SUMMARY: This article describes how to install Internet Security and Acceleration (ISA) Server and configure it as a firewall. To install the ISA Server architecture to Active Directory, you must be an administrator on your local computer. In addition, you must also be members of both Enterprise Admins and Schema Admins. You must install the ISA Server architecture to Active Directory for the entire enterprise or organization.
WARNING: Corporate Initialization Processes Copy the ISA Server Schema Information to Active Directory. Since Active Directory does not support deletion of architectural objects, the company initialization process is irreversible.
How to install ISA Server as a firewall
To install the ISA Server as a firewall, follow these steps:
1. Click Start, click Run, type CMD in the Open Text box, and then click OK.
2. At the command prompt, type PATH / ISA / I386 / MSISAENT.EXE (where path is the path to the ISA Server installation file). Note that the path may be the root folder of the ISA Server CD, or it may be a shared folder containing the ISA Server file on the network.
3. Click Continue in the Microsoft ISA Server installation dialog.
4. Read the End User License Agreement (EULA) and click I agree.
5. Select one of the installation options as needed.
6. Click Firewall Mode, then click Continue.
7. When prompted that you allow the installer to stop Internet Information Services (IIS), click OK.
8. To automatically build an Internet Protocol (IP) address, click the Connect table, click the NIC connected to your server, and then click OK.
9. Click OK to launch the configuration wizard.
How to configure firewall protection
To configure firewall protection, follow these steps:
1. Click Start, point to Programs, point to Microsoft ISA Server, and then click ISA Management.
2. In the console tree, click to expand the server_name / access policy (where server_name is the server's name), right-click the IP packet filter, point to New, and then click Filter.
3. In the IP Packet Filter Name box, type the name of the packet you want to filter, and then click Next.
4. Click Allow or Block to Allow or block the packet, and then click Next.
5. Accept the predefined option and click Next.
6. Click Option to apply the Packet Filter to select the way you want, and then click Next.
7. Click the Remote Computer, and then click Next.
8. Click Finish.
Note: You can also edit other services (such as Dynamic Host Configuration Protocol (DHCP), and Domain Name System (DNS)), the method is to double-click the appropriate service in the configuration box.
