Lab Thuc Hanh ISA 2006-Encrypt

ATHENA INTERNATIONAL
NETWORK ADMINISTRATION & SECURITY TRAINING

-----------------------------------------------------------------------------
Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Thc hin : V Anh Duy Lu hnh ni b Trang : 1

LI M U
---ooOOoo---
Ti liu c thc hin nhm mc ch gip cc bn hc vin cng c kin thc v cng
thng qua , h tr cc bn tt hn trong vic thc hnh Lab ti nh.
Xin chn thnh gi li cm n n GV-Trn Vn An, GV-L nh Nhn, MCT-L
Ngc Hin, MCT-o Duy Hiu, anh Trn Quc Ton chia s nhng thng tin,
nhng kinh nghim thc tin, qua gip cho vic thc hin ti liu c tt hn.
Xin chn thnh cm n trung tm o To & Qun Tr Mng Athena to iu kin
cho ti thc hin ti liu ny.
Ti liu c phn lm 2 tp :
+Tp 1 : Khi qut v trin khai ISA Server 2006 trn m hnh Bastion Host. Trong
phn ny c s dng video demo do GV-Trn Vn An cung cp.
+Tp 2 : Phn tch v trin khai h thng Firewall ng vi cc m hnh phc tp
thng qua hai dng sn phm ca Microsoft : ISA Server 2006 & Threat Management
Gateway 2010.
Trong qu trnh thc hin, chc chn s khng trnh khi nhng sai st. Mi s ng gp
kin ca cc bn s gip cho ti liu ngy cng hon thin hn. Cc bn c th lin h theo
a ch email sau : duyva@athenavn.com hoc wuyingwei@live.com

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


ISA Server 2006 l phin bn tip theo ca sn phm Microsoft ISA Server. C mt s
tnh nng mi so vi phin bn ISA 2004 nh :
+ Pht trin h tr OWA, OMA , ActiveSync v RPC/HTTP publishing.

+ H tr SharePoint Portal Server.

+ H tr cho vic kt ni nhiu certificates ti 1 Web listener.

+ H tr vic chng thc LDAP cho Web Publishing Rules.

Bn c th ti ISA Server 2006 theo link sau :

http://www.mediafire.com/?j5tfnfzimz7un4c

Trong ti liu ny bi Lab gm cc phn nh sau :

1. Ci t ISA 2006
2. Access rule
3. Application & web filter
4. Server Publishing
5. VPN
6. Caching
7. Monitor
Trong sut ti liu ny, m hnh Bastion Host s c p dng.

Cc bi Lab s s dng chng trnh VMWare WorkStation phin bn 7.1.4 build-
385536. y l 1 ng dng cho php bn c th chy nhiu my tnh o s dng chung cc
thit b phn cng.
Bn c th ti chng trnh theo link sau :

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


http://www.mediafire.com/?9a0pf30g5jlpp
Password download : athena
Chng ta s xy dng v s dng 3 my tnh o theo m hnh sau :

Card mng

Card LAN

Card WAN

My ISA Server

IP Address: 172.16.1.1

Subnet Mask: 255.255.255.0

Gateway:

Preferred DNS: 172.16.1.2

IP Address: 192.168.2.111

Subnet Mask: 255.255.255.0

Gateway: 192.168.2.1 (a ch Router)

Preferred DNS:

My DC

IP Address: 172.16.1.2

Subnet Mask: 255.255.255.0

Gateway: 172.16.1.1


Khng thit lp
My internet Khng thit lp
IP Address: 192.168.2.112

Subnet Mask: 255.255.255.0

Gateway: 192.168.2.1 (a ch Router)


s dng chng trnh VMWare, bn c th tham kho theo link sau :
http://www.mediafire.com/?9a0pf30g5jlpp
Hoc :
http://forum.athena.edu.vn/mang-co-ban-acbn/1436-huong-dan-su-dung-vm-ware.html

Mng
S mng 1

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


ng mng trong ( internal ) ni my DC vi my ISA Server ta s chn kiu ng mng
l VMNet2

ng mng ni my internet v my ISA Server ta s chn ch Bridged.
Athena Research Team

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


My tn internet l my i din cho cc traffic t External kt ni n my ISA server.
Cu hnh thng s Ip trn my Internet. y ta s gi lp mng 192.168.2.0/24 l mng t
External .

My tn ISA Server s ci t ISA Server 2006, my ny s c 2 interface. Ta t tn cho 2
interface ny nh sau :

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


LAN : kt ni ti cc traffict trong Internal.
WAN : kt ni ti cc traffict External.
Cu hnh thng s Ip trn 2 interface ny :

My tn DC l my i din cho cc traffic t Internal n my ISA. Ti my ny ta s nng
cp thnh Domain Controller, Mail Server, Web Server . Cu hnh thng s Ip trn my ny.

Kim tra kt ni t my DC n my ISA
Athena Research Team Athena Research Team

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Kim tra kt ni t my ISA n my DC

Kim tra kt ni t my ISA ra Internet

Tip theo, trn my DC ta s to cc i tng sau :
OU Maketing Sale Training Manager
Group Maketing Sale Traning Manager
User Ma1\ 123abc!!!
Ma2\ 123abc!!!
S1\ 123abc!!!
S2\ 123abc!!!
T1\ 123abc!!!
T2\ 123abc!!!
Man1\123abc!!!
Man2\ 123abc!!!

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


My DC kim tra dch v DNS ng vi mng 172.16.1.0/24

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nh vy, vic chun b cho m hnh hon tt. Tip theo chng ta s i tm hiu v trin
khai m hnh ng vi cc chc nng : Access rule, Application & web filter , Server
Publishing, VPN, Caching, Monitor.

Phn 1 : Ci t ISA 2006
Phn ny gm cc phn sau :
1. Ci t ISA Server 2006.
2. Cu hnh Secure Nat.
3. Cu hnh Web Proxy Client.
4. Ci t v cu hnh Firewall Client.
5. Cu hnh Auto Discovery.
6. To Access Rule kim tra kt ni Internet.
Chun b :
My DC: Windows Server 2003 nng cp ln Domain Controller

My ISA Server: Windows Sever 2003 Join domain

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Da vo m hnh ra, ta thit lp nh sau :
1. Ci t ISA Server 2006.
Ti my DC vo th mc cha b ci t ISA SERVER 2006, chy file isaautorun.exe

Chn Install ISA Server 2006

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Welcome to the Install Wizard, nhn Next

Chn I accept the terms in the license agreement, nhn Next

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhp Username, Organization, Product Serial Number, sau Bm Next

Chn Typical v bm Next

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Trong hp thoi Internal Network, nhn chn Add

Sau bn chn Add Adapter

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Bn chn Card Lan, khai bo ng mng ni b m bn cn qun l. Nhn Ok tip
tc .

Kim tra li v nhn Next

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tip theo trong hp thoi Firewalll Client Connections, nhn Next

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tip theo bn theo mc nh v nhn Next

Hp thoi Ready Install to Program. Bm Install bt u qu trnh ci t

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Installation Wizard Completed, nhn Finish

Mc nh sau khi ci ISA server xong, Default rule s cm cc traffict t bn ngoi kt ni
ti my ISA, t bn trong kt ni ti my ISA .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


T my DC, bn Ping n my ISA ( 172.16.1.1 )

T my ISA bn ping n my DC ( 172.16.1.2 )

T my ISA bn ping n a ch ca my Internet ( 192.168.2.112 )

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


T my Internet bn Ping n a ch card WAN ca my ISA ( 192.168.2.111)

Tng t, vic truy cp Web t Internal n cc host ngoi External .

Bn c th xem Video Demo theo link sau :
http://tailieu.athena.edu.vn/Microsoft/Video%2070-351/LAB%201%20-
%20INSTALLING%20ISA2K6/
Hoc : http://www.mediafire.com/?2n0qn8jqjk8ac

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


My ISA sau khi ci t ISA 2006 v kim tra cc rules chun. Sau tin hnh join vo
domain dng sn trn my PC2 ( athena.edu.vn ). Chng ta s bn lun vn ny thm
tp 2 ca ti liu ny.
2. Cu hnh Secure Nat cho Client :
Cc my trong mng Internal ch vic thit lp thng s Default Gateway l Ip ca my ISA.

By gi, ti my ISA, ta s thit lp 1 access rule cho vic truy cp ra ngoi External .
M ISA Server Management, chut phi Firewall Policy, chn New, chn Access Rule

Hp thoi Access Rule Names, t tn rule l: Allow to Internet

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Rule Action, bn chn Allow

Hp thoi Protocols, chn All outbound traffic

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Access Rule Sources, nhn Add, chn 2 mc: Internal v Localhost

Hp thoi Access Rule Destinations, nhn Add, chn External

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi User Sets, chn All User

Nhn Finish hon tt rule

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Apply

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Kim tra vic truy cp n www.google.com

Ta cng c th s dng DHCP Server vi Option 003 Router cu hnh Gateway cho cc
my Clients trong LAN.

3. Cu hnh Web Proxy Client.
Ti my DC, m Internet Explorer. Chn Tool \ chn Internet option \ chn Tab
Connection \ chn mc LAN Setting.
Mc Proxy Server in Ip ng vi Card Lan ca my ISA, port : 8080

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Kim tra li vic kt ni n trang http://athena.edu.vn

Tuy nhin vic thit lp Proxy trn tng Client nh vy s mt rt nhiu thi gian cho ngi
qun tr. Bn c th thit lp Policy trn Domain cho cc Client.
Ti my DC, m Active Directory Users and Computers. Chut phi vo athena.edu.vn
chn properties.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Chn tab Group Policy, bn chn New v t tn proxy for client . Sau nhn Edit

Vo User Configuration \ Windows Settings \ Internet Explorer Maintenance
\ Connection

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Chn tip Proxy Settings v Double Click . in Ip card LAN ca my ISA, port 8080

Ta p tip 1 policy cm Client c th thay i thng s Proxy.
Vo User Configuration \ Administrative Templates \ Window Components\
Internet Explorer. Chn tip Disable Changing Proxy Settings

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Cui cng l gpupdate /force .

