Configuring ISA Server 2000: Building Firewalls for Windows 2000
Using Microsoft s firewall software to protect local-area networks, enable Internet remote access, and define security policies.
TABLE OF CONTENTS Configuring ISA Server 2000: Building Firewalls for Windows 2000
Configuring the Server for Outbound Access
Several elements determine how outbound requests for Internet resources are handled. These elements can be broken down roughly into two groups:
-
Outbound Web protocol requests
-
Outbound everything else
The everything else includes Winsock application requests that are not wrapped in HTTP headers. Both SecureNAT and firewall clients issue Winsock application requests. Outbound access control for these clients centers around configuring protocol rules.
Outbound requests from Web proxy clients are handled a little differently, since they do not have to be run through the Firewall Service. However, they are still bound by protocol rules. You can configure how outbound Web protocol requests are handled on the internal interface of the ISA Server via the Server s Properties sheet.
Note that this is a departure from how things were done in Proxy Server 2.0. With Proxy Server, you configured Web protocol access controls and Winsock access controls through different configuration dialog boxes. In ISA Server, those dialog boxes are consolidated, and Web and Winsock protocols are now configured through the same interface.
Configuring Listeners for Outbound Web Requests
To access the configuration dialog box for Outgoing Web Requests, perform the following steps:
-
Expand the Servers and Arrays node in the left pane of the ISA Management console. Right-click your server or array, and click Properties.
-
Click the Outgoing Web Requests tab. You will see something like what appears in Figure 8.1.
Figure 8.1: The Outgoing Web Requests Tab on the Server...
Copyright Syngress Publishing, Inc. 2001 under license agreement with Books24x7
