enable smtp content filtering:
-----------------------------
install isa h.323 Gatekeeper service+message screener.
add gatekeeper|expand call routing click e-mail address rules|add
routing rule|name it routing rule1| add dns and ensure that route
all e-mail address that include... is selected|at destination type
page click registration database|next|finish.
open netmeeting:at tools menu, options,general tab| advanced
calling|select use gatekeeper to place calls | enter the server full
dns name|select log on using my account name (administrator).
at the isa click active terminals-there u can c the registration
status of administrator.
monitoring & reporting: configuring alerts:
**********************--------------------
at access policy|ip packet filters|properties|at general tab select
intrusion detection|on intrusion detection tab select port scan
check box|on line detect after attacks on well known ports type 3|
on detect after attack on ports also :3.ok
-at isa,monitoring configuration click right alerts|new alert name:
port scan detected|in the event list click intrusion detected at
additional condition click well known port scan attack|at action
page select report the event to windows 2000 log|finish.
right click port scan detected properties|evevt tab, click after
manual reset or alert.ok.
(now because this alert conflict with a buid in alert, we will disable
it: click intrusion detected- disable).
creating and viewing report:
---------------------------
at monitoring & configuration|add new report job name: report1-on general
tab|choose period|on schedualen tab-immidiatly|on credentials
tab-username+pass+doman|ok.
-under monitoring expand reports than click summary| action-refresh|
double click report1 to c the graph.
monitoring client computer connections:
--------------------------------------
from administrative tools menu open performance, click add|choose your
server than from the preformance object list click isa server web proxy
service| choose these counters: Upsteam bytes total/sec,http requests,
current users,cache hit ratio(%). at the explorer surf to the server.
at the performance window click frease display (the red X).
|