Blocking MSN Messenger from ISA 2000 Server - Part II
Continuing from my previous post, I found another easy-cheeky way to block MSN Messenger from ISA 2000 Server in Cached Mode or Integrated Mode. All you have to do is create a Site and Content Rule to block the *.msgr.hotmail.com destination set.
Procedure
1. Create a new destination set for "*.msgr.hotmail.com". To create a destination set, follow the procedure;
To create a destination set -
- Click Start, point to Programs, point to Microsoft ISA Server, and then click ISA Management
- In the console tree of ISA Management, right-click Destination Sets, point to New, and then click Set.
- For array policy destination sets, where?
Internet Security and Acceleration Server > Servers and Arrays > Name > Policy Elements > Destination Sets
- For enterprise policy destination sets, where?
Internet Security and Acceleration Server > Enterprise > Policy Elements > Destination Sets.
- In Name, type a name for the destination set such as "Block MSN".
- (Optional) In Description, type a description for the destination set.
- Click Add and Click Destination and type "*.msgr.hotmail.com".
2. Create a Site and content rule using the "Block MSN" destination set to deny "*.msgr.hotmail.com".
To create a site and content rule -
- In the console tree of ISA Management, right-click Site and Content Rules, point to New, and then click Rule.
- For array policy, where?
Internet Security and Acceleration Server > Servers and Arrays > Name > Access Policy > Site and Content Rules
- For enterprise policy, where?
Internet Security and Acceleration Server > Enterprise > Policies > Enterprise Policy > Site and Content Rules
- Type the name of the rule "Block MSN Messenger"
- Click the deny radio button and then click next.
- Click the Deny access based on destination radio button then click next.
- Select Specified destination set.
- Now select "Block MSN" destination set that is created earlier.
- Click Next and Finish.
You have successfully created "Block MSN Messenger" site and content rule using "Block MSN" destination set that will deny access to "*.msgr.hotmail.com". Restart 'Microsoft ISA Server Control' service to test and let me know if that works or if that doesn't.