24 Hours of Exchange Server 2007 (Part 15 of 24): Using Internet Security and Acceleration (ISA) Server 2006 for Secure Exchange Server Publishing Harold Wong [email_address] blogs.technet.com/haroldwong Audio: please try Streaming Internet Audio first If that doesn’t work, use: (800) 618-7506: Pin 6405

What We Will Cover Microsoft ® Internet Security and Acceleration (ISA) Server 2006 overview Sending and receiving e-mail Microsoft ® Exchange Server client access

Microsoft ® Internet Security and Acceleration (ISA) Server 2006 overview

Sending and receiving e-mail

Microsoft ® Exchange Server client access

Agenda Review Sending and Receiving E-mail Publishing Exchange Server Client Access

Review

Sending and Receiving E-mail

Publishing Exchange Server Client Access

AntiVirus Features of Exchange Server 2007 Connection filtering Sender filtering Content filtering Attachment filtering Which spam filtering technology played an early role in virus protection?

Connection filtering

Sender filtering

Content filtering

Attachment filtering

AntiVirus Features of Exchange Server 2007 Connection filtering Sender filtering Sender ID filtering Sender reputation filtering Which type of filtering allows the Edge Transport server to look up IP addresses in a list of known virus hosts?

Connection filtering

Sender filtering

Sender ID filtering

Sender reputation filtering

AntiVirus Features of Exchange Server 2007 Connection filtering Sender filtering Content filtering Attachment filtering Which filtering mechanism moves e-mail messages into the spam quarantine mailbox?

Connection filtering

Sender filtering

Content filtering

Attachment filtering

AntiVirus Software and Services Edge Transport server Hub Transport server Mailbox server Desktop client computers Which system should not run e-mail antivirus scanning according to Exchange Server 2007 best practices?

Edge Transport server

Hub Transport server

Mailbox server

Desktop client computers

AntiVirus Software and Services Five Six Seven Eight What is the maximum number of antivirus scanning engines that can be configured for Forefront?

Five

Six

Seven

Eight

AntiVirus Software and Services One Two Three Four What is the minimum number of antivirus engines you can configure when using Microsoft Exchange Hosted Filtering?

One

Two

Three

Four

Agenda Review Introducing ISA Server 2006 Publishing Exchange Server Client Access

Review

Introducing ISA Server 2006

Publishing Exchange Server Client Access

ISA Server 2006 Internet

Authentication Client authentication method Authentication validation method Authentication delegation Access method HTML forms-based authentication Windows (Active Directory ® ) LDAP (Active Directory ® ) RADIUS Basic Negotiate (Kerberos/NTLM) Microsoft ® Office Outlook ® Web Access Outlook Anywhere ActiveSync ® SSL client certificate authentication Windows (Active Directory ® ) Kerberos constrained delegation Outlook Web Access (OWA) ActiveSync ® HTML forms-based authentication RSA SecurID RSA SecurID Outlook Web Access (OWA) ActiveSync ®

Sending and Receiving E-Mail Internet Exchange Server 2007 ISA Server 2006 Internal Client

Introducing ISA Server 2006 Connect and secure remote branches Securely publish content for remote access Prevent employees from sending SPAM Defend against external and internal Web-based threats Q1: Which scenario is not a way ISA Server 2006 can be used to secure communications?

Connect and secure remote branches

Securely publish content for remote access

Prevent employees from sending SPAM

Defend against external and internal Web-based threats

Introducing ISA Server 2006 Outside the firewall Between the Exchange Server and clients At each remote location Between the Internet and the Exchange Server Q2: Where is ISA 2006 located to secure the e-mail communications?

Outside the firewall

Between the Exchange Server and clients

At each remote location

Between the Internet and the Exchange Server

Introducing ISA Server 2006 A DNS resource record of servers accepting incoming e-mail messages A DNS resource record of Internet servers A DNS resource record of e-mail messages in the domain A record on the ISA Server Q3: What is a mail exchanger (MX) record?

A DNS resource record of servers accepting incoming e-mail messages

A DNS resource record of Internet servers

A DNS resource record of e-mail messages in the domain

A record on the ISA Server

Agenda Review Introducing ISA Server 2006 Publishing Exchange Server Client Access

Review

Introducing ISA Server 2006

Publishing Exchange Server Client Access

Client Access Options Outlook Web Access Outlook Anywhere Exchange ActiveSync

Publish Exchange Client Access ISA Configuration Install server certificate Update public DNS Exchange Configuration Enable Outlook Anywhere Install server certificate SSL Require SSL communications Forms-based authentication not selected

Configuring Client Access Configure Exchange Server 2007 Configure ISA Server 2006 Configure DNS demonstration

Configuring Client Access

Configure Exchange Server 2007

Configure ISA Server 2006

Configure DNS

SSL Bridging and Link Translation Link Translation HTTP S SSL Bridging Scenario 1 Scenario 2 HTTP to HTTPS Redirection Mail.Contoso.com SEA-EXC-01.Contoso.com

Publishing Exchange Server 2007 Create a Web listener Create an Exchange Web Client Access publishing rule Enable HTTP to HTTPS redirection demonstration

Publishing Exchange Server 2007

Create a Web listener

Create an Exchange Web Client Access publishing rule

Enable HTTP to HTTPS redirection

Publishing Exchange Client Access Outlook Anywhere Outlook Mobile Access Outlook Web Access Exchange ActiveSync Q1: Which access method is not available in Exchange Server 2007?

Outlook Anywhere

Outlook Mobile Access

Outlook Web Access

Exchange ActiveSync

Publishing Exchange Client Access Four Two Three Ten Q2: How many configuration steps are needed on the Exchange Server for secure publishing?

Four

Two

Three

Ten

Publishing Exchange Client Access At the client At the Exchange Server At the domain controller At the ISA Server Q3: Where is HTTP to HTTPS redirection performed?

At the client

At the Exchange Server

At the domain controller

At the ISA Server

Session Summary Better together Secure e-mail with ISA Server 2006 Provide enhanced user experience

Better together

Secure e-mail with ISA Server 2006

Provide enhanced user experience

Questions and Answers Submit text questions using the “Ask” button. Don’t forget to fill out the survey. For upcoming and previously live webcasts: www.microsoft.com/webcasts Got webcast content ideas? Contact us at: http://go.microsoft.com/fwlink/?LinkId=41781 Today's webcast was presented using Microsoft ® Office Live Meeting. Get a free 14-day trial by visiting: www.microsoft.com/presentlive

Submit text questions using the “Ask” button.

Don’t forget to fill out the survey.

For upcoming and previously live webcasts: www.microsoft.com/webcasts

Got webcast content ideas? Contact us at: http://go.microsoft.com/fwlink/?LinkId=41781

Today's webcast was presented using Microsoft ® Office Live Meeting. Get a free 14-day trial by visiting: www.microsoft.com/presentlive