4. Ci t v cu hnh Firewall Client
Ti my DC, logon athena\Administrator
- Ci t ISA Firewall Client trong a CD ci t (th mc Client)

Hp thoi Welcome to the Install, nhn Next

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tip theo bn nhn accept v ci t theo mc nh.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi ISA Server Computer Selection, nhp vo a ch IP ca my ISA Server, nhn
Next

Chn Install

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Finish kt thc

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


5. Cu hnh Auto Discovery
Ti my ISA. M ISA Server Management, phn Configuration, chn Network. khung
bn phi, right click Internal, chn Properties

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Chn tab Auto Discovery, nh du check vo Publish automatic discovery information
for this network

Ti my DC, m DNS manager
Click phi vo zone athena.edu.vn chn New Alias (CNAME)

Nhp WPAD vo Alias name

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


khung FQDN, bn Browse n my ISA Server

Sau bn Restart li DNS

M ISA Firewall Client, vo tab Setting, chn Automatically detected ISA Server, chn
Detect Now, kim tra my client detect uc tn my ISA Server.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Bn c th tham kho Video demo theo link sau :
%20ISA%20CLIENT/
Hoc : http://www.mediafire.com/?tvf8b60bh14t1
Nh vy, chng ta ci t ISA Server cho m hnh v kho st qua cc loi Firewall
Client. Tip theo ta s tm hiu v phn Access Rule.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Phn 2 : Access Rule
Sau khi ci t ISA cho m hnh, chng ta thy ISA phn tch h thng thnh 3 vng
chnh : Internal, Local Host ( ni t ISA), External . Mc nh, h thng s b tc ng bi
Default Rule nh c trnh by phn trn.
Trong phn ny, chng ta cn nm nhng khi nim sau :
Network Definition : khong a ch Ip kt ni ti ISA Server, khong Ip ny c
nh ngha bng 1 Network Name. ISA s qun l khong Ip ny thng qua Network Name
ny.
nh ngha Network Name, trn ISA Server Management ta chn mc Confirugation,
chn tip mc Network.

Network Rule : quy nh cc mi lin h gia cc Network, cc mi lin h ny
c ISA Server kt ni vi nhau. Khi h thng ca bn c nhiu Network, ISA s quy nh
mi quan h ca cc Network thng qua 2 c ch : Route v NAT. Ta s cp tip vn
ny nhng phn sau.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Access Rule : quy nh nhng traffict no s c i qua ISA Server. y l thnh
phn quan trng ca ISA Server. Chng ta s tm hiu v Access Rule thng qua nhng tnh
hung c nu ra cc mc bn di .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Default Rule cm mi traffic ra vo thng qua ISA Server. Nh vy, cc my
trong Internal truy cp ra ngoi bng domain name, cn phi c DNS Server phn gii cc
domain name ny. y ta s s dng DNS Server ca ISP .
Ta s to rule truy vn DNS phn gii tn min bn ngoi.
Ti my ISA Server, m ISA Server Management, phi chut vo Firewall Policy,
chn New, chn Access Rule

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Access Rule Names, t tn rule l: DNS Query

Hp thoi Rule Action, chn Allow

Hp thoi Protocols, chn Selected Protocols v nhn Add
Trong hp thoi Add Protocols, bung mc Common Protocols, chn DNS, nhn Add,
nhn Next

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Access Rule Sources, Add : Internal v Local Host. Thc t th ta khng nn
chn Local Host.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Access Rule Destinaton, Add : External, nhn Next

Hp thoi User Sets, chn All Users, nhn Next

Hp thoi Completing the New Access Rule Wizard, kim tra li thng tin v Rule ln
cui, sau nhn Finish. Nhn chn Apply, Ok .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Kim ta li kt qu: trn my ISA

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


My DC :

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tuy nhin, lc ny ta ch mi cho php cc traffic t Internal c truy vn DNS ra bn
ngoi thng qua port 53. Do , cc my Internal c php truy cp ra ngoi s dng
nhng dch v khc na, ta cn phi to thm rule thng qua cc tnh hung di y.
Tnh hung 1 : cty Athena cho php cc nhn vin thuc nhm Maketing c php
truy cp Internet khng hn ch.
Group Maketing c to trc trn my DC phn trc, tip theo ta ch vic nh
ngha cc i tng ny trn my ISA. qun l c cc domain user ta phi joint my
ISA vo domain athena.edu.vn.

Trong ca s ISA Server Management, ti ca s th 3, chn tab Toolbox, bung mc
Users, chn New, hp thoi User set name, t tn l Maketing ri nhn Next

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Users, nhn Add, chn Windows users and groups

Add 2 users Man1 v Man2 vo hp thoi Users

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Trong hp thoi Completing, chn Finish. Nhn Apply .

Thc hin tng t cho cc i tng cn li.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Bc tip theo ta s to access rule theo yu cu trn. Chut phi Firewall Policy, chn
New, chn Access Rule
Hp thoi Access Rule Names, t tn rule l: Allow Maketing Full Access

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477




-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Access Rule Sources, add Internal, chn Next

Hp thoi Access Rule Destinaton, add External, chn Next

Hp thoi User Sets, remove group All Users, v add group Maketing vo, chn Next

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Completing the New Access Rule Wizard, chn Finish

Nhn chn Apply, chn OK
Kim tra kt qu
Logon user athena\Ma1

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


M Command Prompt g lnh nslookup. Phn gii cc tn min External .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Truy cp trang : http://athena.edu.vn

Tnh hung 2 : cty Athena a ra yu cu cho php cc nhn vin thuc cc phng
ban : Sale, Training c php truy cp Web khng gii hn.
tnh hung 1, yu cu t ra l cho php c Internet khng hn ch. Tuy nhin, tnh
hung th 2 ny, ta ch cho php truy cp dch v Web. Nh vy, ta ch cho php cc
Protocol : HTTP,HTTPS l .
Trong ca s ISA Server Management, chn Firewall Policy, chn New, chn Access
Rule

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Access Rule Names, t tn rule l: Allow user access Web


Hp thoi Protocols, chn Selected Protocols v nhn Add. Trong hp thoi Add
Protocols, bung mc Common Protocols, chn HTTP v HTTPS, nhn Add. Nhn
Next .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Access Rule Sources, add Internal


-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi User Sets, remove group All Users, v add group Sale v Training vo, chn
Next

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477



Kim tra kt qu
Logon user athena\s1

Truy cp trang : http://forum.athena.edu.vn

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Truy cp trang : https://ebanking.dongabank.com.vn

Tnh hung 3 : Khi cc nhn vin ca cng ty s dng my tnh c tn exchange th
s khng c truy cp internet. Ta thit lp rule ny nh sau :
Trong ca s ISA Server Management, chn Firewall Policy, chn New, chn Access
Rule. Hp thoi Access Rule Names, t tn rule l: Deny user use Exchange access
Internet.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477



Hp thoi Access Rule Sources, nhn add chn Computer Set, chn my exchange,
chn Next

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477



Hp thoi User Sets, remove group All Users, v add cc group Sale, Training,
Maketing, Manager vo, chn Next

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477



Ti my Exchange kim tra :

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tnh hung 4 : tng tnh hiu qu trong gi lm vic, cty Athena yu cu cc
nhn vin trong gi lm vic ch c truy cp mt s trang Web nh : http://athena.edu.vn,
http://forum.athena.edu.vn , http://www.nhatrang-itt.vn. Gi lm vic c quy nh : 8h-
12h sng v 14h 18h chiu.
Ta s nh ngha cc trang Web c php truy cp nh sau :
Trong ca s ISA Server Management, chn Firewall Policy, qua ca s th 3, ti tab
Toolbox, bung mc Network Objects, nhn New, chn URL Set

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Trong hp thoi New URL Set. Name , nhp tn: Allow Web, nhp cc trang web m
bn cho php

Tng t nh vy, ta nh ngha lun cc trang Web khng cho php vi tn l Restrict
Web.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tip theo, ta s nh ngha khong gi lm vic ca cty nh sau :
Trong ca s ISA Server Management, chn Firewall Policy, qua ca s th 3, ti tab
Toolbox, bung mc Schedules, chn New

Trong Name, nhp tn Work Time. Bn di chn t (8h - 12h) v t (2h 6h)

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tng t, bn to thmRest time t 12h-2h

Cui cng, ta s nh ngha rule cho tnh hung ny.
Chut phi Firewall Policy, chn New, chn Access Rule. Hp thoi Access Rule
Names, t tn rule l: Users on Work Time

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477



Next .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Access Rule Sources, add Internal

Hp thoi Access Rule Destinaton, nhn Add. Bung URL Sets, chn Allow Web. Nhn
Next .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477



Hp thoi Completing the New Access Rule Wizard, nhn Finish. Chut phi ln rule
Users on Work Time, chn Properties

Qua Tab Schedule, trong khung schedule, chn l Work Time , Nhn OK

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Kim tra kt qu.
Log user athena\t1 kim tra

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Truy cp trang http://www.vnexpress.net

