Open “Microsoft Internet Security and Acceleration Server 2006”.

Right click “Firewall Policy” – Click “New” – Then “Access Rule…”

You can Call the rule what ever you like. I recommend calling it something useful like “Internet Browsing”. Click “Next”

You are wanting to “Allow” outgoing traffic.

You now want to select protocols. Because we want to enable web browsing for domain computers we want to enable “HTTP” , “HTTPS” , and “DNS”. To select the protocols you want to click “Add”.

Select “HTTP” , “HTTPS” and “DNS” from the “Common Protocols” folder. (Sorry this picture is showing the “Web Folder”)

You will then be asked “this rule applies to traffic from these sources”. Click Add. In the next Window that opens click “All protected Networks” from the “Network Sets” folder. Click Next.

You now are going to be asked where you want to allow computers in the protected network to go. Click “Add”. A New Window will open. Select “Anywhere” from the “computer sets” folder.

A Window will show “For All User”. Keep this setting and click “Next”.

Click Finish. Now you might think that you are done but you aren’t. In ISA 2006 you must always “Apply” your changes after you make them. Click “Apply”.

Now you must go to the workstation and open Internet Explorer. *NOTE* If you don’t see the menu bar hit “ALT”. The Menu bar will magically appear and then drop down.

Go to Tools – Internet Options

Click on the “Connections” tab. Then click “LAN Settings”.

Click “Use a proxy server …”. Type in the IP address or the FQDN of the ISA server and then port number. The default port that ISA 2006 uses is port “8080”. Hit “OK” and then “OK”.

Voila! Your done.

ISA Server 2006 comes with a predefined rules called System Policy. Click here to read more about System Policy.
In this article we will be configuring some rules of the System Policy to enable Remote administration for ISA Server 2006.

1. Open ISA Server Management Console, Click on Start > All Programs > Microsoft ISA Server > ISA Server Management 
   
   
2. Click on the Firewall Policy node, as you can see, this is a fresh install of ISA Server 2006,and it still has its default Deny rule, and as I said previously we are going to work with the System Policy ,and not going to create any new rule to allow remote administration
   
   
3. From the right side panel, under the Tasks tab, click on Edit System Policy
   
4. The System Policy Editor will open, for the purpose of this article we will work with the Remote Management configuration group. Clicking on any System Policy configuration group from the left panel ( will be marked with a red arrow ), will open its configuration page on the right side.
   
   To connect to ISA Server remotely, the System Policy offers you three options :
   Microsoft Management : using the MMC
   Terminal Server : using Remote Desktop Connection
   Web Management : I will not be discussing Web Management, as I do not have any Web Application that can remotely manage ISA Server, later on if my hands fall on any application that does this, I will be demonstrating it

• Microsoft Management allows you to connect to ISA Server using the Microsoft Management Console, which you can install it on a remote machine, and from it you can connect to your ISA Server.
  

1. By default Microsoft Management is Enabled, but you will need to specify from which machines you are going to connect to your ISA Server, this can be configure by clicking on the From Tab, by default the Remote Management Computers is included under the From source, and by default , the Remote Management Computers is empty and you will need to populate it.
   
2. Click on the Remote Management Computers and then click on the Edit Button, the Remote Management Computers Properties page will open, here you can add a single Computer, an address range, or a complete subnet to the remote management computers, in this article, I am the only administrator of ISA Server, and I will only install the MMC on my Vista Laptop, so I will add a Computer, click the Add button , then click on Computer
   
3. Browse to the remote computer by clicking on the Browse button, or start filling its name, IP address and a brief description if you want, once its set, click on the OK Button
   
   The Computer will be listed as shown below, Click on the OK button
   ="244" />
4. Click the Apply button so the changes take effect