ISA Server 2004 UNLEASHED [Electronic resources]

Chapter 7. Deploying ISA Server as a Reverse Proxy in an Existing Firewall DMZ

IN THIS CHAPTER

• ISA Server 2004 as a Security Appliance

• Deploying Unihomed ISA Server 2004 Security Appliances

• Configuring Existing Firewalls to Utilize ISA Server 2004 Reverse Proxy

• Publishing and Securing Services in an Existing DMZ

• Understanding Advanced ISA Security in Enterprise Environments

• Summary

• Best Practices

Although ISA Server can fit many roles within organizations, such as VPN server, Edge Firewall, Content caching device, and many more, it is not always used to fill these roles. In many deployment scenarios, ISA Server 2004 is used solely in its reverse proxy functionality. In these configurations, ISA is typically deployed in the perimeter (DMZ) network of an existing firewall, and protects web and related services such as Exchange Outlook Web Access (OWA) from external intrusion and attack. Although it does not take full advantage of ISA features, this is a perfectly valid deployment scenario, and a relatively common one at that.