Đang chuẩn bị liên kết để tải về tài liệu:
Microsoft ISA Server 2006 UNLEASHED phần 3

Mặc dù biện pháp phòng ngừa đã được thực hiện trong việc chuẩn bị của cuốn sách này, các nhà xuất bản và tác giả không chịu trách nhiệm cho các lỗi hoặc thiếu sót. Cũng không phải là bất kỳ trách nhiệm nào giả định đối với các thiệt hại từ | 96 CHAPTER 3 Exploring ISA Server 2006 Tools and Concepts Creating Remote Site Networks for Site-to-Site VPNs ISA Server 2006 also includes the capability to create encrypted tunnels between two disparate networks in an organization that are connected through the Internet. This allows for communication across the Internet to be scrambled so that it cannot be read by a third party. ISA provides this capability through its Remote Site VPN capabilities. The Remote Site VPN options available on the Remote Sites tab in the Details pane of the VPN node allow for the creation and configuration of Remote Site networks for site-to-site VPNs. These site-to-site VPN networks enable an organization to connect remote networks together creating one complete routable and logical network such as the one shown in Figure 3.29. FIGURE 3.29 Understanding a site-to-site VPN. When configuring a site-to-site VPN between two ISA Server 2006 systems the option exists to secure the traffic by using the IP Security Protocol IPSec the Layer 2 Tunneling Protocol L2TP over IPSec or the Point-to-Point Tunneling Protocol PPTP depending on the individual organizational security needs. These options are available when running the Create Site-to-Site Connection Wizard that is launched from the Create VPN Site-to-Site Connection link in the Task Pane. In addition to supporting a destination ISA Server 2006 system for site-to-site VPN ISA Server also supports connecting to a third-party VPN gateway that supports the IPSec protocol. This greatly extends ISA s reach because third-party firewall solutions that may already be in place are potential candidates for ISA site-to-site VPNs. Specific configuration information for site-to-site VPNs can be found in Chapter 10. Understanding VPN Quarantine The concept of the VPN quarantine network is fairly straightforward although its implementation is not necessarily so. Essentially VPN quarantine refers to the capability to have ISA place a client that does not