digWin: isaguy - submitted http://www.digwin.com/user/isaguy/submitted/hot digWin: Community news sharing for Microsoft Techies. en The Definitive Guide to ISA Firewall Outbound DNS Scenarios Part 2 http://www.digwin.com/the-definitive-guide-to-isa-firewall-outbound-dns-scenarios-part-2 Resolving host names using various ISA Firewall client types OT: MVP Chats with Exchange and Security MVPs this Week http://www.digwin.com/ot-mvp-chats-with-exchange-and-security-mvps-this-week Exchange Server Q&A with the MVP Experts  Exchange MVPs will be on hand to answer your questions about Exchange Server, Outlook and Exchange for Small Business Server.  So if you are thinking of upgrading to Exchange Server 2007 or have questions about Exchange Server 2003 we hope you. ... The Definitive Guide to ISA Firewall Outbound DNS Scenarios Part 1: DNS Resolvers, DNS Forwarders, DNS Caching and Recursion http://www.digwin.com/the-definitive-guide-to-isa-firewall-outbound-dns-scenarios-part-1-dns-resolvers-dns-forwarders-dns-caching-and-recursion How some of the basic components of the DNS system work. The ISA Firewall Heads Up a "Stirling" Package of Security Products http://www.digwin.com/the-isa-firewall-heads-up-a-stirling-package-of-security-products Built under the code-name Stirling, the package of security applications will include Microsoft's Antigen server anti-virus, anti-spam and content filtering technologies -- in the form of its Forefront Security for Exchange Server and Forefront Security for SharePoint products -- along with its Internet Security and Acceleration (ISA) Firewall ... Overview of ISA 2004 SP3 http://www.digwin.com/overview-of-isa-2004-sp3 Service Pack 3 for the 2004 ISA Firewall. Microsoft Targets Endpoint Security http://www.digwin.com/microsoft-targets-endpoint-security "Some use their SSL VPN as a NAC" today, says Joel Sloss, senior product manager for ISA Server. Microsoft has already released the technical beta version of its latest SSL VPN product, Intelligent Application Gateway (IAG) 2007 SP1, he notes. SSL VPNs are the precursors to NAC, Microsoft execs say. "The first place you saw 'NAC' was in remote ... Using the ISA 2004 Firewall's Diagnostic Log Viewer http://www.digwin.com/using-the-isa-2004-firewalls-diagnostic-log-viewer How to use the Diagnostic Logging Viewer to help troubleshoot ISA Firewall issues. Browne Jacobson Law Firm Deploys IAG 2007 for Secure Remote Access http://www.digwin.com/browne-jacobson-law-firm-deploys-iag-2007-for-secure-remote-access Midlands law firm Browne Jacobson has implemented remote working technology to enable its lawyers to respond more easily to clients. Peter Birley, IT director at Browne Jacobson, said: "We have invested in what has now become the Microsoft Intelligent Application Gateway (IAG 2007) that gives secure access from any Internet Explorer PC, whether at ... Help for the ISA Firewall RPC Protocol Challenged http://www.digwin.com/help-for-the-isa-firewall-rpc-protocol-challenged The ISA Firewall's RPC filter is one of the nice differentiators that makes the ISA Firewall most secure and more flexible than just about any other firewall on the market today. However, there are some scenarios where that RPC filter can drive you crazy! For example, have you ever tried to use the Certificates MMC from the ISA Firewall to obtain a ... Terminating VPN Connections in Front of the ISA Firewall (Part 3) http://www.digwin.com/terminating-vpn-connections-in-front-of-the-isa-firewall-part-3 The policies and procedures involved with terminating a VPN client connection in front of the ISA Firewall. Microsoft enters WAN optimization market with Packeteer http://www.digwin.com/microsoft-enters-wan-optimization-market-with-packeteer Microsoft has taken another step onto Cisco's - and other network equipment makers' - turf, by teaming up with WAN optimization and application acceleration specialist, Packeteer, to incorporate Packeteer's functionality into Windows-based servers. ... Terminating VPN Connections in Front of the ISA Firewall (Part 2) http://www.digwin.com/terminating-vpn-connections-in-front-of-the-isa-firewall-part-2 How to terminate remote access VPN client connections at a device in front of the ISA firewall. ISA 2006 Firewall Events Help Files Available for Download http://www.digwin.com/isa-2006-firewall-events-help-files-available-for-download This Help file contains information about common events generated by ISA Server 2006, including detailed message explanations, recommended user actions, and links to additional support and resources. Download at: <a href="http://www.microsoft.com/technet/isa/2006/downloads/events.mspx">http://www.microsoft.com/technet/isa/2006/downloads/events.mspx</a> HTH, Tom Thomas W Shinder, M.D. Site: <a href="http://www.isaserver.org">www.isaserver.org</a> Blog: ... ISA Server 2004 Service Pack 3 - Rollback failure and Temporary resolution http://www.digwin.com/isa-server-2004-service-pack-3-rollback-failure-and-temporary-resolution Some people have mentioned problems with installing Service Pack 3 on the ISA 2004 Firewall. If you're one of these people, you should check out this article https://blogs.technet.com/isablog/archive/2007/05/03/isa-server-2004-service-pack-3-rollback-failure-and-temporary-resolution.aspx