Dr. Tom Shinder's Configuring ISA Server 2004 [ILLUSTRATED] (Paperback)

by Thomas W. Shinder (Author), Debra Littlejohn Shinder (Editor), Martin Grasdal (Author)
Key Phrases: update the firewall policy, firewall policy node, firewall client software, Active Directory, Apply New Configuration, Check Point (more...)

Editorial Reviews

Product Description
"The Shinders’ Books Are the Final Word on All Things ISA"

?        Written by the Industry’s Most Trusted Source on ISA Server, Microsoft "Most Valuable Professionals" Tom and Deb Shinder

?        Provides a Clear Migration Path from Earlier Versions of ISA Server

Covers All New Features, Including Advanced Application-Layer Firewalls, VPNs, and Web Cache Solutions

Go Under the Hood of ISA Server 2004

Get Inside Application Layer Filtering (ALF), VPN quarantine, and SSL Bridging.

Create a Supporting Infrastructure

Make certain your network will support the ISA Server 2004 firewall and the clients for DHCP, WINS, DNS, and RADIUS.

Automate the Client Provisioning Process

Reduce administrative overhead by automating Web proxy and firewall client configurations.

Troubleshoot Upgrade Issues

Get it right the first time, including ISA Server 2000 and Microsoft Proxy Server 2.0 upgrades.

Control Access through the Firewall

Create your policy elements in advance, and use the Access Rule toolset to simplify creation of Access Rules.

Publish to all Major Internet Protocols

Includes coverage of HTTPS, FTP, NNTP, SMTP, POP3, IMAP4, VNC, pcAnywhere, Terminal Services, PPTP and L2TP/IPSec VPN servers

Control VPN Clients’ Access to Resources

For example, allow a group’s access to the Exchange Server only when using the protocols required connecting using the full Outlook MAPI client.

Provide Secure Remote Access to Exchange Servers

No Exchange Server should be deployed without an ISA Server 2004 firewall in front of it.

Speed up Web Access for Your Corporate Network Users

At the same time, reduce overall bandwidth usage on all your Internet links.

From the Author
This book is based in large part on our own trials and tribulations (as well as the occasional "Eureka!" moment) that we’ve experienced working with ISA Server 2004. In this book, we are talking to people much like ourselves – experienced Windows network administrators who want to secure their networks and speed up Web access for their users without having to make a full-time vocation of it, learn programming, recompile kernels, or struggle with a brand new command syntax. We’re talking to people who want a security solution that is built to interoperate with their Windows domain controllers and Microsoft servers such as Exchange and SharePoint. We’re talking to experienced ISA 2000 administrators, those who are brand new to the world of firewalls, and those who are migrating from third-party firewall products.

----Tom and Debra Littlejohn Shinder

See all Editorial Reviews

Product Details

• Paperback: 1024 pages
• Publisher: Syngress; 2nd edition (August 1, 2004)
• Language: English
• ISBN-10: 1931836191
• ISBN-13: 978-1931836197
• Product Dimensions: 9.1 x 7 x 2 inches
• Shipping Weight: 3.2 pounds (View shipping rates and policies)
• Average Customer Review: 4.1 out of 5 stars See all reviews (21 customer reviews)
• Amazon.com Sales Rank: #494,163 in Books (See Bestsellers in Books)

Customer Reviews

Most Helpful Customer Reviews

55 of 58 people found the following review helpful:

5.0 out of 5 stars ISA 2004 maximized., February 6, 2005

By	Steven L. Umbach (Bartlett, Il United States) - See all my reviews (REAL NAME)

ISA 2004 is Microsoft's latest and greatest entry into the firewall market and make no mistake as that is what it is - a high performance, sophisticated, deep application filtering, enterprise class, but easy to configure firewall with the ability to be a VPN server, produce boatloads of reports and logging, and integrate with Active Directory for user authentication, even if not a domain member, via IAS/radius and also cache web content - whew! It is a very significant upgrade from ISA 2004 and in my opinion much easier to configure. The author and his community groups were very involved in helping Microsoft to develop ISA 2004 with real world user feedback and wants.

From reading the book Tom Shinder is obviously very enthusiastic about ISA 2004. This is not a book with a bunch of copy and pastes from the help files and Microsoft white papers. The authors are very familiar with ISA 2004 and network security and how to implement it in a number of different scenarios. There are many of the author's tricks and traps in configuration that can save you a lot of time setting up your ISA server. Each chapter ends with a summary "Solutions Fast Track" that are multi sentence main points of the chapter content followed by some helpful FAQ. Throughout the book are many references to Microsoft relevant articles and links to the author's website that is a great resource for any version of ISA. The focus of the book is not just on ISA 2004 but also the required network and client configuration to get everything working in harmony.

