Proper configuration of an ISA server when it is first set up is the best way to minimize the
risk of instability and problems down the road.
Best Practices
. Use the Security Configuration Wizard to lock down the Windows Server 2003 operating
system.
. Install only those ISA Server 2006 and Windows Server 2003 features that are needed.
FIGURE 2.17 Saving the Security Policy file.
63
2
Securing the Operating System with the Security Configuration Wizard
. Build an ISA server on a clean installation of the operating system.
. Consider the use of ISA Hardware Solutions and/or third-party add-ons that increase
the capabilities of ISA.
. In general, deploy ISA Server 2006 as a workgroup member if it will be deployed in
the DMZ of an existing firewall, and deploy it as a domain member if it will be
deployed as a full-function firewall.
This page intentionally left blank
CHAPTER 3
Exploring ISA Server
2006 Tools and Concepts
IN THIS CHAPTER:
. Exploring the ISA Server 2006
Management Console
. Configuring Networks with ISA
Console Network Wizards and
Tools
. Exploring Firewall Policy Settings
. Navigating the Monitoring
Node Options
.
Pages:
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176