Surf Control v5.5 manual Microsoft ISA Server Edition, HOW WEB Filter and ISA Server Interact

Page 7

1

INTRODUCTION

Microsoft ISA Server Edition

MICROSOFT ISA SERVER EDITION

SurfControl Web Filter for ISA integrates fully with Microsoft ISA server, in order to prevent web based threats. This edition of Web Filter also includes an anti-virus agent, which prevents infectious content by filtering viruses at the Web gateway.

HOW WEB FILTER AND ISA SERVER INTERACT

1A client makes a request via the ISA Server for the resource.

2The ISA Server challenges for authentication.

3The client negotiates authentication parameters and requests the resource again.

4The ISA Server connects to the target server and requests the resource.

5Data starts coming down from the target servers.

6If the policy is set to block this request, Web Filter resets this connection mid-transmission.

7If the request was blocked, the denied page is returned to the user.

Depending on whether you are using ISA Server 2000, 2004 or 2006, SurfControl Web Filter has the following features:

ISA SERVER 2000

Table 1-1Features of SurfControl Web Filter for Microsoft ISA Server 2000

Feature

Description

 

 

Quick and easy to configure

The Web Filter Configuration Wizard guides you through the

 

configuration process, so that you can begin filtering Web content as

 

soon as possible.

 

 

Seamlessly integrates with ISA as an

You can install Web Filter directly on to an existing ISA Server, for an

ISAPI filter

easy and secure filtering solution.

 

 

Ideal for implementing Acceptable Use

It’s easy to set up and maintain powerful, flexible rules that enforce your

Policies

Acceptable Use Policy.

 

 

Transparent to the desktop user

Users in your organization know immediately if they have browsed to a

 

page that breaches your Acceptable Use Policy.

 

 

 

 

ISA SERVER 2004 AND 2006

In addition to the above features, SurfControl Web Filter for ISA Server 2004 and 2006 offers the addition of an application filter as part of the Firewall Service. This allows the management and reporting of protocols beyond HTTP, HTTPS and FTP when using the ISA Server firewall.

2

Starter Guide

SurfControl Web Filter for ISA v5.5

Image 7
Contents SurfControl Web Filter Trademarks SurfControl Web Filter Table of Contents Appendix Chapter ISA Server Microsoft ISA Server EditionHOW WEB Filter and ISA Server Interact Hardware Requirements System RequirementsGeneral System Requirements SQL Server Licensing System Requirements Installation Decisions Database Options User Name ResolutionIntroduction Network ConsiderationsDeployment Recommendations Network ConsiderationsDMZ Recommendations Network Considerations Web Filter communication ports Firewall Port ConfigurationISA Server ISA Server AuthenticationISA Server 2004/2006 EUM User Name ResolutionEUM on Windows NT domain controllers Methods of Installing EUMEUM Agent on Domain Controllers EUM on Windows 2000 and 2003 domain controllersBefore installation Ignoring Users in NetWare EUM NetwareeumLogging Levels Login Agent Location EUM Login AgentInstalling the Login Agent on NT Domains Installing the Login Agent on Windows 2000Below is a copy of the supplied .ini file EumLogin.ini fileEumLogin.ini file sections How to configure the fileAdd an Exception to the Windows Firewall Configuring a logon and logoff scriptDatabase Platforms Database ConsiderationsSQL Server Express SQL Server minimum requirements on Web Filter server SQL ServerSQL Authentication Database AuthenticationReasons to Install SQL Server on a Dedicated Server Windows AuthenticationInternet Threat Database Improvement Program Other ConsiderationsInternet Threat Database Categorization OptionsMail Notifications Remote Administration ClientPrivacy Edition Considerations Remote Administration Client minimum requirementsInstalling Web Filter NetWare client on to the Web Filter server Installation ProcessInstalling SQL Server Express Optional Select I accept the terms of the license agreement Installing Surfcontrol WEB FilterInstalling SurfControl Web Filter Select SurfControl Web Filter Installing SurfControl Web Filter Installing SurfControl Web Filter Changes to the Server Configuring WEB Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Automatic Database Management screen is displayed Internet Threat Database Update screen is displayedThreat Database Configuring Web Filter Click Add to list Enterprise User Monitoring recommended NetBIOS Configuring Web Filter Configuring Web Filter Installing Service Pack Installing Service Pack Installing Service Pack Further Configuration Network Dependent Post Installation TasksALL Installations Firewall Policy Rules for ISA Server 2004Installing the EUM Agent on Your Domain Controllers User Name Resolution Select Domain Controllers screen is displayed Making changes to the EUM Agent configurationUser Name Resolution Installing Netwareeum Installing the EUM Login Agent on Your NetworkIgnored users in NetWare EUM Automatically loading the NetWare EUMUnloading the NetWare EUM Add Web Filter Servers to NetWare EUMInstall Surfcontrol Report Central Installing the Remote Administration Client Select I accept the terms of the license agreement Select Remote Administration Installing the Remote Administration Client InstallShield Wizard Complete screen is displayed Remote Administration Client and Windows VistaAllow VCA Spider Functionality Allow Internet Threat Database UpdatesConfigure IE and the VCA Firewall Policy RulesFrom the Primary Connection Information screen, click New Allow the Remote Administration Client AccessConfigure a Firewall Policy Rule for the VCA From Access Rule Destinations, click AddSRC Allow Remote Access to Surfcontrol Report CentralEnter 8888 in the Port Range From field Click Apply in the Firewall Policy window Appendix Contact Technical Support Location Contact information Sales and Feedback