on the ISA Server Product Team Blog. Jim Harrison provides ... Service Pack 3 Released for the ISA Firewall http://www.digwin.com/service-pack-3-released-for-the-isa-firewall Internet Security and Acceleration (ISA) Server 2004 SP3 provides the latest updates to ISA Server 2004, with increased security, new troubleshooting tools, and improved log viewer functionality. This service pack also adds support for publishing Microsoft Exchange Server 2007 with ISA Server 2004. ... Terminating a VPN Connection in Front of the ISA Firewall (Part 1) http://www.digwin.com/terminating-a-vpn-connection-in-front-of-the-isa-firewall-part-1 Deployment options for introducing an ISA firewall into an established firewall and remote access VPN infrastructure. Update on ISA Firewall Security Design Article on TechNet Site http://www.digwin.com/update-on-isa-firewall-security-design-article-on-technet-site Yesterday I pointed out that Chris Avis, a TechNet Security Evangelist, mentioned on his blog site that the ISA Firewall was designed to not be a member of the domain. I took great umbrage with that remark because we've spent a lot of time over the last several years trying to debunk the myth that the ISA Firewall shouldn't be a domain member. ... Serious Error Regarding ISA Firewall Security Design Made at Microsoft TechNet Blog Site http://www.digwin.com/serious-error-regarding-isa-firewall-security-design-made-at-microsoft-technet-blog-site I tried to post a response to this article http://blogs.technet.com/chrisavis/archive/2007/04/27/isa-2006-and-computer-sets.aspx on the Microsoft TechNet blog site but it wouldn't allow me to post. So, I'll post my response to Chris Avis' ISA Firewall article here. =============================================== Hi Chris, You made a very serious ... New Hotfix Aimed at Increasing ISA Firewall Stability http://www.digwin.com/new-hotfix-aimed-at-increasing-isa-firewall-stability Issues that are fixed in this hotfix package 933716 (<a href="http://support.microsoft.com/kb/933716/">http://support.microsoft.com/kb/933716/</a>) The Web Proxy filter in ISA Server 2006 logs requests that reference an incorrect access rule when you use overlapped HTTP protocols 933617 (<a href="http://support.microsoft.com/kb/933617/">http://support.microsoft.com/kb/933617/</a>) ISA Server 2006 display. ... Enabling Remote Access VPN Clients Access to the Branch Office over a Site to Site VPN http://www.digwin.com/enabling-remote-access-vpn-clients-access-to-the-branch-office-over-a-site-to-site-vpn How to enable remote access VPN client connections to branch office networks over the site to site VPN. Web Proxy Chaining as a Form of Network Routing http://www.digwin.com/web-proxy-chaining-as-a-form-of-network-routing The basics of Web proxy chaining. Releasing VPN Quarantine Users with VPN-Q 2006 http://www.digwin.com/releasing-vpn-quarantine-users-with-vpnq-2006 How VPN-Q 2006 fills an important gap in the ISA Server 2004/2006 Quarantine space. Creating a Site to Site VPN using the ISA 2006 Firewall Branch Office Connection Wizard (Part 6) http://www.digwin.com/creating-a-site-to-site-vpn-using-the-isa-2006-firewall-branch-office-connection-wizard-part-6 Beginning the advanced configuration settings to be used to join a branch office domain controller to a main office domain controller for intradomain communications. Creating a Site to Site VPN using the ISA 2006 Firewall Branch Office Connection Wizard (Part 7) http://www.digwin.com/creating-a-site-to-site-vpn-using-the-isa-2006-firewall-branch-office-connection-wizard-part-7 A look at some of the effects RPC communications have through the ISA Firewall. Providing Branch Office Access to the ISA 2006 Firewall's Web Proxy Listener http://www.digwin.com/providing-branch-office-access-to-the-isa-2006-firewalls-web-proxy-listener How to configure the ISA firewall to support remote host connections to its Web proxy listener. Advanced ISA Firewall Configuration: "Network Behind a Network" Scenarios http://www.digwin.com/advanced-isa-firewall-configuration-network-behind-a-network-scenarios How the ISA Firewall's multi-networking features work in a network with an ISA Firewall Network scenario. Configuring the ISA Server 2006 HTTP Filter http://www.digwin.com/configuring-the-isa-server-2006-http-filter An overview of the ISA Server 2006 HTTP Filter and how to use this HTTP Filter to protect your internal network. HP ProLiant DL320 - Voted ISAserver.org Readers' Choice Award Winner - Hardware Appliances http://www.digwin.com/hp-proliant-dl320-voted-isaserverorg-readers-choice-award-winner-hardware-appliances HP ProLiant DL320 was selected the winner in the Hardware Appliances category of the ISAserver.org Readers' Choice awards. Celestix MSA Security Appliances and Network Engines NS Series were runner-up and second runner-up respectively. The SecureNAT (SecureNET) Client Guide to the Universe http://www.digwin.com/the-securenat-securenet-client-guide-to-the-universe A review of the SecureNAT client and how the SecureNET client can be used in an ISA Firewall environment. Offline Rule Bases and Objects http://www.digwin.com/offline-rule-bases-and-objects How to build offline Rule Bases and Objects and import and export them.