ISA Server 2004: Safer Services, Continued

"Rev Up Security with ISA Server 2004," November 2004, InstantDoc ID 44068, introduces an example that shows you how you can use Microsoft Internet and Security Acceleration (ISA) Server 2004 to increase security for Internet-facing applications and services such as Microsoft Exchange Server. In that article, I began walking you through a configuration that uses an ISA Server firewall (which I refer to as the ISA firewall) to enhance the security of a front-end/back-end Exchange setup in which the front-end Exchange server publishes a Microsoft Outlook Web Access (OWA) site that remote users can access across the Internet. "Rev Up Security with ISA Server 2004" includes a detailed description of the sample setup and the first five steps in publishing the OWA site. Let's continue with the remaining steps (6 through 13).

6. Create a User Account for the ISA Firewall
You need to create a user account for the ISA Server firewall service so that you can request a client certificate for that service. The ISA firewall presents this certificate to the front-end Exchange server's OWA Web site. The account has no special requirements, and you don't need to create an Exchange mailbox for the account. . . .