Secure your network with stateful inspection and application layer filtering from an ISA 2004 firewall
Unlike traditional packet filter based stateful hardware firewalls, the ISA firewall is able to perform stateful application layer inspection, meaning it fully inspects the communication streams passed by the ISA firewall from one network to another. It analyzes and makes decisions on all layers of the communication, including the most important layer, the application layer. In this sample chapter from How to Cheat at Configuring ISA Server 2004, study the ISA firewall's application layer filtering feature set. Explore two types of application filters employed by the ISA firewall: access filters and security filters, then investigate the ISA firewall's intrusion detection and prevention mechanisms. Finally, learn about common network layer attacks that can be launched against the ISA firewall and how the ISA firewall protects against them.
Title: How to Cheat at Configuring ISA Server 2004
Published: February 2006
Authors: Dr. Thomas W. Shinder, Debra Littlejohn Shinder
Chapter: Chapter 7: Stateful Inspection and Application Layer Filtering
Published by Syngress Publishing