Microsoft KB Archive/891241

= How to create a policy that enables only Web proxy clients in Internet Security and Acceleration Server 2006 or Internet Security and Acceleration Server 2004 =

Article ID: 891241

Article Last Modified on 12/4/2007

-

APPLIES TO


 * Microsoft Internet Security and Acceleration Server 2004 Standard Edition
 * Microsoft Internet Security and Acceleration Server 2004 Enterprise Edition
 * Microsoft Internet Security and Acceleration Server 2006 Standard Edition
 * Microsoft Internet Security and Acceleration Server 2006 Enterprise Edition

-





INTRODUCTION
When you create a report in Microsoft Internet Security and Acceleration (ISA) Server 2006 or in ISA Server 2004, a section of the report, such as the Top Websites section, lists IP addresses. This section should list the corresponding Domain Name System (DNS) names. This behavior may occur when ISA Server is not configured as the Web proxy in client browsers.

This article discusses how to create a policy that enables only Web proxy clients in ISA Server.



MORE INFORMATION
To create a policy that enables only Web proxy clients in ISA Server 2006 or in ISA Server 2004, follow these steps.

Step 1: Create a new outbound protocol
 In ISA Server Management, expand the Firewall Policy node. In the task pane, click the Toolbox tab. Click Protocols, click New, and then click Protocol. In the New Protocol Definition Wizard, type a name for the new protocol. For example, type MyHttp. Click Next. On the Primary Connection Information page, click New. In the New/Edit Protocol Connection dialog box, verify that Protocol type is TCP and that Direction is Outbound. In the From and To boxes, type 80. Click OK, and then click Next. Click Next on the Secondary Connections page.</li> Click Finish.</li> In the ISA Server details pane, click Apply to save the configuration settings.</li></ol>

Step 2: Create a new access rule
<ol style="list-style-type: lower-alpha;"> In ISA Server Management, expand the Firewall Policy node.</li> On the Tasks tab, click Create New Access Rule to start the New Access Rule Wizard.

Note In ISA Server 2006, click Create Access Rule to start the New Access Rule Wizard.</li> On the Welcome to the New Access Rule Wizard page of the New Access Rule Wizard, type a name for the access rule. For example, type Deny HTTP transparent access. Click Next.</li> On the Rule Action page, click Deny, and then click Next.</li> On the Protocols page, click Selected Protocols in the This rule applies to list, and then click Add.</li> In the Add Protocols dialog box, expand the User-Defined node, click MyHttp or the name that you created for the new protocol, click Add, click Close, and then click Next.</li> On the Access Rule Sources page, add the entities that will have only Web proxy access. Click Next.</li> On the Access Rule Destination page, add your Web proxy access destination. Click Next.</li> On the User Sets page, click All Users, click Next, and then click Finish.</li> In ISA Server Management, click Apply to save changes.</li></ol>

Note If there is an existing rule that enables Web proxy clients, you must put the new rule before the existing rule in the ISA Server details pane. To do this, right-click the rule, and then click Move Up. After you move the rule, click Apply to apply the changes to the firewall policy, and then click OK.

Keywords: kbhowto kbisa2006swept KB891241

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.