Truy cp trang : http://www.nhatrang-itt.vn

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tnh hung 5 : trong gi gii lao, cc nhn vin c truy cp mi trang Web ngoi
tr trang : http://24h.com.vn . Ta thit lp nh sau :
Trong ca s ISA Server Management, chut phi Firewall Policy, chn New, chn
Access Rule. Hp thoi Access Rule Names, t tn rule l: Users on Rest Time

Hp thoi Rule Action, chn Allow.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Next

Hp thoi Access Rule Sources, add Internal, nhn Next

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Access Rule Destinaton, add External, nhn Next


-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Completing the New Access Rule Wizard, nhn Finish
Chut phi ln rule Users on Rest Time, chn Properties

Qua Tab Schedule, trong mc Schedule, chn Rest Time. Qua tab To, khung
Exceptions, nhn Add. Bung mc URL Sets, chn Restrict Web

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Apply, chn OK
Tng t qua tab Schedule chn Rest time

Kim tra kt qu .
Log on user athena\man1 kim tra

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Truy cp cc trang http://24h.com.vn/ v http://bongdaso.com; http://google.com

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tnh hung 6 : cty cho php cc nhn vin c php gi mail trong gi lm vic.
Ta thit lp rule nh sau :
Access Rule. Hp thoi Access Rule Names, t tn rule l: Allow Send Mail on Work
Time


-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Protocols, chn Selected Protocol, nhn Add .
Trong hp thoi Add Protocols, bung mc Mail, chn SMTP, POP3, SMTPS, POP3S,
IMAP4, IMAPS nhn Add . Nhn Next

Hp thoi Access Rule Sources, Add Internal, nhn Next

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Access Rule Destinaton, add External, nhn Next

Hp thoi User Sets, bn chn All Users

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Completing the New Access Rule Wizard, Finish
Nhn chn Apply, nhn OK

Chut phi ln rule Allow send mail on Work Time, chn Properties. Qua Tab
Schedule, trong mc Schedule, chn Work Time

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Apply, chn OK
User dng Outlook Express gi mail kim tra kt qu.

Tnh hung 7 : Chnh sch cng ty Athena yu cu cc nhn vin khng c truy
cp trang Web: http://bongdaso.com trong thi gian lm vic v k c thi gian ngh. Nu
vn c truy cp s hin thng bo. Ta thit lp yu cu nh sau :
Access Rule. Hp thoi Access Rule Names, t tn rule l: Deny Access Web

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Rule Action, chn Deny

Hp thoi Protocols, chn Selected Protocol, nhn Add. Trong hp thoi Add
Next

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi Access Rule Sources, Add Internal, nhn Next

Hp thoi Access Rule Destinaton, nhn Add. Bung mc URL Sets, add Deny Web.
Nhn Next

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Hp thoi User Sets, chn All Users

Hp thoi Completing the New Access Rule Wizard, nhn Finish
Chut phi vo ruleDeny and Redirect Web, chn Properties
Trong hp thoi Deny and Redirect Web Properties, qua tab Action, nh du check
vo mc Redirect HTTP requests to this Web Page, khung bn di nhp vo trang
web : http://172.16.1.2 ( Host cha trang Web cnh bo )

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Kim tra kt qu
User logon v truy cp trang http://24h.com.vn kim tra kt qu

Export rule :
Trong ca s ISA Server Management, chut phi Firewall Policy, chn Export

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Giao din Welcome ta nhn Next

Giao din Export Preference, chn Export Confidential Information v g Password .

Giao din Export File Location, chn Browse v chn ni lu tr Access Rule.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Kim tra li v nhn Next v nhn Finish .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Import rule :
Trong ca s ISA Server Management, chut phi Firewall Policy, chn Import

Giao din Welcome ta nhn Next

Giao din Select the Import File, nhn nt Browse v file c Export .
Nhn Next tip tc, v nhp vo PassWord.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Kim tra li v nhn Finish .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Bn c th tham kho Video demo theo cc link sau :
http://www.mediafire.com/?3sa8b5wch99yb
Hoc :
%20ACCESS%20TO%20INTERNET%20RESOURCE/
Nh vy, vi vic kt hp cc Access Rule ta c th qun l vic truy cp t mng ni ra bn
ngoi hay ngc li. Tuy nhin, hiu qu hn th ta phi kt hp vi Application Filter.
chnh l ni dung tm hiu phn tip theo.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Phn 3 : Application & web filter
Application Filter l phn m rng ca Microsoft cho php cc hng th 3 c th pht
trin cc ng dng tch hp vo ISA Server. Mt trong cc hng pht trin Add-in cho ISA
Server l GFI. Tham kho GFI ti trang web : www.gfi.com. GFI h tr ISA Server phn
HTTP Filtering kh tt.

Web Filter cho php ISA Server qun l c Packet Data tng Application. Web
Application Filter c s dng nhiu nht trn cc Application Firewall v lin quan n
Web Traffic .

Microsoft cn cung cp cho ngi dng v cc Developers phn ISA Server SKD c
th t lp trnh hoc thay i ISA Server theo hng pht trin ca ring mnh. Cc Add In
ca ISA Server c th Enable/Disable bng cng c ISA Server Management Console trong
mc Add-ins .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Download ISA Server SDK ti a ch :
http://www.microsoft.com/downloads/details.aspx?FamilyID=16682c4f-7645-
4279-97e4-9a0c73c5162e&DisplayLang=en
Trong phn Add-in gm tt c cc Application Filter ca ISA Server 2006, gm 2 phn:
Application v Web Filter. Cc Application Filter:

Chn Tab Web Filters xem cc Filter s dng cho Web

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Chng ta c th Enable/ Disable cc Add-ins ny bng cch Click phi chut chn Enable/
Disable

HTTP Web Filter
Mc nh tt c cc Traffic no i qua ISA Server bng Protocol HTTP u b mt
Application mang tn Web Proxy Filter trong ISA Server tc dng. Filter ny c chc nng
chn tt c cc Web Traffic v thc hin chc nng Semi-NAT n Web Server. a ch IP
ca Clients vn c hin th trong gi tin, nhng ISA Server c quyn kim sat ni dung
gi tin gi i.
Ta vo ISA Server Management Console, Chn Firewall Policy

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Chn tab Tool Box trong Task Pane v tm Protocol HTTP, chut phi chn Properties.

Ti mc Application Filter

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Ta khng th Disable Default rule ny, m ch c th check hoc khng check mc
Application Filter.
Yu cu ca cty Athena t ra cho cc nhn vin ca phng ban Maketing trong gi lm
vic khng c nghe nhc trc tuyn, khng c down load cc file c phn m rng l
*.mp3, *.exe, *.avi. Ngoi ra, cng khng c chat bng Yahoo Messenger.
Ta s thit lp yu cu ny nh sau :
Ti my ISA Server, trong ca s ISA Server Management, chut phi ln rule Maketing,
chn Configure HTTP.

Qua tab Extensions, trong khung Specify the action taken for HTTP methods, chn Block
specified methods (allow all others)

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhp vo nhng nh dng file m bn mun cm: *.mp3, *.exe, *.avi.

Chut phi ln rule Maketing, chn Properties, qua tab Content Types, khung This rule
applies to, chn Selected content types

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Trong khung Content Types b du chn Audio v Video ( user khng nghe nhc
trc tuyn). Nhn Apply, chn OK .

i vi Yahoo Messenger, ta s chn bng Signatures. Chut phi ln rule Maketing, chn
Configure HTTP Qua tab Signatures, nhn Add. khung Name, nhp tn: Deny Yahoo
Messenger

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Khung Search in, chn ty chn: Request headers
Khung HTTP Header, nhp: Host:
Khung Signature, nhp: msg.yahoo.com. chn OK

Nhn Apply, chn OK
Ngoi ra, ta cng cn nh ngha thm cc Protocol Definition trn ISA Server qun l
cc TCP port 5050, 5100 v 5000 cho ba dch v Chat,Voice v Webcam ca Yahoo
Messenger. Sau s gn thm vo rule trn. Ta nh ngha nh sau :
Vo Task Pane, chn Tab Tool Box :

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Chn Menu New chn Protocol

Phn Name g tn hin th l Yahoo Messenger

Giao din Welcome nhn Next

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Giao din Primary Connection Information, chn New

Trong ca s to mi Protocol, chn Protocol l TCP, Port Range t 5050 n 5050. Ri Ok

Tng t, to thm cc port 5000 v 5100. Ri nhn Next .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Giao din Secondary Connection chn No ri nhn Next

Kim tra li cc thng s v nhn Finish .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


FTP Filter
i vi cc FTP Traffic, thng thng ta ch nn cho php chc nng Read Only m thi,
ngha l users ch c th dng lnh GET download t FTP Server m khng th dng lnh
PUT upload file ln FTP Server. Mc ch ny nhm trnh gy tht thot thng tin ra bn
ngoi cty.
Vo mt rule Allow c h tr FTP, chn Configuring FTP

chn Tab Protocol, chn Option Read Only, chn Ok ri nhn Apply.

Chng ta s bn lun thm v vn Application Filter tp 2. Cc bn c th tham kho
Video demo theo link sau : http://tailieu.athena.edu.vn/Microsoft/Video%2070-
351/LAB%207%20-%20APPLICATION%20AND%20WEB%20FILTER/
Hoc : http://www.mediafire.com/?jabjimjjk9sis

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Phn 4 : Server Publishing

Publising Rule cho php cc Clients t Internet c th kt ni vo Web Server, Mail
Server, Application Server, trong mng Internal, c th s dng DNS Name hoc s dng
a ch IP Public. Hay chng ta c th hiu l thng thng cc Clients t Internet truy
cp vo mng Internal thng qua NAT inbound, th by gi chng ta s lm iu qua
cc Publising Rule.
Vic u tin l chng ta cn cu hnh thm dch v DNS my ISA Server cho m hnh.

