 |
 |
|
August 27, 2004Locking down OWA with ISA 2000Sorry that I have been so quiet lately. Been emmersed in so much work it isn't funny. Top that off, I took some time this week to work on some personal development and do a leadership and skills training workshop which has had me swamped. In the little free time I do find I have been spending some time getting to understand the relationship with ISA and SBS, and came across a REALLY good set of articles showing how to configure ISA to pre-authenticate connections BEFORE even getting to try any type of interaction with the IIS web server, and OWA. In other words, you can filter out a lot of anonymous attacks by authenticating users before they can actually send tainted data towards OWA. A really good strategy. The articles are based on having a dedicated ISA server on a stand alone box in front of the Exchange server, but of course my limitation of having everything on one box for SBS makes that kinda of difficult. None-the-less, it was still a very insightful set of articles. Well worth reviewing if you are new to this sort of stuff. The articles are broken down into five distinct components:
Anyways, enjoy if you haven't seen these articles yet. Happy Reading! Posted by SilverStr at August 27, 2004 12:55 AM | TrackBackComments
Rule no. 1 in SBSland is to ensure that the documentation you are reading is SBSized. [you already figured out that what you are reading is not] Rule no. 2 in SBSland is to begin your journey by running the CEICW wizard. Configure email and internet access. Let that "do it's thang", then you start messin' with it, tweaking, adjusting, ACLing, wacking off lanman... etc..etc...etc. Start with the foundations. We are a compromise between business needs and security. As to going with ISA 2004, it does additional features that will do a nicer job on a DC. That said, let me point to my latest post: ISA 2004: Stupid question... what is ISA? Posted by: Arcterex at August 27, 2004 11:58 PMMicrosoft's Internet Security and Acceleration Server. Think strong firewall that is application aware and can work with proxy, cache and VPN support. http://www.microsoft.com/isaserver/ Posted by: SilverStr at August 28, 2004 12:10 AM |
 
My 5 Favorite Books
Writing Secure Code
Secure Programming Cookbook Security Engineering Secure Coding Principles & Practice Inside the Security Mind
My 5 Favorite Papers
Smashing the Stack
Penetration Studies Covert Channel Analysis of Trusted Systems DoD Trusted Computer System Evaluation Criteria NSA Security Recommendation Guides
Archives
December 2005
November 2005 October 2005 September 2005 August 2005 July 2005 June 2005 May 2005 April 2005 March 2005 February 2005 January 2005 December 2004 November 2004 October 2004 September 2004 August 2004 July 2004 June 2004 May 2004 April 2004 March 2004 February 2004 January 2004 December 2003 November 2003 October 2003 September 2003 August 2003 July 2003 June 2003 May 2003 April 2003 March 2003 February 2003 January 2003 December 2002 November 2002 October 2002 September 2002 August 2002 July 2002 |
|
