Review

Under which of the following conditions will John be able to access the Internet through Internet Security and Acceleration Server 2000 (ISA Server)? Assume that the default Allow site and content rule is in place, and that no other rules or filters have been configured.
You configure a protocol rule to allow access to all IP traffic for any request. You then configure a second protocol rule denying access to all IP traffic for user John. You have not modified the default array properties for outgoing Web requests. Will John be able to access the Internet through a Web browser on a secure network address translation (SecureNAT) client?
You configure a protocol rule to allow access to all IP traffic for all members of the Domain Users group. John is a member of the group Domain Guests (and not Domain Users), and the default array properties for outgoing Web requests have not been changed. Will John be able to access the Internet through a Web browser on a secure network address translation (SecureNAT) client?
You configure a protocol rule to allow access to all IP traffic for any request. You then configure a second protocol rule denying access to all IP traffic for Domain Guests. John is a member (only) of the group Domain Guests, and the default array properties for outgoing Web requests have been changed to require identification for unauthenticated users. Will he be able to access the Internet through a Web browser on a Firewall client?
You configure a protocol rule to allow access to all IP traffic for all members of the group Domain Users. John is a member of the group Domain Users. Will he be able to establish an FTP connection across the Internet from a command prompt on a computer not configured with a Firewall client?


What protective measure can you take if you detect an IP half scan attack originating from a certain network ID?
What are three conditions under which you need to create IP packet filters instead of protocol rule or site and content rules to allow Internet connectivity?
You have configured a site and content rule that denies access to two destinations: ftp://movies.acme.com/clips and ftp://radio.acme.com. Assuming that your users have permissions to download files from the FTP site, will your users be able to download content through FTP clients on ftp://movies.acme.com? Will they be able to download content from ftp://radio.acme.com/songs?
If you wanted to block a group of Windows 2000 users from downloading all audio content during 10 a.m. and 4 p.m. weekdays, how many policy elements would you need to create?