|
Kapitel höher Was ist der ISA Server ISA beschaffen Lizenzierung MCP Prüfung 70-227 Zertifizierungen Versionen Clientadresssätze Protokolldefinitionen Protokollregeln IP Paketfilter Zeitpläne Zielsätze LAT LDT Clients SecureNAT-Client Webproxyclient Betriebsmodi
| |
MCP Prüfung 70-227 Installing, Configuring and Administering Microsoft
Internet Security and Acceleration (ISA) Server 2000, Enterprise Edition
Die Informationen in diesem Artikel beziehen sich auf:
- Microsoft ISA Server 2000
Wer sein Wissen über den ISA Server in einem
Zertifikat festhalten möchte und/oder den Weg zum
MCSA/MCSE
gehen möchte und sich für die Wahlprüfung zum ISA entschieden hat, kann die
Prüfung 70-227 ablegen.
Zur Vorbereitung auf die Prüfung kann man sich entweder der
Literatur widmen oder den offiziellen
MOC-Kurs 2159 belegen.
MOC 2159: Deploying and Managing Microsoft Internet
Security and Acceleration Server 2000
Dieser Kurs wurde speziell für IT-Spezialisten entwickelt und richtet sich
nicht an Netzwerkarchitekten. Drei der wichtigsten Funktionen, die die von
diesem Kurs angesprochenen IT-Spezialisten innehaben, sind folgende:
Webadministratoren, Netzwerkadministratoren und Sicherheitsadministratoren.
Dieser von einem Kursleiter durchgeführte Kurs vermittelt IT-Spezialisten die
Kenntnisse und Fähigkeiten, die erforderlich sind, um Microsoft Internet
Security and Acceleration (ISA) Server 2000 einzurichten und zu verwalten
Kursinhalt
- Beschreiben der Rolle von ISA Server in einem Unternehmensnetzwerk
- Installieren und Konfigurieren von ISA Server als Cacheserver und als
Firewall
- Konfigurieren von Zugriffsrichtlinien, um einen sicheren Internetzugriff
für Clientcomputer zu ermöglichen
- Konfigurieren von ISA Server als ein virtuelles privates Netzwerk (VPN)
- Konfigurieren des Zugriffs auf bestimmte interne Ressourcen
- Überwachen der Aktivitäten von ISA Server mit Hilfe von Alarmen,
Protokollen, Berichten und Echtzeitüberwachung
- Installieren und Konfigurieren von ISA Server in einer
Unternehmensumgebung
Module 1: Overview of Microsoft ISA Server
The following topics are covered in this module:
- Introducing ISA Server
- Using Caching
- Using Firewalls
- Deployment Scenarios for ISA Server.
At the end of this module, you will be able
to explain the use of ISA Server as a cache
server and as an enterprise firewall. This
includes:
- Explaining the use of ISA Server.
- Describing the use of Web caching.
- Describing the use of firewalls.
- Identifying common deployment scenarios
for ISA Server.
Module 2: Installing and
Maintaining ISA Server
The following topics are covered in this
module:
- Installing ISA Server
- Installing and Configuring ISA Server
Clients
- Maintaining an ISA Server
At the end of this module, you will be able
to install and configure ISA Server as a cache
server and as a firewall. This includes:
- Install ISA Server on a computer running
Windows 2000 Server.
- Configure computers as Web proxy,
Firewall, or SecureNAT clients for ISA
Server.
- Perform administrative tasks for
maintaining ISA Server.
Module 3: Enabling Secure
Internet Access
The following topics are covered in this
module:
- Accessing Policies and Rules Overview
- Creating Policy Elements
- Configuring Access Polices and Rules
- Configuring Bandwidth Rules
- Using ISA Server Authentication
At the end of this module, you will be able
to configure access policies to enable secure
Internet access for client computers. This
includes:
- Explaining the use of access policies
and rules to enable Internet access.
- Creating policy elements.
- Configuring access polices and rules.
- Configuring bandwidth rules.
- Explaining the use of authentication for
outgoing Web requests.