My ISA sau khi ci t ISA 2006 join vo domain dng sn trn my PC2
(athena.edu.vn).

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


My DC to send & receive connector, star services : POP3, to 2 mailbox u1 & u2.
Cho u1 quyn logon locally . Dch v DNS c cu hnh tng ng vi mng
172.16.1.0/24 .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


- My ISA : logon athena/administrator ci thm dch v DNS ti y.
Ti Forward lookup zone, to New Zone, chn Primary Zone vi tn athena.edu.vn

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Ca s Dynamic update chn do not allow

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Xa host c to ra ng vi interface Local

Tng t ti mc Reverse lookup zone to New Zone, chn Primary Zone

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Net ID l 192.168.2

Chn do not allow

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Ti Reverse lookup zone, phi chut chn New Pointer

To pointer ng vi Interface Public

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Chnh DNS trn my ISA ch lng nghe v pha card Lan. Bng cch phi chut ln PC
ISA, chn properties

Chn only the following IP , v Remove ip 192.168.2.111

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Sau Restar li dch v DNS

Kim tra phn gii DNS trn my ISA

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tip theo, trn my ISA to rule publish DNS

Chn non-web server , t tn rule l publish DNS

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


in Ip trn card Lan

Mc Select Protocol, chn DNS server

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Mc Network Listener Ip Address, chn External

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Kim tra trn my Internet

Chnh Preferer DNS v IP ca card ngoi my ISA
Vo Run g cmd kim tra bng nslookup

a. Publish Mail Exchange Server :

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Trn ISA to rule Allow send mail cho php Internal c php gi mail ra ngoi
External

Chn protocol : POP3, POP3S, IMAP, IMAPS, SMTP, SMTPS .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Mc Access Rule Source chn Internal

Mc Access Rule Source chn External

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Mc Users set chn All users. Nhn Next, kim ta vchn Finish .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Ti ISA Management, chut phi vo Firewall Policy chn mail server publishing rule.

Ti giao din Welcome, t tn publish Exchange

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Giao din Select Access Type, chn Client access .

Mc Select Services, chn standard & secure port nh hnh .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


in IP ca my DC

Mc Network Listener Ip Address, chn external

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Next, kim tra li v nhn Finish

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Trn my DC , vo All Program chn OE , phi chut chn Run as

Logon vi tn u1, Display Name in vo tn u1

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhp vo Email Address : u1@athena.edu.vn

Incoming & outgoing : mail.athena.edu.vn

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhp User & pass to trn my DC. Ri nhn Next

Account mail ca u1 va to, chn properties

Tab server, check vo mc My Server Require .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tab advanced, check vo 2 mc Outgoing v Incoming, mc Leave a

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Send & Receive kim tra

Nhn Create Mail, to mail gi cho u2

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Mail gi thnh cng .

Ti my Internet m OE to ti khon u2 .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Ti khon mail : u2@athena.edu.vn

Incoming & outgoing : mail.athena.edu.vn

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhp vo Tn v Pass ca user u2 to trn my DC

Tab Server

Tab advanced

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Send & receive kim tra.

Thy c mail t u1 gi ra

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Reply mail li cho u1

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


gi thnh cng

U1 nhn c mail t u2

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


b. Publish OWA
Ti my DC. M IIS v b check require secure channel SSL

Truy cp OWA bng port 80 ( http ) vi tn : http://exchange.athena.edu.vn/owa

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Truy cp OWA bng port 443 ( https) vi tn : https://exchange.athena.edu.vn/owa

Ti my ISA 1 to rule publish OWA, chut phi vo Firewall Policy chn Exchange
Web Client .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


t tn rule l publish owa

Chn phin bn l exchange 2007, check vo mc OutLook Web Access.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Mc Publishing Type, chn Publish a single web

Mc Server Publishing Security, chn use non secure

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Mc Internal Publishing Detail, in tn internal site v ip ca my DC nh hnh

in tn public name nh hnh. y chnh l tn m Client t bn ngoi s s dng truy
cp.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Next to web listener vi tn web port 80 ng vi port 80

Mc select Web listener, chn do not require SSL

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Mc Web Listener Ip Address, chn external

Mc Authentication, chn no authentication

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Mc Authentication Delegate, chn no delegation

Mc User Sets chn All user. Nhn Next ri chn Finish. Apply ri Ok.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Kim tra ti my Internet. M Browser, nhp http://mail.athena.edu.vn/owa

Logon u2

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Gi mail cho u1

Gi mail thnh cng

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Ti my DC truy cp bng OWA v logon u1

Thy nhn c mail ca u2

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


c. Publish Web server
Trn my PC2 to trang web index.htm vi ni dung ty . M IIS v to thm web site tn
Web .

Chut phi vo Web v chn Properties, ti tab Website chn port 8080

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tab Home Directory tr v ni cha source web .

Chut phi vo mc Web chn Browse, kim tra

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Trn IE nhp a ch : http://athena.edu.vn:8080

Tng t trn my ISA to 1 rule publish website vi tn l Publish web

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


in tn site internal v ip my DC nh hnh .

To Web listener ng vi port 8080

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tn publish site : www.athena.edu.vn

ng dn g vo : /*

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Ta cn phi Bridge port 8080

Kim tra trn my Internet. Nhp a ch : http://www.athena.edu.vn:8080

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Bn c th tham kho video Demo theo cc link sau :
http://www.mediafire.com/?iy8s94r05502h
http://www.mediafire.com/?n8277sk775grcpl
http://www.mediafire.com/?dt8xe1x8q7h7dan
Hoc :
%20ACCESS%20TO%20INTERNAL%20RESOURCE/
%20INTERGATED%20TO%20EXCHANGE%20SERVER/
Nh vy, chng ta publish cc dch v cn thit cc client t bn ngoi c th giao tip.
phn tip theo chng ta s tm hiu v chc nng VPN trn ISA.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Phn 5 : VPN
VPN (Virtual Private Network) l gii php hu hiu kt ni cc h thng mng
ca doanh nghip c nhiu chi nhnh v v tr a l xa nhau, hoc doanh nghip ca bn c
nhiu nhn vin phi thng xuyn i cng tc xa v h cos nhu cu truy cp vo ti nguyn
mng ni b.
ISA Server c kh nng cu hnh thnh mt VPN Server cho php Clients t xa truy cp
(Client to Site) hoc cu hnh lm mt Gateway kt ni n mt h thng chi nhnh (Site
to Site). VPN Server ca chi nhnh c khuyn co nn l mt ISA Server , nhng thc t
th ISA Server c th kt ni VPN rt tt vi cc thit b VPN ca cc hng khc.

Clients hoc VPN Server khi quay VPN vo ISA Server s c cp mt a ch IP
Private s dng trong VPN Tunnel. ISA v Clients s s dng a ch IP ny cho phn
Routing trn VPN. Private IP c cp pht c th ly t DHCP Server hoc ly t dch v
Routing and Remote Access trn Windows 2003.
ISA Server thc ra s dng dch v Routing and Remote Access ca Windows 2003 lm
VPN v Routing, ngai ra ISA Server c thm nhng phn Filtering v Application Filter .
Trn ISA Server, IP Address Pool c quy nh l mt khang a ch IP. a ch IP
u tin c ISA Server s dng cho chnh mnh khi bt tnh nng VPN trn ISA Server ln.
Nhng a ch IP tip theo s cp pht cho Clients hoc VPN Server khi quay VPN vo ISA
Server.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Khang a ch IP cp pht ny khng c trng Network ID vi bt k lp mng no
ca ISA Server hoc trong tan h thng Routing. Nu trng Network gia cc lp mng,
ISA Server v Router khng th Routing c v b Overlap Destination. iu ny cng s
p dng cho 2 ISA Server quay VPN vi nhau theo m hnh Site to Site.
M hnh minh ha VPN Clients to site v Site to Site :

1. Cu hnh VPN Client to Site :
cu hnh cp pht IP cho VPN Clients, vo ISA Server Management Console. Chn
mc Virtual Private Network

Chn mc Verify VPN Properties and Remote Access Cniguration, chn Tab Address
Assignment

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


y ta khng s dng DHCP cp Ip cho clients. Chn Use Static Address Pool, nhn
Add thm khang IP vo Pool.
Khang IP bt u t 172.30.1.1 n 172.30.1.50 h tr cho 49 Clients kt ni vo ISA
Server bng VPN. Nhn Ok v kim tra khang IP .

Tip theo ta chn Tab Authentication. Check mc Microsoft Encrypted authentication (
MS-CHAP )

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


M Computer Managemet, chn mc Local Users and Groups. Mc User, chn New
User . To User c tn l VPN1/123abc!!!

Chut phi vo user VPN1 chn Properties. Chn Tab Dial-in. Mc Remote Access
Permission chn Allow Access

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Phi cht vo Groups chn New Group

Group Name g VPN Clients. Nhn Add thm Member vo Group ny

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Ti ISA Server Management Console, Chn mc Virtual Private Network. Chn mc
Specify Window Users or Select a Radius Server

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Giao din VPN Clients Properties, ti Tab Groups nhn Add . Nhp vo nhm to.

Chuyn qua tab General. Check vo Enable VPN Client Access. S lng Clients l 40.

