Using ISA Proxy Server to manage the Internet behavior of enterprises

This experiment is illustrated by examples, from the operating conditions, background, requirements, and specific requirements of several parts.

1. Operating conditions:
(1) A virtual machine with a Windows Server 2003 system installed with a proxy service program

2. Background:
In order to improve staff productivity, reduce the bad behavior such as online games during work, an enterprise network administrator

I hope that through the way of proxy service, standardize the internet behavior of enterprise employees, for this reason, the administrator installed

ISA Server 2006 acts as a proxy service.

3. Requirements:
Administrators first want to be able to control employees ' online behavior. To access an external Web site, you must use a Windows account as the proxy account.

Through the ISA Server proxy to the Internet, and to different user groups, control their Internet behavior, specific restrictions on demand for:

The administrator wants to create a dedicated Windows user group to manage proxy accounts for different permissions and different throttling policies. User groups and

The name of the ISA user set should be test instructions and easy to understand.
For security reasons, administrators want to filter the executable content contained in all HTTP traffic to further enhance Internet security.

The caching mechanism of the proxy service accelerates the user's ability to open a webpage, and the administrator wants to use disk space effectively, limiting the overall size of the cache.

and the large page elements are not cached. In addition, to reduce the burden on the server, the administrator wants to limit the number of connections per user to a reasonable value.

And adjust the time-out, to avoid conflicts with existing services, you need to adjust the proxy port to avoid 80,8080,443 and 8443 ports.

4. Specific requirements:
(1) Proxy service settings:
Using the D disk to store the Web cache, the space limit is set to 1000MB, setting a reasonable maximum cache object size, the maximum number of user connections and time-out.
(2) Agent user management:
Set up a dedicated Windows user Group Management Agent user, the group name should have a certain meaning, create the corresponding user set, so as to be able to refine the control policies of different proxy users.
(3) Configure Internet filtering rules:
Set up a blacklist of Web sites for general user groups and add "*.badsite.com" to The Blacklist
Set the download limit for the Guest user group to prevent the download of EXE and VBS files.
Add a time limit policy to the above account to be able to access the Internet via proxy only within the specified time period.
(4) Write the agent requirement analysis and Configuration report:
Description: The analysis of the problem, the solution of the ideas and methods.
Description: The customizations in the above configuration, and the rationale for this setting.
Report Please save the "desktop \ Candidate folder \ Analysis and Configuration report. txt" in the real machine

Step 1. Proxy service Settings
Open ISA Server Management
(1) Set D disk as cache drive, upper limit 1000mb;

"Cache", "Cache Drive", double-click the "dc-test" letter

After setting the cache to 1000, click Settings, apply, OK

(2) Added new cache rules, do not cache content larger than 512KB; (left panel-configuration-cache, right-new rule)

Enter the rule name test

Not finished ...

Using ISA Proxy Server to manage the Internet behavior of enterprises