微软最佳产品演示.ppt

RADIUS Authentication Federation through RADIUS proxies Can be used for centralized authentication services Domain membership not required Great for DMZ placement ISA Server 2000 (Old)Networking Model Fixed zones “IN” = LAT “OUT” = DMZ, Internet Packet filter only on external interfaces Single outbound policy NAT always Static filtering from DMZ to Internet ISA Server 2004 Networking Model Any number of networks VPN as network Localhost as network Assigned relationships (NAT/Route) Per-Network policy Packet filtering onall interfaces Support for DoD Any topology, any policy Rule Structure