Nhn Apply v Ok.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Vo mc Network Rules trn ISA Management Console

Chn Tab Network Rules v ch Rule VPN Clients to Internal Network c mi quan h
l kiu Route .

VPN Clients v External s s dng NAT giao tip vi nhau .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Ch : ta cn phi to thm 1 Access Rule ti mc Firewall Policy cho php VPN Client
c php truy cp vo mng Internal .

Tip theo ta cu hnh cho my internet kt ni VPN, vo Network Connections v chn
Create New Connection

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Giao din Welcome nhn Next .
Chn mc Connect to a Network at my workplace

Mc Network Connection, chn Virtual Private Network Connection

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Mc Company Name nhp tn : athena .

Nhn Next. Mc VPN Server Selection nhp Ip ng card WAN ca my ISA

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Kim tra li v nhn Finish .

Phi chut vo Connection mi to chn Connect

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Giao din Connection, nhp Username/Password l vpn1/123abc!!!

Kim ta kt ni.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Bn c th tham kho video demo theo link sau :
http://www.mediafire.com/?zd1c7a4bjl59m
Chng ta s xy dng kt ni VPN Client to Site s dng L2TP, RADIUS tp 2.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


2. Cu hnh VPN Site to Site :

Ta c m hnh gi sau :

M hnh trn c thit lp sn v c m t li nh sau :
M hnh trn s dng 4 my o VMWare gm c : Client 1, Client 2, ISA1, ISA2 .
My ISA 1 : c ci bn ISA standard, my c 2 card mng, 1 card thit lp
ch bridge (net 192.168.0.0/24), 1 card thit lp l host only ( Vmnet2 ).
My Client 1 : s dng 1 card v ni vi my ISA1 thng qua ( Vmnet2 ).
My ISA 2 : ci bn ISA enterprise, my c 2 card mng, 1 card l ch bridge
(net 192.168.0.0/24), 1 card l host only ( Vmnet3 ).
My Client 2 : my c 1 card v ni vi my ISA2 qua (Vmnet3 ).
Tip theo ta s cu hnh theo cc bc sau :
Trn my ISA 1 : to user : vpn2 cp quyn allow dial-in .

ISA 1 ISA2 Client 2 Client 1
Net 10.10.10.0/24 Net 172.16.1.0/24 Net 192.168.0.0/24
VPN 1 Properties

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Ti ISA Management Console , mc Virtual Private Network, chuyn qua tab Remote
Site, ta to 1 connection tn : VPN2, ri nhn Next .

Mc VPN Protocol, chn PPTP

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tip theo, nu ta cha thit lp sn dy IP cp cho Client khi quay VPN vo, th s xut
hin giao din Local Network VPN Setting, ta gn dy : 192.168.100.1 - 192.168.100.254

Nhn Ok, ri Next. Giao din Remote Site Gateway, ta nhp a ch my ca my ISA2 .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Giao din Remote Authentication, in user VPN2 v pass, user ny c to bn my
ISA2 .

Giao din Network Address, ta nhp dy IP internal ca bn pha my ISA2 qun l
(VMNet3).

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Giao din Site to Site Network Rule, yu cu ta to 1 Network rule name vs route vi
ng mng Internal. y chnh l im khc so vi phin bn ISA 2004.

Giao din Site to Site Network Access Rule, yu cu ta to 1 access rule cho php traffic
VPN giao tip vi mng Internal. Ta tn mc nh v chn All outbound Traffic .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Next, kim tra li cc thng s ri nhn Finish kt thc. S c thng bo hin ra nhc
nh ta phi kim tra li : User c cp quyn dial-in hay cha ?, Network rule nh ngha cha?,
Access rule to cha ?. Tip theo ta bt VPN client access .

Chn mc Select Access network, check thm kt ni VPN 2 to .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Chn mc Networks, tab networks taxem li ng mng internal ca my ISA1 qun l.

Qua tab Network rules, kim tra li mi quan h gia traffic VPN2 v mn Internal .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Mc Firewall Policy, kim tra li xem c Access rules cho php traffic VPN2 giao tip vi
mng Internal bn ISA1 khng ?

Ti my ISA 2 : tng t to user : vpn1 ( allow dial-in ) .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


To connection tn : VPN1

VPN Protocol ta chn loi PPTP .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Mc Local Network VPN Setting, nhp dy IP cp cho traffic pha bn ISA 1 kt ni vo :
192.168.200.1 - 192.168.200.254 .

Mc Remote authentication, nhp user VPN2 to bn my ISA1 .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Giao din Network Address, ta add Range internal bn nhm my ISA 1 .

Giao din remote NLB, khng s dng Network balancing, nhn Next .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Giao din Site to Site Network Rule, kim tra li v nhn Next .

Giao din Site to Site Access Rule , chn All Outbound Protocol, nhn Next tip tc .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Bt VPN client access

Add thm mng vpn 1 mi to

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Kim tra li Network rule

Tab Network

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Kim tra li Access rule

Ti my ISA 1 : vo RRAS kim tra, thy c kt ni

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Ti my Client1: thc hin lnh ping n my Client 2

Ti my ISA 2 : vo RRAS kim tra, thy c kt ni

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Ti my Client 2 : thc hin lnh ping n my Client 1

* Nh vy, vi nhng bc cu hnh nh trn th chng ta c th cu hnh cc kt ni
VPN dng Clients to Site hay Site to Site.
Ta thy phin bn ISA 2006, khi cu hnh kt ni VPN th Network Rule v
Access Rule c phn la chn ta c th to sn lun cc rule ny. Cn ISA
2004 th sau khi to kt ni VPN th ta phi nh ngha tip 2 i tng ny.

Ta phi cn nhc khi thit lp Network Rule th mi quan h gia cc ng mng
l Route hay l NAT cho hp l . Chnh v ISA 2006 c phn la chn cho ta to
sn i tng ny, nn chng ta thng t quan tm. iu ny dn n kt qu l
ta s mp m khi phi l h thng mng c nhiu ng mng khc nhau. Thng
thng i vi cc mng s dng Private IP giao tip vi nhau th ta nn xt l
Route .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Cn khi mi quan h l Public Ip v Private Ip th ta xt l NAT. Chng hn nh
VPN Clients vi Internal s s dng kiu i l Route v cng lai IP Private.

VPN Clients v External s s dng NAT giao tip vi nhau v ra Internet
phi
s dng Public IP. Private IP c NAT thnh Public IP giao tip vi
Internet .

Mt im lu na l khi ta to kt ni VPN dng Clients to Site, th ta phi t
i to thm 1 Access Rule cho traffic VPN t ngoi truy cp vo mng Internal.
V khng c la chn to sn cho i tng ny.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Bn c th tham kham kho Video demo theo link sau :
%20VPN%20SERVER/
Hoc :
http://www.mediafire.com/?a1c7tbct8wmhp
phn tip theo chng ta s tm hiu v chng nng Cahing trn ISA, mt tnh nng ni tri so vi
cc Firewall phn cng khc .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Phn 6 : CACHING
Trc khi i vo phn ny, chng ta s tm hiu v Proxy v Proxy Server .

Proxy l mt Internet server lm nhim v chuyn tip thng tin v kim sot to s an
ton cho vic truy cp Internet ca cc my khch, cn gi l Clients s dng dch v
internet. Trm ci t proxy gi l proxy server. Proxy hay trm ci t proxy c a ch IP
v mt cng truy cp c nh. V d: 123.234.111.222:80.

a ch IP ca proxy trong v d l
123.234.111.222 v cng truy cp l 80.
Mt s chc nng ca proxy :
Gip nhiu my tnh truy cp Internet thng qua mt my tnh vi ti khon truy cp
nht nh.
S dng Proxy, cng ty c th cm nhn vin truy cp nhng a ch web khng cho
php.
Ci thin tc truy cp nh s lu tr cc b cc trang web trong b nh ca proxy
server.
Giu nh danh a ch ca mng ni b gy kh khn cho vic thm nhp t bn
ngoi vo cc my ca cng ty .
Phi hp s dng proxy vi Firewall to ra mt b lc gi l firewall proxy nhm
ngn chn cc thng tin c hi hoc tri thun phong m tc i vi quc gia, chng
tc hay a phng .
Vi sn phm ISA Server th c mt tnh nng c o m t c lai Firewall phn cng
no c th snh kp, l cung cp tnh nng truy cp Internet vt tri (Internet
Acceleration). ISA Server c th c cu hnh thnh mt Proxy Server cha ni dung

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


trang web m cc Clients truy cp, ng thi Proxy Server cng c s dng lm
Firewall dng HTTP hoc FTP.
Trong phn ny ny chng ta s cu hnh cc i tng:
Proxy .
Caching Rule .
Scheduler Download Content .
C ch Cache gip ISA Server tng tc Internet khi User truy cp. Mi trang web i bng
HTTP hoc file i bng FTP c ISA Server Cache li (RAM hoc HDD). Khi c mt
Clients th 2 truy cp, ISA Server s s dng Cache sn c cung cp cho Clients.

