Microsoft Sharepoint Products and Technologies Resource Kit eBook

678 Part VIII: Securing SharePoint Products and Technologies
Note References throughout this chapter pertain to the advanced view of
the ISA Management console. To display this view, in the View menu click
Advanced.
Creating a Web Publishing Rule
After creating the destination set, the next step is to create a Web publishing rule to
redirect the request from an external client to the portal site on the internal network.
To create a Web publishing rule, do the following:
1. In the ISA Management MMC console, click Publishing, right-click Web Publishing
Rules, select New, and then click Rule.
2. In the Welcome to the New Web Publishing Rule Wizard dialog box, type
a name for the Web publishing rule. Click Next.
3. In the Destination Sets dialog box, from the Apply this rule to list, select
Specified destination set. Then, in the Name list, select the destination set
that you have just created. Click Next.
4. In the Client Type dialog box, select Any request, and then click Next.
5. In the Rule Action dialog box, do the following:
a. Click Redirect the request to this internal Web server (name or IP
address).
b. Type the IP address of the portal site. In our example, the address is
192.168.1.1. Instead of the IP address, you can use an unqualified or a
fully qualified domain name for the portal site, which in our example is
internal. However, you need to make sure that this name is resolved to
a correct internal IP address by the ISA Server. The name can be resolved
either using a hosts file entry or a DNS server.
c. Click Send the original host header to the publishing server instead
of the actual one (specified earlier). This setting preserves the FQDN
specified in the external HTTP request header.
d. Click Next.
6. In the Completing the New Web Publishing Rule Wizard dialog box, click
Finish.
Configuring the Listener for Incoming Web Requests
By default, when you install ISA Server, incoming Web request properties are configured
so that no IP address listens for requests, which means that external clients