Index_I

I

IDEA (International Data Encryption Algorithm), 19

Identification dialog box, SMTP virtual server, 158

identity

authentication verifying, 4–5

digital signatures verifying, 26

IDS (intrusion detection system), 345

IEEE 802.1x standard, 39

IEEE 802.3 standard, 39

IIS (Internet Information Services)

relay control, 143

user access to IM control, 339

Web enrollment, 244–46

IIS Lockdown

blocking file types, 304

MBSA checking vulnerabilities in, 88–89

overview of, 107–10

IISADMPWD package, 300

IKE (Internet Key Exchange)

IPsec implementation and, 204

IPsec policies not protecting, 207

overview of, 202

quick mode, 203

IKE mode 2 (Quick Mode SAs), 203

IM (Instant Messaging), 333–46

additional reading, 346

client control, 339–41, 345

clients, 333–36

Exchange, 333–36

firewalls and, 343

message exchange process, 334–35

overview of, 333

traffic control, 341–45

use restrictions, 335–36

user access control, 336–39

IMAP (Internet Message Access Protocol), 323–30

additional reading on, 329

IPsec and, 208

overview of, 323–24

SMTP relaying and, 141

SSL and, 326–29

user access control to, 324–26

Import/Export button, Outlook, 275–76

Import Procedure tab, Exmerge Wizard, 173

importing certificates, 275–76

IMPP (Internet Messaging Protocol), 333

incidental targets, 61

information compromise attacks, 64

information disclosure attacks, 64

Information Store, Outlook Web Access security and, 318–19

Instant Messaging. See IM (Instant Messaging)

integrated authentication

access control with, 290

IMAP and POP and, 324–25

Outlook Web Access and, 287

Integrated Windows Authentication check box, SMTP, 147

INTERACTIVE security principal, 46

intermediate CA, defined, 229

International Data Encryption Algorithm (IDEA), 19

Internet communication security

additional reading, 219

IPsec. See IPsec (Internet Protocol Security)

MAPI RPCs published with ISA server, 215–18

SMTP. See SMTP (Simple Mail Transfer Protocol), TLS/SSL

Internet E-Mail Settings page, E-Mail Accounts dialog box, 328

Internet Key Exchange. See IKE (Internet Key Exchange)

Internet Message Access Protocol. See IMAP (Internet Message Access Protocol)

Internet Messaging Protocol (IMPP), 333

Internet Protocol Security Extension. See IPsec (Internet Protocol Security)

Internet RFC 821, 160

Internet Security and Acceleration Server. See ISA Server

Internet Security Association Key Management Protocol (ISAKMP), 202

Internet Server Application Programming Interface. See ISAPI (Internet Server Application Programming Interface) filter

Internet Services Manager snap-in

ISAPI filter installation, 293–94

password changes, 300–1

SSL enabled for OWA, 298

Internet Services page, IIS Lockdown, 108

intrusion detection system (IDS), 345

IP addresses

getting off blacklists, 155

IMAP and POP access control and, 325

SMTP access control and, 144–45

SMTP server connections and, 147–48

spam blocking, 154–55

IP Filter List page, Security Rule Wizard, 210–11, 312

IP Filter Wizard, 210–11, 312

IP Protocol Port page, IP Filter Wizard, 211, 313

IP Protocol Type page, IP Filter Wizard, 211, 313

IP Security Policy Wizard, 209–10, 311–13

IP Traffic Destination page, IP Filter Wizard, 210, 313

IP Traffic Security page, Security Rule Wizard, 213–14

IP Traffic Source page, IP Filter Wizard, 210, 312

IP version 4 (IPv4), 30

IPsec (Internet Protocol Security), 201–15

additional reading, 40, 219

AH protocol, 31–32

certificate requirements of, 22

CRL checking for, 202–3

driver, 204

ESP protocol, 32–34

FE/BE communications protected with, 309–13

Hashed Message Authentication Codes, 31–32

implementation, 204–7

opening ports for, 309

overview of, 30–31

PKI planning and, 224

policy creation, 207–15

security associations, 202

ipsecpol command, 214

IPv4 (IP version 4), 30

ISA Management snap-in

destination sets, 315–17

Web listener, 314–15

Web publishing rules, 317–18

ISA (Internet Security and Acceleration) Server

additional reading, 219

front-end servers and, 284

MAPI RPCs published with, 215–18

Outlook Web Access published with, 313–18

as reverse proxy, 305–306

ISAKMP (Internet Security Association Key Management Protocol), 202

ISAPI (Internet Server Application Programming Interface) filter

building, 293

customizing code for, 291

defined, 291

installing, 293–94

Isscan, 172

issuing CA, defined, 229