secure access to Internet resources for internal network clients using ISA Server 2004.
• Configure ISA Server 2004 as a firewall between the Internet and the internal network.
• Configure secure access to internal network resources for Internet clients who are using Web and server publishing rules.
• Configure ISA Server to provide secure access to Exchange Server for servers and clients located on the Internet.
• Implement application and Web filters on ISA Server 2004.
• Implement a virtual private network for remote clients and remote networks using ISA Server 2004.
• Implement Web proxy caching on ISA Server 2004.
• Monitor server performance, security, and usage on ISA Server 2004.
• Plan an ISA Server 2004 Enterprise Edition deployment and install ISA Server 2004 Enterprise Edition.
• Implement ISA Server 2004 Enterprise Edition in a back-to-back firewall scenario.
• Implement ISA Server 2004 Enterprise Edition in a site-to-site VPN scenario.

Prerequisites

This course requires that students meet the following prerequisites:

• Successful completion of Course M2810: Fundamentals of Network Security, or equivalent knowledge of networking security.
• Successful completion of Courses
  - M2274: Managing a Microsoft Windows Server 2003 Environment and
  - М2275 Maintaining a Microsoft Windows Server 2003 Environment
  or equivalent knowledge of the Windows Server 2003 operating system and network concepts, or equivalent knowledge of Microsoft Windows® 2000 Server operating system and network concepts.
• Experience implementing network resources such as Web, FTP, and Microsoft Exchange servers. Detailed knowledge about deploying these resources is not required.

Course Outline

• Overview of Microsoft ISA Server 2004
  - Introducing ISA Server 2004
  - Deployment Scenarios for ISA Server 2004
  - Designing an ISA Server Deployment at Blue Yonder Airlines
• Installing and Maintaining ISA Server 2004
  - Installing ISA Server 2004
  - Choosing ISA Server Clients
  - Installing and Configuring Firewall Clients
  - Advanced Firewall Client Configuration
  - Securing ISA Server 2004
  - Maintaining ISA Server 2004
  - Performing an Unattended Installation of ISA Server 2004
  - Migrating an ISA Server Configuration
  - Securing ISA Server 2004
• Enabling Access to Internet Resources
  - ISA Server 2004 as a Proxy Server
  - Configuring Multi-Networking on ISA Server
  - Configuring Access Rule Elements
  - Configuring Access Rules for Internet Access
  - Configuring ISA Server Access Rule Elements
  - Configuring ISA Server Access Rules
  - Testing ISA Server Access Rules
• Configuring ISA Server 2004 as a Firewall
  - Using ISA Server as a Firewall
  - Examining Perimeter Networks and Templates
  - Configuring System Policies
  - Configuring Intrusion Detection and IP Preferences
  - Restoring Firewall Access Rules
  - Modifying the ISA Server System Policy
  - Testing the Policy Modifications
• Configuring Access to Internal Resources
  - Introduction to Publishing
  - Configuring Web Publishing
  - Configuring Secure Web Publishing
  - Configuring Server Publishing
  - Configuring ISA Server Authentication
  - Configuring ISA Server Authentication and Secure Publishing
  - Testing the ISA Server Configuration
• Integrating ISA Server 2004 and Microsoft Exchange Server
  - Issues in E-Mail Security
  - Configuring ISA Server to Secure SMTP Traffic
  - Configuring ISA Server to Secure Web Client Connections
  - Configuring ISA Server to Secure Client Connections
  - Enabling RPC over HTTP Client Connections
  - Configuring a Forms-Based Authentication for Microsoft Outlook® Web Access
• Advanced Application and Web Filtering
  - Advanced Application and Web Filtering Overview
  - Configuring HTTP Web Filters
  - Configuring Additional Application and Web Filters
  - Identifying an Application Method and Signature
  - Modifying the HTTP Web Filter
• Configuring Virtual Private Network Access for Remote Clients and Networks
  - Virtual Private Networking Overview
  - Configuring Virtual Private Networking for Remote Clients
  - Configuring Virtual Private Networking for Remote Sites
  - Configuring VPN Quarantine Control Using ISA Server 2004
• Implementing Caching to Improve Browsing Performance
  - Caching Overview
  - Configuring General Cache Properties
  - Configuring Cache Rules
  - Configuring Content Download Jobs
  - Testing and Monitoring ISA Server Caching
• Monitoring ISA Server 2004
  - Monitoring Overview
  - Configuring Alerts
  - Configuring Session Monitoring
  - Configuring Logging
  - Configuring Reports
  - Monitoring Connectivity
  - Monitoring Services and Performance
• Implementing ISA Server 2004 Enterprise Edition
  - Overview of ISA Server 2004 Enterprise Edition
  - Planning an ISA Server 2004 Enterprise Edition Deployment
  - Implementing ISA Server 2004 Enterprise Edition
• Implementing ISA Server 2004 Enterprise Edition: Back-to-Back Firewall Scenario
  - Implementing a Back-to-Back Firewall Scenario
  - Enabling Network Load Balancing for the Main\Front-End Array
  - Configuring the Front-End Array Server
  - Configuring Firewall Rules for Resource Access
• Implementing ISA Server 2004 Enterprise Edition: Site-to-Site VPN Scenario
  - Implementing the Site-to-Site VPN Scenario
  - Enabling NLB and CARP for the Main/Front-End Array
  - Configuring the Main-Office Array for a Site-to-Site VPN
  - Deploying ISA Server Services in a Remote Site
  - Configure the Remote Site for a Site-to-Site VPN

Microsoft Certified Professional Exams

Exam 70-350: Implementing Microsoft Internet Security and Acceleration Server 2004

Course Materials

The student kit includes a comprehensive workbook and other necessary materials for this class.

Related courses:

• M2274: Managing a Microsoft Windows Server 2003 Environment
• М2275 Maintaining a Microsoft Windows Server 2003 Environment
• M2277 Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure: Network Services
• М2279 Planning, Implementing and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure
• M2810 Fundamentals of Network Security
• M2823 Implementing and Administering Security in a Microsoft Windows Server 2003 Network
• M2830 Designing Security for Microsoft Networks

Microsoft Software Assurance

What is Software Assurance?

Software Assurance (SA) provides an easy way for Microsoft's Volume Licensing customers to stay current with the latest and most innovative Microsoft products. Under the SA program, customers acquire the right to install any new release of products covered in the agreement during the term of their coverage. Companies can acquire tomorrow's technology at today's prices and have the ability to spread payments annually instead of paying up front. Visit www.microsoft.com/licensing to learn more about Microsoft's licensing programs.

What is the SA Enhancement Offering?

The SA Enhancement Offering is designed to increase customer satisfaction by giving customers more value from Software Assurance and a better Microsoft product experience. The Enhancement Offering contains tools, training, and support as well as additional licensing benefits which meet different customer needs across product segments and across customer segments. The many benefits include:

• Training vouchers redeemable
• Employee Purchase Program
• Home Use Program
• Problem Resolution Support
• TechNet Subscription
• Technology & Tools

What is the Software Assurance (SA) Training Voucher Program?

Qualifying organizations that purchase Software Assurance receive training credits from Microsoft. Each training credit is worth the equivalent of one day of training at Networking Technologies™. Customers can redeem these credits for SA Training Vouchers for select Microsoft courses from «Networking Technologies»™.

How to Get Started?

Contact the individual in your organization responsible for software purchases to verify that you purchased volume licensing with Software Assurance. We can help you activate your benefits and administer the training vouchers. To register for a training contact Education Center «Networking Technologies»™ directly via e-mail edu@tex.kiev.ua