In addition, Internet Authentication
Service (IAS) can be used to enable authentication between multiple domains that do not
have trust relationships in place, as illustrated in Figure 1.1.
An added advantage to the Virtual Private Network support in ISA Server 2006 is the capability
to treat VPN users as a separate network. This allows for a more granular policy
control. For example, ISA can be configured to allow only authenticated VPN users to
access an Exchange Server. Another function of ISA VPNs is to quarantine VPN clients that
do not conform to an organization??™s security requirements into a restricted network in ISA
that has access to only a small range of predetermined services.
NOTE
ISA Server 2006 supports both Point-to-Point Tunneling Protocol (PPTP) and Layer 2
Tunneling Protocol (L2TP) for VPN Connections.
For more information on how to set up, configure, and manage Virtual Private Networks
with ISA Server 2006, refer to Chapters 9, ???Enabling Client Remote Access with ISA Server
2006 Virtual Private Networks (VPNs),??? and 10, ???Extending ISA 2006 to Branch Offices
with Site-to-Site VPNs.???
12 CHAPTER 1 Introducing ISA Server 2006
SharePoint
Server
RADIUS
Server
Live
Communications
Server
Windows
Media
Server
Exchange
Mailbox
Server
Database
Server
ISA
Firewall
VPN Users Network
Wireless
Access Point
Internet
Internal Nework
DMZ Network
Authentication
Authentication
FIGURE 1.
Pages:
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86