firewall installation

1

Firewall installationFirewall installation

STEP 1: INSALL WINDOWS 2003

SETP 2:INSTALL ISA 2000 WITH SP1

STEP 3:CONFIGURE ISA 2000

STEP 4: DNS

2

STEP 1: INSALL WINDOWS 2003 SERVER STEP 1: INSALL WINDOWS 2003 SERVER ON A MACHINE WITH 2 NICON A MACHINE WITH 2 NIC

►Member ServerMember Server►NIC1:82.99.254.34/29NIC1:82.99.254.34/29►NIC2:172.16.100.2/24NIC2:172.16.100.2/24

3

SETP 2: INSTALL ISA 2000 WITH SP1SETP 2: INSTALL ISA 2000 WITH SP1

►Run ISA from ISA CD RomRun ISA from ISA CD Rom

4

INSTALL ISA 2000 WITH SP1INSTALL ISA 2000 WITH SP1

►Click on continueClick on continue

5


►Click continueClick continue

6


► I AgreeI Agree

7


►Click Add (Constricting LAT Table )Click Add (Constricting LAT Table )

8


►Add 172.16.100.0 To 7Add 172.16.100.0 To 7

9


►Add 172.16.101.1 To 99Add 172.16.101.1 To 99

10


►Add 192.168.100.1 To 101.255Add 192.168.100.1 To 101.255

11


►Custom InstallationCustom Installation

12


►ContinueContinue

13


►Firewall modeFirewall mode

14


►Run ISA SP1 FROM CD ROMRun ISA SP1 FROM CD ROM

15


►Run ISA SP1 FROM CD ROMRun ISA SP1 FROM CD ROM

16


►SYSTEM RESTART AUTOMATICALLYSYSTEM RESTART AUTOMATICALLY

17

STEP3STEP3

CONFIGURE ISA 2000CONFIGURE ISA 2000

18


►RUN ISA MANAGEMENTRUN ISA MANAGEMENT

19


1- PROTOCOL RULES 1- PROTOCOL RULES

20


►ADD INTERNET PROTOCOL RULEADD INTERNET PROTOCOL RULE

21


► INTERNET PROTOCOL RULEINTERNET PROTOCOL RULE

22



23



24



25



26


►mailwizard protocol rulemailwizard protocol rule

27



28



29



30



31



32


►SMTP protocol ruleSMTP protocol rule

33



34



35



36



37


2-IP Packet 2-IP Packet FiltersFilters

38


39


►2-1 DNS Inbound Packet Filetr2-1 DNS Inbound Packet Filetr

40


►DNS Inbound Packet FiletrDNS Inbound Packet Filetr

41



42



43


►DNS Outbound Packet filterDNS Outbound Packet filter

44



45



46



47


►NSLookup Inbound Pacet filterNSLookup Inbound Pacet filter

48



49



50



51


► NSLookup Outbound Pacet filterNSLookup Outbound Pacet filter

52


►NSLookup Outbound Pacet filterNSLookup Outbound Pacet filter

53



54



55


►SMTP SMTP - - Outbound Packet FilterOutbound Packet Filter

56



57



58



59


►SMTP SMTP - - Inbound Packet FilterInbound Packet Filter

60



61



62


►DNS Filter Packet filter (Built in)DNS Filter Packet filter (Built in)

63


►DNS Filter Packet filter DNS Filter Packet filter ((Built inBuilt in))

64



65



66


► ICMP ping resonseICMP ping resonse((inin) ) Packet Filter Packet Filter ( ( Buint inBuint in))

67



68



69



70


ICMP source quench Packet filter(Built in)ICMP source quench Packet filter(Built in)

71


► ICMP source quench Packet filter(Built ICMP source quench Packet filter(Built in)in)

72



73



74


► ICMP timeout inPacket filterICMP timeout inPacket filter((Built inBuilt in))

75



76



77


►ICMP timeout inPacket filterICMP timeout inPacket filter((Built inBuilt in))

78


► ICMP unreachable in Packet Filter(Buit ICMP unreachable in Packet Filter(Buit in)in)

79



80



81



82


4- Policy Elements4- Policy Elements

83

CONFIGURE ISA 2000CONFIGURE ISA 2000Policy ElementsPolicy Elements

84


►Client Address setClient Address set

85


►Client Address setClient Address set

86


►DNS FORWARDER Client SetDNS FORWARDER Client Set

87


►DNS FORWARDER Client SetDNS FORWARDER Client Set

88

DNSDNS

► Forward Lookup ZoneForward Lookup Zone

► Reverse Lookup ZoneReverse Lookup Zone

89

DNSDNS

►Forward Lookup ZoneForward Lookup Zone

90

Forward Lookup ZoneForward Lookup Zone

►Add these RecordsAdd these Records

91

Reverse Lookup ZoneReverse Lookup Zone

92

Reverse Lookup ZoneReverse Lookup Zone

►Add These RecordsAdd These Records

firewall installation

Documents

isa cd rominstall isa

sp1continueinstall isa

sp1run isa sp1

sp1click continueinstall

sp1i agreeinstall isa

sp1firewall modeinstall

ip packet filtersconfigure

dns filter packet filter