How to configure ISA server to prevent W32.Slammer

[thehorse13]

I have a freshly installed ISA server in my lab so I decided to test out this Microsoft doc regarding proper configuration of ISA server to prevent W32.Slammer from slipping into your network. The document has quite a few requirements regarding your ISA config but if you meet them, I can verify that this does work.

ENVIRONMENT (all machines freshly installed - no modifications)
===============
ISA server running on W2K Pro SP3, all hotfixes and patches
W2K Pro SP3, all hotfixes and patches running MSDE 2000 SP1
Windows W2K server running MSSQL 2000 SP1, Norton 8.0 Corp Addition - latest DAT.
2 linksys hubs

TEST
===============
Setup ISA server according to the link below
infected the MSDE client with W32.slammer
Monitored both sides of the network with ethereal 0.9.11
No UDP traffic associated with W32.slammer ever made it past the ISA server. No infection occured on the MSSQL server.

http://www.microsoft.com/technet/tre...sa/isaslam.asp

Hope this helps any ISA users.

[thehorse13]

I have a freshly installed ISA server in my lab so I decided to test out this Microsoft doc regarding proper configuration of ISA server to prevent W32.Slammer from slipping into your network. The document has quite a few requirements regarding your ISA config but if you meet them, I can verify that this does work.

ENVIRONMENT (all machines freshly installed - no modifications)
===============
ISA server running on W2K Pro SP3, all hotfixes and patches
W2K Pro SP3, all hotfixes and patches running MSDE 2000 SP1
Windows W2K server running MSSQL 2000 SP1, Norton 8.0 Corp Addition - latest DAT.
2 linksys hubs

TEST
===============
Setup ISA server according to the link below
infected the MSDE client with W32.slammer
Monitored both sides of the network with ethereal 0.9.11
No UDP traffic associated with W32.slammer ever made it past the ISA server. No infection occured on the MSSQL server.

http://www.microsoft.com/technet/tre...sa/isaslam.asp

Hope this helps any ISA users.

[shadow_dancer]

In this type of configuration, the ISA Server-based computer is configured with two network adapters (one on the internal network and one connected to the broadband modem) and a dial-up network adapter (the PPPoE adapter).

visit http://support.microsoft.com/?kbid=296534

good luck

[shadow_dancer]

In this type of configuration, the ISA Server-based computer is configured with two network adapters (one on the internal network and one connected to the broadband modem) and a dial-up network adapter (the PPPoE adapter).

visit http://support.microsoft.com/?kbid=296534

good luck

[nirvanainheaven]

Usefully for admin!