Module 4: Configuring Caching
The following topics are covered in this
module:
- Cache Overview
- Configuring Cache Policy
- Configuring Cache Settings
- Configuring Scheduled Content Downloads
At the end of this module, you will be able
to configure ISA Server as a caching server.
This includes:
- Describing the cache process that ISA
Server uses to process requests from client
computers.
- Configuring the cache policy.
- Configuring cache settings.
- Configuring scheduled content downloads.
Module 5: Configuring Access
for Remote Clients and Networks
The following topics are covered in this
module:
- VPN Overview
- Configuring VPNs
At the end of this module, you will be able
to configure VPN access. This includes:
- Explaining the use of VPNs and ISA
Server.
- Configuring VPNs by using ISA Server.
Module 6: Configuring the
Firewall
The following topics are covered in this
module:
- Securing the Server
- Examining Perimeter Networks
- Examining Packet Filtering and IP
Routing
- Configuring Packet Filtering and IP
Routing
- Configuring Application Filters
At the end of this module, you will be able
to configure ISA Server as a firewall. This
includes:
- Securing the ISA Server computer.
- Explaining the use of perimeter
networks.
- Explaining the use of packet filtering
and IP routing.
- Configuring packet filtering and IP
routing.
- Configuring application filters.
Module 7: Configuring Access
to Internal Resources
The following topics are covered in this
module:
- Introduction to Publishing
- Configuring Web Publishing
- Configuring Server Publishing
- Adding an H.323 Gatekeeper
At the end of this module, you will be able
to configure access to selected internal
resources. This includes:
- Explaining the concepts associated with
server publishing.
- Configuring Web publishing.
- Configuring server publishing.
- Adding an H.323 Gatekeeper.
Module 8: Monitoring and
Reporting
The following topics are covered in this
module:
- Planning a Monitoring and Reporting
Strategy
- Monitoring Intrusion Detection
- Monitoring ISA Server Activity
- Analyzing ISA Server Activity by Using
Reports
- Monitoring Real-Time Activity
- Testing the ISA Server Configuration
At the end of this module, you will be able
to monitor ISA Server activities by using
alerts, logging, reporting, and real-time
monitoring. This includes:
- Planning a strategy for monitoring and
reporting ISA Server activities.
- Configuring alerts to monitor intrusion
detection.
- Configuring logging to monitor ISA
Server activity.
- Using reports to analyze ISA Server
activity.
- Monitoring ISA Server computer activity.
- Testing the ISA Server configuration.
Module 9: Configuring ISA
Server for an Enterprise
The following topics are covered in this
module:
- Introducing ISA Server Enterprise
Edition
- Installing ISA Server in the Enterprise
- Using Enterprise Policies and Array
Policies
- Managing Network Connections
- Scaling ISA Server
- Extending and Automating ISA Server
Functionality
At the end of this module, you will be able
to install and configure ISA Server for an
enterprise environment. This includes:
- Describing the use of ISA Server in an
enterprise environment.
- Installing ISA Server in an enterprise
environment.
- Using enterprise and array policies.
- Scaling ISA Server.
- Managing network connections.
- Extending and automating ISA Server
functionality.
|
|
|
|
Weitere Informationen zu diesem Kurs (zur Vereinfachung stammt die
Kursinhalt von dieser Seite)
MCP Prüfung 70-227 Installing, Configuring and
Administering Microsoft Internet Security and Acceleration (ISA) Server 2000,
Enterprise Edition
Skills Being Measured
This certification exam measures your ability
to implement, administer, and troubleshoot
information systems that incorporate the
Enterprise Edition of Microsoft Internet
Security and Acceleration Server 2000. Wherever
the term ISA Server occurs in this prep
guide or in the content of the exam, it refers
only to ISA Server 2000, Enterprise Edition. It
does not refer to ISA Server 2000, Standard
Edition. Before taking the exam, you should be
proficient in the job skills listed below.
 |
|
The course includes material to prepare
you for this task. |
 |
|
The course
includes some material to prepare you
for this task. You will need to
supplement the course with additional
work. |
 |
|
The course
provides a general introductory overview
of this task. You will need to
supplement the course with additional
work. |
|
Installing ISA Server |
Preconfigure network interfaces.
