
YuChakTinMichael‘sGIACGCFWProjectAssignment
Page 59
datacrossingthefirewall,controlofaccesspolicy,androuting oftraffic.Thecache
improvesnetworkperformanceandenhancestheenduserexperiencebystoring
frequentlyrequestedWebcontent.Thefirewallandcachecanbedeployedseparately
ondedicatedserversorintegratedonthesamecomputer.”
17
ThereasonISAServerisusedintheGIACnetworkfor:
n enhanceperformance–itcanactasaproxycachingserverfortheinternal
clients,thusenhancingtheclient’sinternetbrowsingperformance
n protect–ithasadvancedstatefulinspectiontechnologyforprotectingthe
network
TheISAServereditionthatweuseistheStandardEdition.Andsinceitrunson
Windows2000Server,itisnecessaryforustosecuretheWindows2000installation
firstbeforedeployingISA.
PerfectingtheWindow s2000 Installation
Firstofall,installthelatestservicepack.Atthetimeofthiswriting,SP2isthelatest
availableversion.Infact,ISAwillnotinstallunlessyouhaveappliedSP1attheleast.
MicrosoftoffersWindows2000servicepacksviathisURL:
http://www.microsoft.com/windows2000/downloads/servicepacks/default.asp
Additionally,thesecurityupdatesavailableat
http://www.microsoft.com/windows2000/downloads/security/default.aspshouldbe
applied.
Hardeni ngtheConfiguration
ISAServerincludesaSecurityConfigurationWizardforhardeningtheWindows
2000installation.BeforeinvokingISAforthispurpose,applyalltheavailableservice
packsandupdates.
17
http://www.microsoft.com/isaserver/evaluation/productguide.asp
Comentarios a estos manuales