Surf Control v5.5 manual ISA Server Authentication, ISA Server 2004/2006

Page 17

2

INSTALLATION DECISIONS

ISA Server Authentication

ISA SERVER AUTHENTICATION

You can use ISA Server to authenticate your users, if you don’t want to use NetBIOS or EUM. This procedure is different, depending on whether you are using ISA Server 2000 or 2004 and above.

ISA Server 2000

To configure ISA Server 2000 for User Authentication, perform the steps outlined in the following instructions:

1Open the ISA Management Console from the Start > Programs menu.

Find your machine name within the ISA tree. This will be listed within Internet Security and Acceleration Server\Servers and Arrays.

2Right-click on your machine name and choose Properties from the pop-up menu.

3Select the Outgoing Web Requests tab.

4Select the Ask unauthenticated users for identification check-box.

5In the same dialog double-click your machine name in the Server column of the identification pane. This can be found in the Identification Section. The Add/Edit Listeners dialog is displayed.

6Select the Integrated authentication check box.

7Select the Basic with this domain check-box and click Yes on the ISA Server Configuration pop- up.

8Click the Select Domain dialog. Alternatively, use the Browse button to navigate to your domain.

9Click OK and close all of the open dialogs until you return to the Properties dialog for your ISA Server.

10Click OK on this dialog and select the Save Changes and restart the service(s) radio button on the ISA Server Warning pop-up. Click OK again.

ISA Server 2004/2006

To configure ISA Server 2004 or 2006 for User Authentication, perform the steps outlined in the following instructions:

1Open the ISA Management Console from the Start > Programs > Microsoft ISA Server menu.

Find your machine name within the ISA tree. This will be listed within Internet Security and Acceleration Server 2004.

2Expand the Configuration option.

3Select Networks.

4Select the network you want to monitor and select Edit Selected Network from the Tasks pane.

5From the Network Properties dialog box, select the Web Proxy tab.

6Click Authentication.

7From the Authentication dialog box, select Require all users to authenticate.

8Click OK to close the Authentication dialog box.

9Click OK to close the network Properties dialog box.

12 Starter Guide

SurfControl Web Filter for ISA v5.5

Image 17

Contents SurfControl Web Filter Trademarks SurfControl Web Filter Table of Contents Appendix Chapter HOW WEB Filter and ISA Server Interact Microsoft ISA Server EditionISA Server Hardware Requirements System RequirementsGeneral System Requirements SQL Server Licensing System Requirements Installation Decisions Introduction User Name ResolutionNetwork Considerations Database Options DMZ Recommendations Network Considerations Deployment Recommendations Network Considerations Web Filter communication ports Firewall Port ConfigurationISA Server 2004/2006 ISA Server AuthenticationISA Server EUM User Name ResolutionEUM Agent on Domain Controllers Methods of Installing EUMEUM on Windows 2000 and 2003 domain controllers EUM on Windows NT domain controllersBefore installation Logging Levels NetwareeumIgnoring Users in NetWare EUM Installing the Login Agent on NT Domains EUM Login AgentInstalling the Login Agent on Windows 2000 Login Agent LocationBelow is a copy of the supplied .ini file EumLogin.ini fileEumLogin.ini file sections How to configure the fileAdd an Exception to the Windows Firewall Configuring a logon and logoff scriptSQL Server Express Database ConsiderationsDatabase Platforms SQL Server minimum requirements on Web Filter server SQL ServerReasons to Install SQL Server on a Dedicated Server Database AuthenticationWindows Authentication SQL AuthenticationInternet Threat Database Other ConsiderationsCategorization Options Internet Threat Database Improvement ProgramMail Notifications Remote Administration ClientPrivacy Edition Considerations Remote Administration Client minimum requirementsInstalling Web Filter NetWare client on to the Web Filter server Installation ProcessInstalling SQL Server Express Optional Select I accept the terms of the license agreement Installing Surfcontrol WEB FilterInstalling SurfControl Web Filter Select SurfControl Web Filter Installing SurfControl Web Filter Installing SurfControl Web Filter Changes to the Server Configuring WEB Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Threat Database Internet Threat Database Update screen is displayedAutomatic Database Management screen is displayed Configuring Web Filter Click Add to list Enterprise User Monitoring recommended NetBIOS Configuring Web Filter Configuring Web Filter Installing Service Pack Installing Service Pack Installing Service Pack Further Configuration ALL Installations Post Installation TasksFirewall Policy Rules for ISA Server 2004 Network DependentInstalling the EUM Agent on Your Domain Controllers User Name Resolution Select Domain Controllers screen is displayed Making changes to the EUM Agent configurationUser Name Resolution Installing Netwareeum Installing the EUM Login Agent on Your NetworkUnloading the NetWare EUM Automatically loading the NetWare EUMAdd Web Filter Servers to NetWare EUM Ignored users in NetWare EUMInstall Surfcontrol Report Central Installing the Remote Administration Client Select I accept the terms of the license agreement Select Remote Administration Installing the Remote Administration Client InstallShield Wizard Complete screen is displayed Remote Administration Client and Windows VistaConfigure IE and the VCA Allow Internet Threat Database UpdatesFirewall Policy Rules Allow VCA Spider FunctionalityConfigure a Firewall Policy Rule for the VCA Allow the Remote Administration Client AccessFrom Access Rule Destinations, click Add From the Primary Connection Information screen, click NewEnter 8888 in the Port Range From field Allow Remote Access to Surfcontrol Report CentralSRC Click Apply in the Firewall Policy window Appendix Contact Technical Support Location Contact information Sales and Feedback