How to install a configuration firewall on Win2000

Summary: This article describes how to install an Internet Security and Acceleration (ISA) Server and configure it as a firewall. To install the ISA Server schema to Active Directory, you must be an administrator on the local machine. In addition, you must be a member of both the Enterprise Admins and Schema Admins groups. You must install the ISA Server architecture to Active Directory at one time for the entire enterprise or organization.

Warning: The enterprise initialization process copies ISA Server schema information to Active Directory. Because Active Directory does not support the deletion of schema objects, the enterprise initialization process is irreversible.

How to install ISA Server as a firewall

To install ISA Server as a firewall, follow these steps:

1. Click Start, click Run, in Type cmd in the Open text box and click OK.

2. At the command prompt, type Path\\ISA\\i386\\Msisaent.exe (where Path is the path to the ISA Server installation files). Note that the path may be the root folder of the ISA Server CD or a shared folder on the network that contains ISA Server files.

3. Click Continue in the Microsoft ISA Server Setup dialog box.

4. Read the End User License Agreement (EULA) and click I Agree.

5. Select one of the installation options as needed.

6. Click "Firewall Mode" and click Continue.

7. When prompted to allow the installer to stop Internet Information Services (IIS), click OK.

8. To automatically build an Internet Protocol (IP) address, click Create Table, click the NIC that is connected to your server, and then click OK.

9. Click OK to launch the configuration wizard.

How to configure firewall protection

To configure firewall protection, follow these steps:

1. Click Start, point to Programs, point to Microsoft ISA Server, and then click ISA management.

2. In the console tree, click to expand the server_name\\access policy (where server_name is the name of the server), right-click IP packet filter, point to New, and then click Filter.

3. In the "IP Packet Filter Name" box, type the name of the package you want to filter, and then click Next.

4. Click Allow or Block to allow or block the packet, and then click Next.

5. Accept the predefined options and click Next.

6. Click Options to select the method you want for the application packet filter and click Next.

7. Click the remote computer and click Next.

8. Click Finish.

Note: You can also edit the properties of other services, such as Dynamic Host Configuration Protocol (DHCP) and Domain Name System (DNS), by double-clicking the appropriate service in the configuration box.