The tighter a firewall was locked
down, for example, the less functional and productive an end user could be.
In direct response to the need to maintain and increase levels of productivity without
compromising security, Application-layer ???stateful inspection??? capabilities were built into
ISA Server that could intelligently determine whether particular web traffic was legitimate.
To illustrate, ISA Server inspects a TCP packet traveling across port 80 to determine
whether it is a properly formatted HTTP request. Looking back to the smuggling analogy,
ISA Server is like a border guard who not only checks the passports, but is also given an Xray
machine to check the luggage of each person crossing the border.
The more sophisticated Application-layer attacks become, the greater the need becomes
for a security solution that can allow for a greater degree of productivity while reducing
the types of risks that can exist in an environment that relies on simple packet-based
filtering techniques.
11 Detailing the Additional Advantages of ISA Server
1
For more information on the specifics of working with and setting up application-based
filtering technology to secure inbound traffic and control access to internal resources, refer
to Part III of this book, ???Securing Servers and Services with ISA Server 2006.
Pages:
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84