Prev | Current Page 367 | Next

Jesse Varsalone and Jan Kanclirz Jr.

"Microsoft Forefront Security Administration Guide"


Keep this in mind when planning your deployment. It is a good idea to do some
research based specifi cally on your target uses of ISA Server as well as your estimated
workload.
TIP
There are plenty of users who can provide feedback especially in the isaserver.
org forums. However, in order to get good answers based on your capacity
needs, you should do some baselining of your environment to make sure that
your estimated workload is not just a wild guess.
Designing & Planning??¦
Network Topology and
Networking Hardware Considerations
It is always a good idea to consider not only the ISA Server confi guration, but
the details around it as well. Whenever possible the ISA Server should be
deployed inline to provide the highest level of security. This is not a best practice
that is unique to ISA Server, but to all fi rewalls. Although ISA Server and many
Configuring Microsoft Internet Security and Acceleration Server 2006 ??? Chapter 11 383
Confi guring TCP/IP Settings
Even for those who have confi gured Network Interface Card (NIC) settings in Windows
thousands of times over the course of the last several years, this part can be tricky. I am
assuming that you have a fairly simple network layout, and you are deploying the ISA
Server as your main perimeter protection device with a single internal network segment
behind it. In this scenario, we have two NICs to confi gure.
The trick is that we only want to confi gure a single default gateway and a common
DNS server setting for all interfaces.


Pages:
355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379