In this screen select “Place all certificate in the following Store” an click next About Microsoft® Internet Security and Acceleration (ISA) Server 2006 It is the security gateway that helps protect your mission-critical applications from Internet-based threats. ISA Server enables your business to do more, with secure access to Microsoft applications and data. Secure your Microsoft application infrastructure by protecting your corporate applications, services, and data across all network layers with stateful packet inspection, application-layer filtering, and comprehensive publishing tools. Streamline your network with simplified administrator and user experiences through a unified firewall and virtual private network (VPN) architecture, which includes Web caching and bandwidth management, an optimized firewall filtering engine, and comprehensive access controls. Safeguard your information technology environment to reduce security risks and costs, and help eliminate the effects that malicious software and attackers have on your business, by using comprehensive tools for scanning and blocking harmful content, files, and Web sites. Steps to be performed on the ISA Server ISA Needs to have 2 NIC , internal and external Internal IP is 172.22.243.170 External IP is 13.0.0.5 (is it can be anything make sure the client also has the same range eg.13.0.0.2) Steps to Install ISA 2006 Standard edition Copy the installation source to the ISA server locally Double click on the ISAautorun.exe and continue the wizard as seen below
Server Connection Security Choose the type of connections ISA Server will establish with the published server or server farm Note: For HTTPS-to-HTTP bridging (SSL Termination), you should select Use non-secured connections to connect the published Web server or server farm. In the next screen provide the Internal Publishing Details Internal Publishing Details Internal site name Type : paulpa.soccer.com As per our example Important: The internal site name must the name of the server certificate that is installed on the internal Web servers. Note: If you cannot properly resolve the internal site name, you can select Use a computer name or IP address to connect to the published server, and then type the required IP address or name that is resolvable by the ISA Server computer. In the next screen provide the Public Name Details Public Name Details Accept requests for Public name This domain name (type below) Type paulpa.soccer.com (as per our example) In the next screen select the Web Listener. This will let us to configure how the external users will browse the SharePoint site in our case it would be Since it’s a new configuration we will create a new web listener by clicking on the NEW tab Type the name of the web listener In the next screen select the “Client Connection Security”
Client Connection Security Connection type, either SSL or not SSL. Select Require SSL secured connections with clients. In the next screen select the “Web Listener IP Addresses” Web Listener IP Addresses Listen for incoming Web requests on networks ISA Server will compress content Select IP Addresses Select the External network. Check box should be selected (default). In the window click on “Select IP Adresses” External Network Listener IP Selection Listen for requests on Available IP Addresses Select Specified IP addresses on the ISA Server computer in the selected network. Select 13.0.0.5 and click Add. In the next screen select the Listener SSL Certificates A Web listener can use a single certificate for all of its IP addresses, or a different certificate for each IP address. Select Use a single certificate for this web listener Click on the Select Certificate as below Select Certificate Select a certificate Select the certificate issued to paulpa.soccer.com and click Select. The certificate must be installed before running the wizard. Click on paulpa.soccer.com and click on Select button Click on Next and select Authentication Settings
Authentication Settings Specify how clients will provide credentials to ISA Server Select how ISA Server will validate client credentials Select HTML Form Authentication. Select Windows (Active Directory) In the next screen Single Sign On Settings Enable SSO for Web sites published with this Web listener SSO domain name Uncheck as we do not have SSO Configured in this scenario In the next screen Completing the New Web Listener Wizard Review settings. Click Back to make changes or Finish to complete the wizard Click on Finish and you would see the details as below Click next and select Authentication Delegation Authentication Delegation Select the method used by ISA Server to authenticate to the published Web server Select NTLM authentication. In the next screen Alternate Access Mapping Configuration Alternate Access Mapping Configuration For complete integration and functionality, you need to configure alternate access mapping on the published SharePoint site. Select SharePoint AAM is already configured on the SharePoint server. Since we are using HH MODE we do not have an option to configure AAM’s for each web application and it completely depends on the link translation feature of ISA In the next screen of User Sets