Dr. Tom's ISA Server 2004 Firewall Blog

Dr. Tom Shinder's ISA Server Firewall Blog

Browse by Tags

All Tags » ISA Server (RSS)
Sorry, but there are no more tags available to filter with.
ISA 2004 HTTP Security Filter - Will It Meet Its Potential?
ISA 2004 firewalls include a very powerful HTTP Security Filter. This filter allows you to block virtually any HTTP connection attempt, based on the settings you configure in the filter. The HTTP Security filter allows you to configure the ISA 2004 firewall...
Posted: Apr 29 2004, 02:51 AM by shinder | with 8 comment(s)
Filed under:
Disabling Spoof Detection in ISA 2004 Firewalls
Spoof detection in ISA 2004 firewalls is a handy feature that helps protect the firewall from spoof attacks. However, there are some circumstances that generate spurious spoofs , such as when implementing NLB. No problem! Here's the fix, courtesy of our...
Posted: Apr 29 2004, 02:31 AM by shinder | with 3 comment(s)
Filed under:
Fixes for Instant Messenger Related Problems
One of the most common problems seen on the Web boards and mailing lists are Instant Messenger related issues. How do you get them to work? How do you make them stop working? My solution is to remove the dreaded IM'ers from the users machines :-) However...
Posted: Apr 27 2004, 01:12 AM by shinder | with 20 comment(s)
Filed under:
Cool Script for Auto Failover and Failback for Windows 2003 ISA Firewalls
A frequent request on the ISA boards is a script or other free method that you can use to fail over and fail back if you have multiple external interfaces. Custler , a frequently posted on the http://forums.isaserver.org message boards has posted a very...
Posted: Apr 26 2004, 05:52 AM by shinder | with 6 comment(s)
Filed under:
The Mystery of the ISA 2004 Beta Newsgroups
I wrote to Jerry Bryant about putting some beta newsgroups for ISA 2004 on the msnews.microsoft.com Web site. Silly me, there were already ISA 2004 beta 2 newsgroups. The problem is that they're very effectively hidden from public view! This explains...
Posted: Apr 26 2004, 03:53 AM by shinder | with 5 comment(s)
Filed under:
Download New ISA 2000 Video Presentations
Microsoft has posted some video presentations that you can download and view at your leisure. Do what I do -- burn these guys to a DVD and play them while flying from one gig to another. You can watch Martin Sargent reruns only so many times :-) With...
Posted: Apr 26 2004, 03:45 AM by shinder | with 18 comment(s)
Filed under:
Another TechEd ISA 2004 Session
If you're planning on attending TechEd this year in San Diego, then you might be interested in another session that I'm doing. Here's the info: Date: May 25 Time: 5:00PM -- 6:15PM Code: SECC04 Description: ISA Server 2004 Enhanced Microsoft Exchange and...
Posted: Apr 26 2004, 02:43 AM by shinder | with 7 comment(s)
Filed under:
Birds of a Feather Session for ISA Fans at TechEd in San Diego
If you're an ISA firewall fan, and want to get together with other ISA afficianados, then check out the Birds of a Feather (BOF) session we're putting together for TechEd. A number of ISA gurus (and me too) will be there! Here's the run down so far: Application...
Posted: Apr 25 2004, 10:45 AM by shinder | with 5 comment(s)
Filed under:
Protecting Microsoft Exchange with ISA Server 2004 Firewalls: Integrating the ISA Firewall into an Established Network Infrastructure
If you didn't already know, ISA firewall's are the firewalls for protecting Microsoft Exchange Servers. One of the things the hampers adoption is the belief by many firewall and network admins that they need to change up their current network topologies...
Posted: Apr 25 2004, 07:38 AM by shinder | with 6 comment(s)
Filed under:
DCOM Error Related to SMTP Message Screener
The ISA firewall's SMTP Message Screener is pretty cool. Its not a full-fleged spam whacker, but it provides a nice first line of defense against unwanted email. One thing that was a bit problematic with the ISA 2000 firewall's SMTP Message Screener was...
Posted: Apr 25 2004, 06:34 AM by shinder | with 4 comment(s)
Filed under:
ISA 2004 Firewall Client Weirdness
The ISA firewall's Firewall Client app is really the killer app of the ISA 2000 and ISA 2004 firewall. It's a real shame that so many people shy away from it, because its a key component to a strong outbound access control scheme. Without strong outbound...
Posted: Apr 23 2004, 02:35 AM by shinder | with 3 comment(s)
Filed under:
The Pain of Putting the Front-end Exchange in the DMZ
I finally finished the ISA 2004/Exchange Deployment Kit doc on the FE/BE Exchange config where the front-end is in a trihomed DMZ segment. What a pain! Actually, the ISA config is easy, but there are so many steps in configuring the Exchange Servers,...
Posted: Apr 22 2004, 04:23 AM by shinder | with 6 comment(s)
Filed under:
ISA 2004 RPC Filter Breaks Certificates Snap-in
I really like using the Certificates MMC snap-in because it greatly simplifies issuing certificates to domain members when using an enterprise CA. Sadly enough, the ISA 2004 RPC filter kills the Certificates snap-in, and also the Certificate Request Wizard...
Posted: Apr 21 2004, 11:05 AM by shinder | with 11 comment(s)
Filed under:
First Post
This is the first post for ISA Server. I'll talk about 2000 and 2004. Thanks! Tom
Posted: Apr 21 2004, 11:00 AM by shinder | with 7 comment(s)
Filed under: