ISA Server Installation step by step

Embed the ISA Server 2004 Enterprise CD and take after the establishment directions. You should introduce Configuration Storage Server. This will introduce an ADAM-Instance on this PC which will be utilized to store the arrangement of ISA Server Arrays. ISA Server Array Members will interface with the Configuration Storage Server to get the arrangement.

Figure 1: Installation of a Configuration Storage Server

On the off chance that you pick Install Configuration Storage Server you can find in Figure 2 that lone the ISA Management Option and the Configuration Storage Server will be introduced.

Figure 2: Component Selection

On the following page we should choose make another ISA Server venture (Figure 3). This design choice makes another ISA Server Enterprise amid the establishment.

Figure 3: Create a new ISA Server Enterprise

Figure 4 demonstrates a notice message that Microsoft suggests just conveying a solitary Enterprise in your Organization. Different Enterprises could be difficult to oversee. You can send various Arrays inside one ISA Server Enterprise.

Figure 4: Warning message when you install a new ISA Enterprise

The following stage (Figure 5) is to name the new ISA Server Enterprise and enter a depiction for the new Enterprise.

Figure 5: Enter a name and description for the new Enterprise

In the event that you are utilizing ISA Server 2004 Enterprise in a solitary area or in areas with put stock seeing someone, you should pick the Setup Option I am conveying in a solitary space or in spaces with confide seeing someone. ISA Server will utilize Windows verification for confirmation purposes. On the off chance that you are utilizing ISA Servers and Configuration Storage Servers in various spaces without confide in relationship or in a workgroup organization, you should utilize declarations to set up a protected correspondence channel for validation purposes.


Attention:Keep as a main priority that when you send ISA Server 2004 Enterprise in a workgroup domain you can utilize just a single Configuration Storage Server. The accompanying connections could likewise discover your advantage when you convey ISA Server in a workgroup:

In the event that you are utilizing testaments in a workgroup organization you should utilize this instrument to refresh ADAM account settings with the goal that they don't lapse.

http://www.microsoft.com/downloads/details.aspx?FamilyID=1cbac3e5-acac-4613-9860-e1b760b9434f&DisplayLang=en

The second device is ISACertTool.exe that encourages you to do the accompanying:

� Install a server testament on the Configuration Storage server.

� Install a root testament on each exhibit part to demonstrate that it believes the Certification Authority that issued the server authentication

http://www.microsoft.com/downloads/details.aspx?FamilyId=F8F60164-C5A5-4716-9FF4-2D56C86506C3&displaylang=en

Figure 6: Setup the ISA Server 2004 Deployment method

Subsequent to completing ISA Server 2004 setup, the setup opens as a last stride, a site from the ISA Server 2004 establishment catalog, which will manage you through extra strides how to secure your Windows/ISA Server establishment.

I additionally suggest perusing the accompanying articles from the Microsoft site:

Solidifying the Windows Infrastructure on the ISA Server 2004 Computer

http://www.microsoft.com/technet/prodtechnol/isa/2004/design/hardeningwindows.mspx

ISA Server 2004 Security Hardening Guide

http://www.microsoft.com/technet/prodtechnol/isa/2004/design/securityhardeningguide.mspx

Figure 7: Hardening the Windows Server / ISA Server infrastructure

Before we will introduce the ISA Server 2004 Array individuals, we should make another ISA Server 2004 Array. To make another ISA Server Array begin the ISA Server 2004 administration comfort on the Configuration Storage Server, explore to Arrays and make another ISA Server Array.

Figure 8: Create a new ISA Server Array

We will name the Array MainArray (Figure 9).

Figure 9: Name the ISA Server 2004 Array

The following page (Figure 10) requests that you enter the ISA Server Arrays DNS name. You should enter a DNS accommodate FQDN (Fully Qualified Domain Name). You should make a relating A-record in DNS, with the goal that Firewallclients and Webproxyclients can resolve the Name accurately. On the off chance that you are utilizing NLB you should enter the VIP (VirtualIP) as the IP address in DNS. I will give you more data about executing NLB in another article. We will enter the Array's DNS name MainArray.NHTECH.com.

Figure 10: ISA Server Array's DNS name

The subsequent stage is to indicate which Enterprise Policy to apply to this Array. Since we don't make another Policy, we should utilize the Default Policy (Figure 11). It is conceivable to make new Policies each time and connect this new Policy with an Array after establishment. I will demonstrate to you generally accepted methods to do this in another article on www.isaserver.org.

Figure 11: Select the ISA Server Enterprise Policy for the new Array

In the accompanying picture you can choose the sorts of Array Firewall Policy decides that can be made for this Array (Figure 12). This is an incredible alternative to confine the production of govern sort at Array level.

Figure 12: Select the types of Array Firewall Policy rules that can be created for this Array

In the wake of perusing the rundown of the new Array Wizard click Finish. ISA Server now makes the new Array. This errand can be tedious (Figure 13).

Figure 13: Creating the new Array

Snap Apply (Figure 14) and you have effectively completed the new Array establishment.

Figure 14: Click Apply to save the changes and update the configuration

As you most likely are aware, ISA Server 2004 utilizations System Policies which permit a few interchanges between ISA Server, Active Directory Servers, DNS Servers, DHCP and some more. You should change the System Policy to permit the ISA Server 2004 Array Members to get to the Configuration Storage Server. In the event that you need to find out about System Policies, read Tom Shinders article "The ISA Firewall's Default Post Installation System Policy and Configuration" at the accompanying site: http://www.isaserver.org/articles/2004systempolicy.html.

Figure 15: Enable Remote Configuration Storage Server Access

You can discover these settings in the System Policy Editor under Configuration Storage Server � Local Configuration Storage Server Access. Snap Enable (Figure 15).

Snap From (Figure 16) in the System Policy Editor � select Managed ISA Server Computers and snap Add to enter the names and IP-addresses from the two ISA Server 2004 Enterprise Array individuals.

Figure 16: Enter the name and IP-addresses for the Managed ISA Server Computers