The Best Damn Firewall Book Period

In this chapter, we focused on issues related to planning and implementing the installation of ISA Server. We emphasized the critical importance of planning your ISA Server design before beginning the installation in order to prevent unexpected and potentially harmful results after the ISA Server installation is complete.

The following checklist will help guide you through the installation process:

• Check system requirements and ensure that you have the proper hardware and operating system.

• Review key concepts about ISA Server:

  • Firewall and security functions

  • Publishing

  • Caching

• Determine if you will install ISA Server as a stand-alone or array member.

• Determine the mode in which you will install ISA Server.

• Confirm that the routing table on the machine reflects the internal network infrastructure and contains all routes to networks within your internal network.

• Secure the network interfaces by disabling NetBIOS over TCP, the Microsoft client, and file and printer sharing for Microsoft networks.

• Confirm that no "stray" ports are opened by using the netstat –na command. This command lists ports that are connected or listening on your computer.

• Make the appropriate changes to your IIS installation, if you have one on your server. Either move the IIS services to another machine or make the port configuration changes, as discussed in this chapter.

• If you are installing in cache or integrated mode, verify that the computer has a Windows 2000 NTFS (NTFS 5.0) partition.

• If you are installing the first array member, initialize the enterprise.

• Review the installation process and ensure that you have all the necessary information (CD key, domain membership information) that will be requested during installation.

• Confirm connectivity to a domain controller if you are creating an enterprise array.

• Ensure that you have the appropriate permissions.

• Start the ISA Server Setup program.

The ISA Server installation process is relatively straightforward, but you can help prevent any unexpected problems during installation by proper planning—which includes backing up your Proxy Server 2.0 files if you are upgrading.