The book is well organized and you do not have to read the whole book to learn how to implement ISA 2004. There is a whole chapter just on features including comparison to ISA 2000 and another on comparing ISA 2004 to other enterprise firewalls such as CheckPoint, Cisco, and Netscreen to help you determine if ISA is right for you. The myth that a real firewall can not have a hard drive and only be configured by highly paid firewall consultants via the command line is debunked. Chapter 4 shows you how to configure and optimize your network for firewall protection. Gone is the LAT and now each network adapter can be configured separate from each other [including access rules between them] and allows the use of a DMZ. Proper dns configuration is frequently explained, including "split dns" as propers dns name resolution is crucial for a network to funtion and is often misunderstood. Chapter 5 goes into detail on the firewall clients - secure NAT, Firewall Client, and web proxy and how to determine which are best for you and how to implement and configure them in an automated fashion using Group Policy, DHCP, or DNS. Secure NAT is simply using the ISA server as the default gateway for the client which allows it to be used by any operating system. Web proxy and Firewall Client can be used to require user authentication in an access rule! Of course other chapters cover firewall rules [access rules], web and server publishing, installation, dns configuration including "split dns", configuring caching, VPN, using built in templates, how to implement ssl, backing up and restoring configuration, intrusion detection, running reports, configuring/viewing logs, IAS/radius integration, and more.

The chapter on VPN covers all the features including how to set up site to site VPN's using pptp, l2tp, or ipsec tunnel mode [for compatibility with third party devices]. ISA 2004 has the ability to create access rules to restrict what content the VPN users can access on the lan or internet and integrate with IAS/radius for user authentication. How to request and install certificates is shown for use with l2tp, ipsec, and web servers. The book is loaded with explicit step by step instructions such as for certificates so as not to leave the user scratching their head or trying to figure out exactly how to implement specific tasks. These step by step instructions will be of great help for the more novice ISA 2004 user. Publishing a web server and configuring it for ssl was covered in great detail for the various methods. Apparently this has been a problem point for ISA admins in the past [particualry proper certificate selection and installation] and the authors wanted to make sure users got it right.

Chapter 10 on stateful inspection and application layer filtering is of note. ISA 2004 has some very powerful abilities in this regard. They are not difficult for the most part to configure which the authors covered well but in addition they listed tables of specific recommendations of lists for particular HTTP security filters. For instance you can have an access rule and configure HTTP filtering for extensions to prevent users from downloading executeable content including .zip files. I tried to block .mp3 downloads via HTTP and it worked well for that also. Various methods were shown how to prevent users from using progamas like Kazaa and P2P applications with the various categories in HTTP filtering including headers and signatures. The same HTTP filtering can also be used when you publish a web server behind ISA 2004 for advanced protection from the internet. Numerous examples of using the built in netmon to capture network traffic to help show you how to spot entries to add to HTTP filters were given.

The logging and reports available with ISA 2004 give a great deal on information on what is going on with firewall access, intrusion detection, and user statistics. Chapter 12 shows you how to use the built in reports, create custom ones, and filter connected users and log views. It is easy to pull reports showing top websites visited, top web users, top protocols used, and top bandwidth users for instance. Most admins would find these reports very useful. It is easy to view currently connected users, including VPN, and what client they are using.

ISA 2004 is an impressive product that is relatively easy to use. Much more so than ISA 2000 in my opinion which helps lower it's TCO. Most users will be able to get up and running in no time at all and then be able to investigate the more advanced features which are numerous. Tom and Deb Shinder's book Configuring ISA Server 2004 will be of great help to anyone who wants to get the most out of ISA 2004 and explore all it's possibilities and implement them on their network for maximum network protection.

10 of 11 people found the following review helpful:

5.0 out of 5 stars None better; many try, July 8, 2005

By	J. Harrison "JimmyJoeBob Alooba" (Redmond, WA) - See all my reviews (REAL NAME)

Dr. Shinder's ISA 2004 book is quite literally *the bible* for ISA Server planning, installation, configuration, management and troubleshooting. Literally no where else is there the amount and variety of steps, tips, tricks and external references available to the reader.
The book begins with a tour of comparative data for nearly every other firewall / proxy on th market at press time - I triple-dog-dare any other book to attempt this; much less get it right.
In simple terms - get this book.

6 of 6 people found the following review helpful:

4.0 out of 5 stars ISA 2004 written for Beta vs GA w SP1, May 12, 2005

By	M. Yinger (Seattle, WA USA) - See all my reviews (REAL NAME)

Over all I found the book useful. My only complaint is that when I upgraded from ISA 2004 Beta to GA w SP1, some of the book's most useful information was out of sync with the updated system. BTW, my ISA 2004 Beta export did not import into the GA system and this forced me to start over and therefore find that the book had become less useful. On the good side, the GA/SP1 system was easier to set up than the Beta version. ISA 2004 is a huge improvement over ISA 2000.