ISA Server Cache trong RAM v sau chuyn xung b nh. Mc nh ISA Server s
dng 10% RAM cho vic Cache. Chng ta c th cu hnh li s phn trm RAM s dng
ny sau khi ci ISA Server.
Trong ln s dng sau, nu c Clients no truy cp vo ng trang web nm trong
Cache, ISA Server s ly ni dung t trong Cache ra.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


ISA Server h tr Forward Caching cho Clients trong LAN truy cp Internet v
Reversed Caching cho Internet User truy cp vo Server trong LAN.
1. Thit lp Proxy :
Mc nh ISA Server l mt Proxy Server lng nghe trn Port 8080 nhng khng
Cache c nh li ni dung ca web trn cng m Cache vo RAM. Do , sau khi Server
khi ng li, nhng Cache ny s mt. cu hnh ISA Server thnh proxy, ta c th nh
li s Port m Proxy Server ang s dng (c th i thnh 3128 hoc 6667) v thit lp
lu tr Cache trn cng .
nh li Port ca Proxy Server ISA, ta vo ISA Server Management Console, chn
mc Configuration, tab Network, phi chut vo Network Internal v chn Properties

Chn tip tab Web Proxy, kim tra du check Enable HTTP Proxy Server, lng nghe trn
Port 8080. Ta c th i li port ny .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Chn mc Authentication cu hnh cc kiu chng thc i vi cc User s dng
Internet qua Proxy.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Cc Option trong mc ny thc ra khng cn thit, v ISA Server c c ch chng thc
bng Access Rule. Nu ta check Option Require all users to authenticate c th gy li cho
nhng session khng th cung cp Username/Password c nh Windows Update.
Microsoft khng khuyn co ngi dng chn Option ny. Khi quyt nh s dng
Option ny, th admin phi chc rng tt c cc traffic khi ra ngai Internet qua Proxy phi c
Username/Password. Kiu chng thc l Integrated s dng Username/Password ca
Windows chng thc.
Thit lp trn Client s dng ISA lm Proxy Server :
Mun s dng tnh nng Proxy th cc Clients (trnh duyt Web) phi h tr tnh nng
Cache. i vi IE th c th s dng Policy cu hnh v tt tnh nng cu hnh
Proxy trn IE ngi s dng khng th thay i thng s ty tin, c gii
thiu phn u. Cn Mozilla Firefox th iu ny l khng th v ch c th cu
hnh Manual trn tng Clients.
cu hnh Proxy trn IE, tavo Menu chn Tools \ Internet Options \ Tab
Connection \ chn nt LAN Settings .

Chn Use a Proxy Server for your LAN, nhp a ch IP ca ISA Server vi Port
8080.
Chn Bypass proxy Server for local address cho php Clients khng s dng Proxy
Server khi truy cp cc Web Server nm trong mng LAN.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


i vi Mozilla Firefox, ta vo Menu chn Tools \ Internet Option \ Chn Tab
Advanced, trong ca s Advanced tip tc chn Network v chn Settings

Tng t nhp thng s ca Proxy Server l a ch IP ca ISA Server vi Port 8080.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


2. Thit lp dung lng lu tr cache trn cng
Vo ISA Server chn mc Configuration, chn mc Cache v ch mc Cache ang
trng thi Disable .

Trong ca s Task Pane chn Define Cache Drive .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Chn cng G: cha Cache, in dung lng cha vo mc Maximum cache size, ri
nhn Set

Chn OK , ch phn Cache tr thnh Enabled. Ri nhn Apply v Ok .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Mt s lu v Cahe :
Ni cha cache phi l a cc b (local drive) .
a cha cache phi c nh dng NTFS
Nn lu cache trn mt a vt l khc vi a h thng.
Sau khi xc lp dung lng cache, trn a D:\ ch nh s tn ti th mc
urlcache cha tp tin dir1.cdat c dung lng bng dung lng ch nh. y chnh l
tp tin cha ni dung cache. Tp tin cha ni dung cache ch c th c dung lng ti
a l 64 GB. Nu mun c dung lng cache ln hn, ta c th ch nh ng thi
nhiu a lun l .
Mc nh ISA khng h tr kh nng quan st v iu chnh ni dung cache. Tuy
nhin, Microsoft cung cp thm cng c "Cache Directory Tool for Internet Security
and Acceleration ISA Server". Bn c th ti theo link sau :
http://www.microsoft.com/downloads/details.aspx?familyid=b9ecfcd3-c13f-4447-83ed-
add9a8ea45db&displaylang=en

3. Thit lp dung lng RAM
Phi chut vo mc Cache trn ISA Server v chn Properties .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Chn Tab Advanced, nhn vo phn trm RAM s dng, mc nh ang l 10%, ta nhp l
60% . Mi i tng khi lu trn RAM ca ISA Server c dng lng khng qu 12,8KB.
Dung lng ny cng nh th tc truy cp cng nhanh v RAM x l s tt hn.

4. Thit lp Cache rule

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Mc nh c Default Cache Rule cho php Cache li tan b cc ni dung i bng
HTTP v FTP qua ISA Server. Cho d Clients c s dng Proxy hay khng nhng ni dung
HTTP v FTP vn c lu li trn ISA Server nh vo Application Protocol Web Proxy
Filter.
Chc nng ca Cache Rule gip cho ISA Server c th Cache Web, ni dung Cache c
dung lng ti l bao nhiu, khi no th Cache v trang no khng cn Cache ni dung

to Cache Rule, chn Cache trong mc Configuration

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Phi chut vo Cache chn Create a Caching Rule bn ca s Task Pane

Mc Name nhp : Cache all Microsoft Content

Nhn Next, mc Cache rule Destination xc nh i tng no s tc dng Rule ny.
Destination c th l mt Network, hoc c th l mt trang Web, Server IP nhn Add
thm Destination

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tip theo ta to mt Component URL Set vi ni dung l trang web ca Microsoft.com.
Chn Menu New v chn URL Set

Mc Name tn hin th l Microsoft Web Site v nhn Add, nhp URL http://microsoft.com

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn OK v bung URL Sets vo Microsoft Web Site trong phn Component

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Close , kim tra Destination va thm. Nhn Next

Mc Content Retrieval quy nh thi gian ly Cache t Internet (Cache Retrieval). bo
m thng tin lun lun mi .
Only if a valid version of the object exists in cache. If no valid version exists,
route the request: ch cung cp ni dung lu tr cn hp l cho client. Nu ni dung
qu hn th ISA s truy cp web server ti v. Cu hnh ny bo m cho client c
c ni dung mi nht (trong mt thi hn nht nh.)
If any version of the object exists in cache. If none exists, route the request: cung
cp ni dung lu tr cho client bt k thi hiu. Ch khi khng c lu tr th mi ti
v. Cu hnh ny bo m cho client lun lun c c ni dung cn thit, bt k tnh
cp nht.
If any version of the object exists in cache. If none exists, drop the request: cung
cp ni dung lu tr cho client bt k thi hiu. Nu khng c lu tr th b qua yu
cu ca client. Ni mt cch khc, cu hnh ny ch cung cp ni dung lu tr sn cho
client, ISA khng bao gi truy cp web server theo yu cu ca client.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Next. Mc Cache Content quy nh ni dung no s c Cache. La chn mc nh
l cho ISA Server ly Cache v khng cn ly ni dung ca nhng Dynamic Web Site
(Logon Session)
Dynamic content: ni dung loi ny s thng xuyn thay i v v th c nh
du l khng th c cahe (not cacheable). Tuy nhin, nu chn phng thc ny
trong rule th ni dung ng s vn c lu cho d n c nh du l khng th
cache.
Content for offline browsing: ni dung c th truy cp khi khng kt ni n web
server. Nu chn phng thc ny trong rule th ISA s lu mi ni dung trang web,
k c phn c nh du l khng th cache.
Content requiring user authentication for retrieval: lu cc ni dung m trang web
yu cu chng thc trc khi cho php truy cp.

Nhn Next. Mc Cache Advanced Configuration ny mc nh s cho php ISA Server
Cache li nhng ni dung i bng SSL.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Next, mc HTTP Caching mc nh cho php ISA Server Cache ni dung ca HTTP
v thi gian TTL cho Cache l 1 ngy.

Nhn Next, mc FTP Caching cho php ISA Server Cache li ni dung ca i tng FTP
khi download t nhng trang web ca Microsoft.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Next, xem li ni dung Rule cu hnh, nhn Finish .

5. Thit lp Content download job
Content download job cho php ISA Server t ng Download v cp nht thng tin
trong Cache . Content download job s t ng khi to mt Connection n trang web no
do admin quy nh v download ton b ni dung ca trang web v v lu vo Cache .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


n thi gian quy nh, ISA Server s ly ni dung trang web. Content download job c
th c thc hin duy nht mt ln hoc lp li nhiu ln. Trn ISA Server chng ta s cu
hnh thng qua cc giao din Wizard c xy dng rt trc quan.
Lu : Content download job s khng th hon tt nu trang web mc tiu i hi chng
thc ngi dng.
cu hnh Content download job th ISA Server cn phi bt tnh nng Proxy trn
Local Host v Enable System Policy cho php ISA Server s dng tnh nng ny .
Vo mc Network, chn Tab Network, phi chut vo Local Host, chn Properties,
chn Tab Web Proxy, check du Enanable HTTP Proxy, Port mc nh l 8080.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Chut phi vo Firewall Policy chn Edit System Policy.

Check vo mc Enable this configuration group .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Kch hot system rule th 29.

to Content download job ta vo mc Cache trong Configuration, chn Tab Content
Download Jobs

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn vo mc Schedule a Content Download Job bn ca s Task Pane

Phn Name g Download Vnexpress.net

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Next, chn Download hng ngy

Nhn Next, xc nh thi gian thc hin task ny, ngy no bt u, thi gian bt u.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Giao din Content Download ti mc download content from th URL g vo
http://vnexpress.net v ch phi c http:// nu khng ISA Server s bo li. J ob ny s
khng Download nhng trang web hoc ng Link no ngai trang http://vnexpress.net v
su ca mi lin kt khng qu 4 ln. Nhn Next .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Giao din tip theo quy nh Cache Rule cho ring J ob ny. ISA Server mc nh ch
Cache nhng Object ny c Cache Header. Nhng i tng Download bng J ob ny c th
cu hnh theo mt Cache Rule cho ring mnh, hoc s dng Cache Rule mc nh c sn ca
Windows.