- Verify Internet connectivity
before installing ISA Server.
- Verify DNS name resolution.
|
|
Install
ISA Server. Installation modes include
integrated, firewall, and cache.
- Construct and modify the local
address table (LAT).
- Calculate the size of the cache
and configure it.
- Install an ISA Server computer
as a member of an array.
|
|
Upgrade
a Microsoft Proxy Server 2.0 computer to
ISA Server.
- Back up the Proxy Server 2.0
configuration.
|
|
|
Troubleshoot problems that occur during
setup. |
|
|
Configuring and Troubleshooting ISA
Server Services |
|
Configure and troubleshoot outbound
Internet access. |
|
Configure ISA Server hosting roles.
- Configure ISA Server for Web
publishing.
- Configure ISA Server for SSL.
- Configure ISA Server for server
publishing.
|
|
Configure H.323 Gatekeeper for audio and
video conferencing.
- Configure gatekeeper rules.
Rules include telephone, e-mail, and
Internet Protocol (IP).
- Configure gatekeeper
destinations by using the Add
Destination Wizard.
|
|
Set up
and troubleshoot dial-up connections and
Routing and Remote Access dial-on-demand
connections.
- Set up and verify routing rules
for static IP routes in Routing and
Remote Access.
|
|
Configure and troubleshoot virtual
private network (VPN) access.
- Configure the ISA Server
computer as a VPN endpoint without
using the VPN Wizard.
- Configure the ISA Server
computer for VPN pass-through.
|
|
|
Configure multiple ISA Server computers
for scalability. Configurations include
Network Load Balancing (NLB) and Cache
Array Routing Protocol (CARP). |
|
|
Configuring, Managing, and
Troubleshooting Policies and Rules |
Configure and secure the firewall in
accordance with corporate standards.
- Configure the packet filter
rules for different levels of
security, including system
hardening.
|
|
Create
and configure access control and
bandwidth policies.
- Create and configure site and
content rules to restrict Internet
access.
- Create and configure protocol
rules to manage Internet access.
- Create and configure routing
rules to restrict Internet access.
- Create and configure bandwidth
rules to control bandwidth usage.
|
|
Troubleshoot access problems.
- Troubleshoot user-based access
problems.
- Troubleshoot packet-based access
problems.
|
|
| Create
new policy elements. Elements include
schedules, bandwidth priorities,
destination sets, client address sets,
protocol definitions, and content groups. |
|
Manage
ISA Server arrays in an enterprise.
- Create an array of proxy
servers.
- Assign an enterprise policy to
an array.
|
|
|
Deploying, Configuring, and
Troubleshooting the Client Computer |
| Plan
the deployment of client computers to
use ISA Server services. Considerations
include client authentication, client
operating system, network topology,
cost, complexity, and client function. |
|
|
Configure and troubleshoot the client
computer for secure network address
translation (SecureNAT). |
|
Install
the Firewall Client software.
Considerations include the cost and
complexity of deployment.
- Troubleshoot autodetection.
|
|
|
Configure the client computer's Web
browser to use ISA Server as an HTTP
proxy. |
|
|
Monitoring, Managing, and Analyzing ISA
Server Use |
Monitor
security and network usage by using
logging and alerting.
- Configure intrusion detection.
- Configure an alert to send an
e-mail message to an administrator.
- Automate alert configuration.
- Monitor alert status.
|
|
Troubleshoot problems with security and
network usage.
- Detect connections by using
Netstat.
- Test the status of external
ports by using Telnet or Network
Monitor.
|
|
| Analyze
the performance of the ISA Server
computer. Methods include the use of
Performance Monitor, reports, and log
files. |
|
Optimize the performance of the ISA
Server computer. Considerations include
capacity planning, allocation priorities,
and trend analysis.
- Control the total RAM used by
ISA Server for caching.
|
|
Note: This preparation guide is
subject to change at any time without prior
notice and at Microsoft's sole discretion. |
|
|
|
Weitere Informationen zu dieser Prüfung (zur Vereinfachung stammt die
Prüfungsinhalt von dieser Seite)
Stand:
Friday, 28. August 2009/DR.
|