ISA Server 2000, Windows Server 2003 and NLB are three great tastes that taste great together! The Windows 2003 NLB service brings us true fail over and load balancing for both PPTP and L2TP/IPSec connections. Sound good? You bet! Come inside and see how its done.
The results of the ISA Server 2000 appliance survey are now in! First, I want to thank everyone who participated in the the survey. We had a total of 109 responses in just one week. That's an amazing response rate for a survey that didn't have any "push". Come on inside and find out what happened.
In part 2 of this two part article on PPTP and certificate-based EAP/TLS authentication we go over creating the RRAS policies on the RADIUS server, configuring the ISA firewall/VPN server to use RADIUS and configure the VPN client to use certificate based authentictaion. Come on in and see how its done!
If you have the choice between PPTP and L2TP/IPSec, you should always pick L2TP/IPSec. However, sometimes you just can't use L2TP/IPSec because the VPN clients are behind a NAT device. You can make PPTP almost as secure as L2TP/IPSec by using client certificate authentication. Want to know how to do this? Then come on in!
Join members of the ISA Server product team, who will field your questions on how to use the ISA Server COM object model, provide tips on using the application filter APIs, and guide you in the general use of the SDK.
Should there be an ISA Server 2000 based firewall appliance? This subject comes up from time to time on the ISAServer.org Web boards and mailing list and I think its an excellent idea! Many people won't use ISA Server as a firewall because it doesn't look like a firewall. What if someone could come out with a ISA Server 2000 firewall appliance on a super hardened version of Windows Server 2003? I think it would be a great idea! How about you? You can even win something if you participate.
One question that shows up on a regular basis on the ISA firewall newsgroups, Web boards and mailing list is how to prevent selected sites from being cached. There are a number of reasons why you wouldn’t want to cache a particular site. The content might change on a regular basis, or maybe for security reasons you don’t want any evidence that you visited that site. Such evidence would exist in the cache file.
Do you need to roll out a wireless network segment for anonymous users? Don't want to pay big money for high end WAPs? Don't have the time to learn complex wireless encryption protocols? No problem when you have ISA Server and a trihomed DMZ. Sound interesting? Then check out this article!
Just when I thought there is nothing more to write about ISA server, I was faced with a challenge: 'Get my IPAQ to surf the net behind ISA server!' Well, it was interesting...
Featured Links*
Receive all the latest articles by email!
Receive Real-Time & Monthly ISAserver.org article updates in your mailbox. Enter your email below! Click for Real-Time sample & Monthly sample
Become an ISAserver.org member!
Discuss your ISA Server issues with thousands of other ISA Server experts. Click here to join!