Kim tra li qu trnh cu hnh v nhn Finish .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Bn c th tham kho Video theo link sau :
%20IMPLEMENTING%20CHAING/
Hoc :
http://www.mediafire.com/myfiles.php#jay02s6s6i6ry,1

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Phn 7 : MONITOR
ISA bo mt cc truy cp ra ngoi Internet t trong mng Internal v ngc li, cho php
truy cp ti cc ti nguyn bn trong mng cc b t ngoi Internet. Nu ISA gp vn ,
chng ta s khng th s dng c cc tnh nng ca n. Nu ISA b tn cng th h thng
mng c qun l bi ISA s gp nguy him.
Do vy, mt s l do sau y m bn cn phi quan tm :
Gim st lu lng gia cc mng.
Sa cc li kt ni mng.
iu tra cc cuc tn cng.
Ln k hoch cho s thay i.
ISA Server Management Console c nhiu thnh phn cho php bn gim st hot ng
ca ISA Server nhiu mt. l cc thnh phn sau:

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Alerts: thc hin gim st ISA Server vi cc s kin c thit lp sn, khi nhng s
kin xy ra th s thc hin nhng hnh ng c nh ra. Mc nh ISA
c cu hnh vi nhiu alert. Bn c th nh ngha nhiu s kin mi v hnh ng
p ng khi s kin xy ra.
Sessions: cung cp thng tin v phin lm vic ca tt c ngi dng kt ni ti ISA
Server, bao gm cc loi client sau: Firewall client, SecureNAT client, VPN client,
VPN site-to-site v Web Proxy client.
Logging: cung cp thng tin chi tit v Web Proxy, Microsoft Firewall Service hay
SMTP Message Screener. Mc nh ISA s ghi li tt c client kt ni thnh cng hay
b ngn cm ti ISA Server. Bn c th s dng nhng thng tin nht k gim
st ISA theo thi gian thc hay xem li sau ny.
Reporting: tng kt thng tin s dng trn ISA Server. V d bn c th tng kt
nhng user no truy cp nhiu nht qua ISA Server, nhng trang no c truy cp,
hay nhng giao thc v ng dng no c s dng nhiu nht.
Connectivity: kch hot gim st kt ni lin tc t ISA Server ti nhng my tnh
khc, hay mt trang web no trn mng. V d, bn c th s dng Connectivity
gim st kt ni t my ISA ti domain controller, DNS server, published Web
server, ng thi cung cp c ch cnh bo khi nhng kt ni b li.
Performance: thu thp d liu hiu nng ca my ch ISA. Bn c th gim st my
ch ISA theo thi gian thc, hay ghi vo nht k xem li.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Thit lp mt Refresh cho Monitoring, ta vo ca s Task Pane chn Refresh Rate

1. Cu hnh Alert :
Alert l mt thng bo, hay mt hnh ng no c thc hin trn my ISA. Microsoft
s dng t ng Trigger ni ln iu ny, c ngha l nu ISA Server thy mt tnh nng
no t n ngng quy nh s t ng bo ln mt Alert cho ngi dng.
ISA Server c rt nhiu Alert c cu hnh sn. Bn c th chnh sa cc Alert c
bng cch cu hnh cc s kin s kch hot Alert hay hnh ng m Alert s thc hin. Hoc
bn cng c th nh ngha Alert mi.
Trong ISA Server Management Console, chn Monitoring v chn th Alerts

Chn mc Configure Alert Definition bn ca s Task Pane

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


kch hot hay v hiu ha mt Alert bn tch hay b tch check box trc mi Alert

Chn Alert Definition m bn mun cu hnh ri nhn nt Edit pha di. y ta chn
Alert tn l DNS Instrusion. Tab General, in thng tin vo cc mc Name, Description,

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Category, Severity ca Alert. Bn cng c th kch hot hay v hiu ha Alert bng cch
chn hay b chn Enable.

Tab Event cho php bn cu hnh s kin s kch hot Alert.
Event: s kin s kch hot Alert.
Additional Condition: nu Event c nhng thm iu kin no .
Number of occurrences: s s kin phi xy ra bao nhiu ln th mi kch hot Alert.
Number of events per second: thi gian s kin phi xy ra bao nhiu ln trong mt
giy th mi kch hot Alert.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tab Action l mt trong cc la chn sau :
Send Email : c th in a ch ca SMTP Server, From, To...
Run a program: chy mt chng trnh no khi Alert Event xy ra.
Report to Windows Event Log: ghi mt mc vo nht k Event Log.
Stop Selected Services. dng mt dch v no .
Start Selected Services. chy mt dch v no .

to mt Alert Definition, bn nhn nt Add. Hp thoi New Alert Wizard xut hin.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


t vi tn l DNS Alert

Nhn Next, chn Alert Events

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Next, quy nh hng mc cho Alert

Nhn Next, quy nh nhng hnh thc cnh bo cho ISA Server khi gp Condition tha mn
vi Alert to ra.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Next, yu cu cu hnh SMTP Server . Nhn Finish kt thc.

Khi c Alert cnh bo cho admin, admin phi xc nhn ( Acklowledge ) cho ISA Server
ISA Server khng cnh bo na. Ta chn Alert v nhn Acknowledge Seleted Alerts .

ti thit lp ( reset ) li 1 Alert, ta chn Alert cn Reset. Ca s Task Pane nhn Reset
Selected Alert

172.16.1.2
ISA
administrator@athena.edu.vn
test@athena.edu.vn

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Chn Yes .

Kim tra li Alert va Reset mt

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


2. Cu hnh Session :
Bn c th s dng Session Monitoring xc nh nhng user hay my tnh no kt
ni ti ISA Server, gi chung l ISA client. Nhng ISA client c th SecureNAT, Firewall
hay Web Proxy client, hoc c th l client ngoi Internet kt ni ti ti nguyn bn trong
mng internal nh web server, hay qua mt kt ni VPN.
Session Monitoring cung cp thng tin thi gian thc v session ca cc ISA client. Bn
c th tm thy phn Monitoring trong ISA Management Console, tab Session. Nhng
thng tin hin th bao gm:
Activation: hin th ngy v gi session c thit lp.
Session Type: kiu session, c th l SecureNAT, Firewall client, Web proxy client,
VPN client, VPN Site-to-Site.
Client IP: a ch IP ca client khi to session.
Source Network: hin th mng m t session c khi to.
Client Username: tn ca client khi to session. Client Name s ch hin th cho
Web Proxy v Firewall Client.
Client Hostname: hin th tn hay a ch IP ca my tnh client. Nu l Firewall
client th hin th tn, nu l SecureNAT client th hin th IP.

Ch : tt c kt ni ngoi Internet truy cp web-site bn trong ISA u c hin th
l Web-Proxy client. Cc kt ni khc t Internet c hin th nh l SecureNAT client.
Ta cng c th thm thng tin v server v application. to thm , t menu View ca
ISA Server Management Console, chn Add/Remove Columns, chn ct mun thm vo.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Server Name: tn ca my chy ISA Server cha session ang theo di.
Application Name: hin th tn ca bt k ng dng no duy tr mt session qua ISA Server.
Thng tin ny ch c nu client s dng kt ni kiu Firewall Client.

Session Monitoring khng ch hin th cc kt ni ca client. N cn c th ngt cc
session khng mong mun gia my tnh no v mng, gim s lng session hin th.
Disconnecting the session: cho php ngt session khng mong mun ngay lp tc, tt
c cc kt ni s dng session ca client s b ng li. Nhng iu ny khng
ngn cn client thit lp session tr li. Mun ngn cn bn phi chnh li chnh
sch ca ISA thc hin iu .
Pausing Monitoring session: tm dng vic gim st cc session. Cc session ang
c s khng b xa i, nhng nhng session mi thit lp s khng c a thm
vo. Khi kch hot vic gim st tr li, ISA s t ng cp nht thng tin v cc
session mi v a vo.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Stopping Monitoring session: ngng vic gim st session. Thng tin v tt c
session hin ti s b mt. Khi bn kch hot vic gim st tr li, ISA s thu thp
thng tin v cc session t u.

Nu chng ta c mt s lng ln ngi dng trong mng th s c rt nhiu session v bn
s kh quan st. Do vy, ta s dng b lc session ch hin th nhng session mun xem.
cu hnh session filtering, chn tab Sessions, trong khung Task pane, di dng Filter
Definition, nhn vo Edit Filter.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Giao din Edit Filter, c cc thit lp sau:
Filter By: lc cc Session Type, Client IP, Client Username...
Condition: iu kin da trn tiu ch m bn va chn, bao gm Equals (bng),
Contains (cha), Not Contains (khng cha), Not Equal (khng bng).
Value: a vo gi tr tng ng vi condition m bn chn

Sau khi thit lp xong, bn nhn Add To List thm vo danh sch b lc .
Ta c th lu li tt c nhng Filter Defition bng tnh nng Export ca ISA Server. Ti
Tasks Pane, nhn Export Filter Definitions.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Phn File name, nhp tn tp tin XML cn lu li v nhn Save.

phc hi li cc Session ta c th s dng chc nng Import, ti Tasks Pane, chn
Import Filter Definitions

Phn File name, xc nh tn tp tin XML cn Import, v nhn Load

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


3. Cu hnh logging :
ISA Server c chc nng Logging cho php theo di cc vic truy cp ca cc Client
theo thi gian thc. 1 Log ca ISA Server c th c lu trong chnh ISA Server dng file
text hoc lu vo SQL Database.
cu hnh Logging, ti Detail Pane chn Tab Logging, ca s Tasks chn nhng Option :
Configure Firewall Logging: cu hnh Log file cho dch v Microsoft Firewall .
Configure Web Proxy Logging: cu hnh Log file cho Web Proxy .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Chn cc phn cn ghi log tab Field .

