ISA Server Beginners Quiz

Nowadays a lot of people are equipped with broadband, using Sygate,wingate,ms proxy, I now come to introduce a good proxy--isa, here to provide configuration will encounter problems, I hope to help you

Q: What are the differences between ISA Server Standard Edition (Standard Edition) and ISA Server Enterprise Edition (Enterprise Edition)?

A: ISA Server Standard Edition (Standard Edition) has exactly the same collection of features, firewall capabilities, and Web caching capabilities as ISA Server Enterprise Edition (Enterprise Edition). The difference is that the ISA server Standard Edition (Standard Edition) is a stand-alone server product that provides support for up to four processor-equipped computers. For large-scale deployments, server group support, multilevel policies, or computers with more than four processors, you will need to use the I SA server Enterprise Edition (Enterprise Edition). For more information, please refer to the Editions Comparison (version comparison) page.

Q: Does ISA Server 2000 belong to a firewall or a caching server?

A: Users can either configure ISA Server 2000 as an integrated solution for firewalls and caching servers, or simply deploy it as a firewall or a dedicated caching server. Businesses and institutions looking for efficient firewall solutions can provide security for their own network systems with features such as dynamic packet filtering, intrusion detection, system hardening, and "smart" application filters provided by I SA server. Enterprises that focus on dedicated caching solutions can enforce their own network systems by using the advanced caching features of the I SA server. For more information about the above content and other features, see the feature overview.

Q: What are the advantages of combining firewalls with caching solutions?

A: Although the enterprise can choose the firewall and the slow Ada δ Bai ping yuan zhi di Zheng 琁 sa server provides a consistent single point of access policy and management capabilities for outbound and inbound traffic. This reduces the amount of education and training required by system and network managers and the number of products that need to be managed and maintained.

Q: Does the implementation of caching function negatively affect the security that ISA Server has as a firewall? Caching is essentially an intelligent storage engine that enables managers to improve network access performance by storing objects that are frequently retrieved. The W-EB cache is built on the Web Proxy engine, providing hypertext Transfer Protocol (Hypertext Transfer Protocol, HTTP) connectivity, filtering filtering and completion of content shielding and uniform Resource Locator (Unified resource Positioning, URL), such as security-related tasks.

Q: Can I deploy only firewall features?

Answer: Yes. You can deploy a firewall as a precautionary security solution. As part of the installation process, you can select the installation mode for ISA Server: firewall, cache, or integration mode. In firewall mode, you can configure the rules that are responsible for implementing communication control between the corporate network and the Internet in order to provide security for network communications. You can also implement secure sharing of data on the internal server with other I nternet users by publishing internal servers. In cached mode, you can improve network performance and save network bandwidth by storing objects that are frequently accessed by users. You can also publish the internal W EB server. Integration patterns are the product of a combination of firewalls and caching features that help ensure security and improve system performance. In any mode, you can enjoy the benefits of enterprise policy management, real-time monitoring, and reporting features from the I SA server.

Q: How do caching features affect bandwidth requirements and information availability in the main way?

A: Caching features reduce bandwidth requirements primarily by shortening the distance between Web content and related users. By placing frequently requested content in the cache, the maximum bandwidth consumption can be reduced by 4 0%. Even if the content source is offline or unavailable, caching attributes ensure that the content is made available to the target user.

Q: Can I migrate from Proxy Server 2.0 to ISA Server?

Answer: Yes. Users who are running Microsoft Proxy Server 2.0 can upgrade to ISA Server. The powerful firewall and caching features of ISA server can provide support for the application mode of Proxy Server 2.0. However, ISA server is a new product based on the security and reliability of the Microsoft Windows 2000 operating system, and has a new architecture for enterprise security features and caching capabilities.

Q: What is a reverse cache, and ISA server can provide support for this feature?

A: Reverse defend the hippie naan squat retting defend grandma mi 赪 EB Server or e-commerce application front-end. It is referred to as "reverse", primarily because it is implemented by the Web server's administrator rather than by the customer to perform caching, distribution, or uninstallation of related content from the server. I SA Server provides support for the reverse caching feature to allow web managers to cache or distribute related content, and to shorten user response times.

Q: Does ISA server provide support for stateful inspection?

Answer: Yes. ISA Server provides support for three levels of filtration filtering for overall integrated security: packet filtering, link-layer filtering, and application-layer filtering. Link-layer filtering filtering is often referred to as "State detection", which consists mainly of the following: When a packet arrives at the firewall, it is detected, retains state information, and allows or disables the associated packet through the firewall based on the access policy. I SA Server added application filters to detect the filtering capabilities provided at higher levels of communication based on "smart" ad hoc application commands. This allows blocking for specific Simple Mail Transfer Protocol (S MTP) commands and filtering for Remote procedure call (RPC) access based on the required interface.

