Microsoft Sharepoint Products and Technologies Resource Kit eBook

Chapter 25: Firewall Considerations for SharePoint Portal Server Deployments 689
1. In the ISA Management console, click Servers and Arrays, click your server
name, click Publishing, and then click Web Publishing Rules.
2. Right-click the Web publishing rule you would like to configure, select Properties,
and then click the Action tab.
3. On the Action tab, select the Allow delegation of basic authentication credentials
check box. This check box is available only with Feature Pack 1.
Click OK.
More Info For additional information on the ISA Server 2000 Basic
authentication credentials delegation, refer to the Feature Pack 1 product
documentation.
ISA Server 2000 Server Publishing
In general, it is not recommended to use ISA Server 2000 Server publishing for HTTP
servers. Server publishing is used for other protocols such as File Transfer Protocol
(FTP), and other servers such as SQL Server. When Server publishing rules are used
instead of Web publishing rules, the ISA Server firewall does not examine HTTP traffic
before forwarding it to the internal SharePoint Portal Server. To examine the
HTTP traffic, ISA Server uses Web application filters that require the Web proxy service.
However, the Web proxy service is bypassed by ISA Server 2000 Server publishing.
With Server publishing, SSL-encrypted HTTP traffic is forwarded to the
internal server without being inspected first by the firewall. Server publishing does
not support link translation and Basic credentials authentication. With Server publishing,
the requests are never serviced from the ISA Server cache. Basically, Server
publishing provides packet filtering and secure NAT.
There are a limited number of scenarios in which you might need to consider
using Server publishing to make a portal site available externally. Sometimes,
administrators use Server publishing instead of Web publishing to be able see the
actual source IP address in the IIS logs on the computer running SharePoint Portal
Server. When you publish a Web server using a Web publishing rule, the source IP
address that appears in your Web server log files is the internal address of the computer
running ISA Server. When you use a Server publishing rule, the actual source
IP address of the request is shown in the IIS logs.
In other scenarios, Server publishing is used in combination with Web publishing.
For example, consider a scenario in which you have a single ISA Server 2000
server that is used to provide access to two portal sites, as shown in Figure 25-4.
One site is an extranet site where Basic authentication is required. This site is protected
by SSL, and Basic authentication delegation is configured on the ISA server.