ISA lu cc s kin theo dng *.mdf v *.ldf trong th mc C:\Program Files\Microsoft
ISA Server\ISALogs. Mc nh theo nh dng MSDE database vi tn *.mdf .
Cc file *.mdf v *.ldf c to ra theo nh dng ISALOG_yyyymmdd_FWS_nnn.mdf,
ISALOG_yyyymmdd_WEB_nnn.mdf v ISALOG_yyyymmdd_EML_nnn.mdf . Vi :

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Yyyy : nm to file log
mm: thng to file log
dd: ngy to file log
FWS: log ca firewall
WEB: log ca proxy
EML : log ca Email (SMTP)
nnn: s th t file log trong trng hp nhiu file log trong 1 ngy .

Ngoi ra, cc tp tin Log c th c lu vo DataBase SQL trn SQL Server. ISA Server
khi ci s c mt phn SQL Clients kt ni vo ISA Server.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Options cu hnh thm thng tin cho SQL Clients .

Lu cc tp tin log vo file trn ISA Server, trong Tab Log, click File

Ta c th cu hnh chi tit bng cch nhn vo Options :
ISALogs folder or This folder : la chn ni lu tr cho Log file .
Compress log files: option ny s nn cc tp tin Log li .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Delete log files older than (days): xc nh s ngy Log file s b xa khi ISA
Server, s dng Option ny t xa v thu gn Database.
Limit total size oflog files (GB) : xc nh dung lng ca tp tin Log.
Maintain free disk space (MB) : khong dung lng trng cn li .
Deleting older log files as necessary: xa i nhng Log c khi dung lng Log b
y.
Discarding new log entries: ngng khng tip nhn thm Cache Entry na nu
Cache b y

Chng ta c th Log li nhng yu cu theo cc Access Rule to ra trn ISA Server. Bng
cch vo ISA Server Management chn mc Firewall Policy. Chn Rule no cn bt tnh
nng Log, chut phi vo Rule chn Properties.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Qua Tab Action, chn Log requests matching this rule.

Phn hin th Log cng c th c chn lc c th d dng quan st. Trong ca s Detail
Pane chn Tab Logging. Trn ca s Tasks chn Edit Filter

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Trong ca s Filter by, chn mt trong nhng phn cn Log li .

ISA Server c th lu li nhng Definition cho Log File bng cch Export thnh tp tin
XML .
Tri ca s Tasks chn Export Filter Definitions.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Trong phn File name, g tn tp tin .xml cn lu li v nhn Save

Tng t nh vy ta c th import 1 file Log c Export ra sn . Trn ca s Tasks chn
Import Filter Definitions

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Trong phn File name, g tn tp tin .xml cn Import v nhn Load.

Chng ta cng c th lu li nhng g hin th. Trn ca s Tasks c cc Option sau y :
Copy All Results to Clipboard: chn tt c nhng Log ang hin th trong phn
Detail Pane.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Copy Selected Results to Clipboard : copy tt c nhng phn Log Entry no ang
c chn, s dng phm CTRL chn nhiu Entry .

4. Cu hnh Report :
Chng nng ny s to ra cc Report theo yu cu, Report l cc bn bo co ca ISA
Server v tnh hnh hat ng ca mnh, tnh trang b nh, lu lng truy cp

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Bn Task, chn Generate a New Report

Giao din Welcom nhp tn cn Report .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Next, xc nh ni dung ca Report

Nhn Next, xc nh thi gian to Report

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


mc nh v nhn Next

Nhn Next tip tc, ta c th in thng s email nhn Report

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Next, kim tra li thng tin v nhn Finish kt thc .

Sau khi to Report s c lit k trong phn Report ca Monitoring .Mun xem Report,
chn Report v trong ca s Task Pane chn View Seletected Report .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Giao din View Report hin ra dng Web .

Ta c th to report theo thi gian thc. Ti ca s Task, nhn Create and Configure
Report Jobs

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Add thm thuc tnh cho Report

Nhp tn cho Report

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Next, quy nh ni dung cho Report

Nhn Next, quy nh thi gian s to ra Report, mc nh thi gian to l 1:AM hng ngy.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Next, b qua phn Publish

Nhn Next tip tc, ta c th in thng s email nhn Report

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Kim tra li v nhn Finish

Ti ca s Report Jobs, chn Properties chng ta c th mt J ob tn Real Time Monitor

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Chn Report Job v nhn Edit thay i thi gian to Report

Ta c th 1 to database gm cc report trn ISA. Trong ca s Task, nhn Configure Log
Summary

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Tab Log Summary, chn Enable daily and monthly summaries .
Specify the generation time : xc nh cho ISA Server bit thi gian no s to
Report.
ISASummaries folder : s dng th mc ISASummaries trn chnh my ISA .
Server
This folder: nu mun lu Report mt th mc khc .
Daily summaries : s lng Report Entry s c log li trong ngy.
Monthly summaries: xc nh s lng Report trong thng

Ta c th ngn khng cho to Database cha Report, bng cch b du check Enable
daily and monthly summaries.
cng b 1 Report, trong ca s Task chn Publish Selected Report

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Phn Browse for folder chn th mc lu li cc Report, th mc ny phi l mt th
mc c Share

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


User c thm quyn s kt ni n th mc Share ny xem nhng Report ISA Server
to ra.
xa 1 report, th trong ca s Task chn click Delete Selected Report

Nhn Yes.

5. Cu hnh Connectivities
S dng chc nng ny xc nh cht lng ca ng truyn mng, hoc xc nhn
xem ng truyn cn hat ng c hay khng. Connectivities s kt ni n mt trang
web v ly ni dung ca trang . Chng ta c th chn HTTP Method th vi trang web
(GET, POST, )
Trong ca s Detail Pane, chn Tab Connectivity.
Ti mc Task, chn Create New Connectivity Verifier

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Mc Name g http://athena.edu.vn

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Next, mc connection detail nhp http://athena.edu.vn y chnh l host m ta cn
kim tra. Vic kim tra, c cc la chn giao thc gi HTTP l GET hoc POST, hoc ch
n thun l khi to kt ni TCP n Server, hay 1 1 cu cu Ping.

Nhn Next, kim tra li v nhn Finish

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Mt thng bo hin ln s hi kin khi bt tnh nng ny, v Connectivity Verifier l
kim tra ng kt ni t ISA Server n Host cn kim tra nn phi c mt System Policy
cho php ISA Server khi to kt ni. Hoc c th to Access Rule cho php ISA Server
(Localhost) c php kt ni n Host (External). Chn Yes v chn Apply .

Trong phn Firewall Policy, phi chut chn Edit System Policy, chn mc HTTP
Connectivity Verifier xem cc thng s.

Chn OK, phi chut vo Connectivity Verifier to v chn Properties

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Chuyn qua tab Properties

Specify the timeout response threshold (msec): xc nh s mili giy c kt lun Server
khng th tng tc c.
Trigger an alert if the server response is not within the specified timeout : khi to
mt Alert nu Server b Timeout .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Group type : nhng Option s kim tra : Active Directory,DHCP, DNS, Others, Published
Servers, Web (Internet).
tt tnh nng kim tra kt ni ta vo ISA Server Management, chn Tab Monitoring.
Trong ca s Detail Pane chn Tab Connectivity v chn Connectivity Verifier no cn
xa, chn Delete

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


6. Qun l cc dch v ca ISA Server
Ta c th Start hoc Stop mt s dch v bng cch vo ISA Server Management, chn
Monitoring. Trong Details pane, chn tab Services . Nhng dch v mc ny: Microsoft
Data Engine, Microsoft Firewall service, hoc Microsoft ISA Server J ob Scheduler service.
Trong Tab Tasks, chn Start Selected Service Start dch v hoc nhn Stop.

Ta c th s dng tnh nng Performance trong Windows quan st cc thnh phn trong
ISA Server thi gian thc, bng cch vo ISA Server Performance Monitor trong Start
Menu

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Phi chut vo phn biu chn Add Counter

Chn nhng Counter cn thit ng vi ISA Server Firewall Services m cn thm vo .

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Nhn Explain nu mun bit r ngha ca counter no .

lu li ni dung ca Performance Monitor thnh mt trang web dng html c th xem
li sau. Ta phi chut ln mn hnh Performance chn Save as

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


chn ng dn tp tin html mun lu li

Chn file html va lu, c th m bng Internet Explorer xem li.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Bn c th tham kho Video Demo theo link sau :
%20MONITORING/
Hoc :
http://www.mediafire.com/?7lrxc1264m66e

Hn gp li cc bn phn 2.

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477


Mc Lc
--ooOoo--

1. Ci t ISA 2006 Trang 9
2. Access rule Trang 35
3. Application & web filter Trang 89
4. Server Publishing Trang 102
5. VPN Trang 151
6. Caching Trang 184
7. Monitor Trang 210

Lab Thuc Hanh ISA 2006-Encrypt

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Lab Thuc Hanh ISA 2006-Encrypt

Uploaded by

Copyright:

Available Formats

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING

You might also like