Firewall

Q: How do I use Routing and Remote Access service (Routing and Remote Access services, RRAS) in conjunction with ISA Server 2000?

A: Considering the use of ISA Server must create a specific route, we provide a wizard program to help in the Point-to-Point tunneling Protocol (Point-to-Point Tunneling Protocol, PPTP) and Layer 2 tunneling Protocol (second-tier tunneling Protocol, L2TP) supports the configuration of related connections between local area networks (LANs). All routing-related features do not face conflicts between ISA Server and RRAS. Of course, the Security Network address translation (SecureNAT) and dynamic packet filtering functions should only be configured through ISA Server rather than RRAS. This is not only the preferred approach, but also the way we strongly recommend it.

Q: What is the difference between RRAS and ISA Server 2000 packet filtering?

A: ISA server allows the dynamic packet filtering feature to open or close ports based on customer requests. This helps provide a more secure firewall because, depending on the services that are used on the network, no more ports will be in a long open state unless absolutely necessary.

Q: What protocols can ISA server provide related support for?

A: ISA server can release all protocols based on Transmission control PROTOCOL (Transmission Control Protocol, TCP) and user Datagram Protocol (User Datagram Protocol, UDP). The product contains a large number of predefined protocols (HTTP, SMTP, and Pop) and allows users to extend the protocol manifest in a quick and easy manner. Protocols with minor connections and higher complexity do not require either Firewall Client software or application filters. I SA Server provides a variety of built-in application filters for the protocol with the highest level of importance in order to implement additional functionality such as live media streaming or SMTP e-mail filtering.

Q: Does ISA server provide support for VPNs?

Answer: Yes. ISA server can help you create a virtual private network (VPN) and provide security for it. With the wizard, ISA server can configure the built-in VPN service provided by Windows Server to help enterprise organizations achieve cost-effective links to remote sites and mobile users.

ISA Server provides support for VPNs in two main ways. One is to allow the direct creation of a reciprocating connection between the VPN and the ISA Server itself. This approach is implemented primarily by allowing PPTP calls and the ability to receive filters, with the purpose of statically opening the required ports and issuing an outbound call (PPTP call) and an inbound request (PPTP receipt) directly to the I SA server. Another way is to allow a VPN call to be generated and to send it from a client located behind the ISA Server computer to a host on the Internet or other external network.

Q: Can ISA server provide support for socks?

A: ISA server can provide related support for Windows Sockets (SOCKS) 4.3. The Software development tool (SDK) contains examples of authentication for socks version 4.3 and version 5.0.

What is SecureNAT client support?

A: When ISA Server is on top of a packet routing path initiated by any client on any platform, ISA Server can transparently intercept and apply relevant policies to the content of the communication. SecureNAT can be applied to the outbound firewall policy without the need to install client software or configure browser settings.

Q: How does ISA server support cryptographic requests?

A: ISA server can provide support for encrypted content at multiple levels. ISA server can help you create a secure, encrypted VPN tunnel to a remote network. This tunnel can perform data transfer in a secure manner. ISA Server can force inbound Web requests to use encrypted Web Access (Secure Sockets Layer, SSL) and will act as the endpoint of an encrypted SSL session.

Caching and performance acceleration

Q: How does ISA server affect network performance?

A: The Web Proxy (Web proxy) service features available to Internet Security and Acceleration (ISA) Server provide Web object caching to satisfy requests from clients from the cache. If a related request cannot be satisfied from the cache, a new request is generated on behalf of the client. Once your remote W-EB server responds to the ISA Server computer, the ISA Server computer can cache the response to the client's original request. The client can then receive a response.

The High speed RAM cache feature provided by ISA Server can place items that receive the most frequent access to RAM. In this way, ISA server can optimize system response time by returning the above items from memory rather than from disk. ISA server also provides you with the ability to optimize disk caching to help you minimize disk read and write operations access. The above technology can help to optimize the network response time and the overall performance of the system.

Q: How does ISA server handle streaming media?

A: ISA server provides an application filter that is responsible for delivering and controlling media streaming. This filter can provide the required support specifically for media streaming, RealAudio, and Apple QuickTime based on Microsoft Windows Media

This column more highlights: http://www.bianceng.cnhttp://www.bianceng.cn/Network/Firewall/