Errata

Incorrect content type entry
On page 35, the first box under step 3 reads:



"Type the content type set name in the Name box."



It should read:



"Type the content type Schedule name in the Name box."

Correction on what the filter is applied to
On page 8-55, the second sentence under How to Publish an FTP Server reads:



"However, when you configure a server rule to publish the FTP protocol, the FTP application filter is automatically applied to the filter."



It should read:



"However, when you configure a server rule to publish the FTP protocol, the FTP application filter is automatically applied to the rule."

L2TP protocol needs to be added
On page 10-71 in the second sentence of the first bullet it reads:



"ISA Server 2004 supports two VPN tunneling protocols: Point-to-Point Tunneling Protocol (PPTP) and ISA Server 2004 supports a variety of VPN authentication protocols."



It should read:



"ISA Server 2004 supports two VPN tunneling protocols: Point-to-Point Tunneling Protocol (PPTP) and Layer Two Tunneling Protocol (L2TP). ISA Server 2004 also supports a variety of VPN authentication protocols."

Correction of duplicate policy under access rule
On page 12-53, the first sentence after the note box reads:



"Depending on which access rule you selected when you started the New Access Rule Wizard, the access rule may be created under Enterprise Policy Rules Applied Before Array Firewall Policy, or under Enterprise Policy Rules Applied Before Array Firewall Policy, as shown in Figure 12-11."



It should read:



"Depending on which access rule you selected when you started the New Access Rule Wizard, the access rule may be created under Enterprise Policy Rules Applied Before Array Firewall Policy, or under Enterprise Policy Rules Applied After Array Firewall Policy, as shown in Figure 12-11."

ISA Server 2003 Standard Edition included on CD-ROM On page xxxiv, under the Software Requirements the first paragraph reads: "The following software is required to complete the procedures in this training kit. (A 180 day evaluation edition of ISA Server 2003, Enterprise Edition, is included on the CD-ROM)." It should read: "The following software is required to complete the procedures in this training kit. (A 180 day evaluation edition of ISA Server 2004, Standard Edition, is included on the CD-ROM)."

Error in the character sequence used On page 10-55, under the ScriptVersion subheading it reads: "You can specify a text string using keyboard characters, except the /0 character sequence." It should read: "You can specify a text string using keyboard characters, except the character sequence."

Production environment referenced in place of test environment On page 3-13, the first sentence of the last bullet point reads: "Deploy the security update in the production environment." It should read: "Deploy the security update in a test environment."

Missing unattended setup parameter On page 13-32, Question 3, Answer C reads: "C. E:SETUP.EXE /X /QN F:MSISAUND.INI" It should read: "C. E:FPCSETUP.EXE /X /QN FULLPATHANSWERFILE=F:MSISAUND.INI"

Web server name incorrect
On page 14-15, Question 2, answer B reads:



"When the Client Beta accesses the Web server located at webserver.fabrikam.com, it will do so directly without using the ISA Server 2004 computer."



It should read:



"When the Client Beta accesses the Web server located at webserver.fabrikam.internal, it will do so directly without using the ISA Server 2004 computer."

Percent improvement incorrect
On page 16-7, the 5th sentence of question 6 reads:



"After benchmarking each of the servers, you have determined that the two 3-gigahertz (GHz) Pentium IV computers provides a 300 percent improvement over the performance of the 600-MHz Pentium III computer and a 200 percent improvement on the performance of the 1-GHz Pentium IV computer."



It should read:



"After benchmarking each of the servers, you have determined that the two 3-gigahertz (GHz) Pentium IV computers provides a 200 percent improvement over the performance of the 600-MHz Pentium III computer and a 100 percent improvement on the performance of the 1-GHz Pentium IV computer."

Location of pages incorrect On page 16-7, the fourth sentence of question 6 reads: "The pages on the perimeter network ISA Server 2004 computer are updated hourly" It should read: "The pages on the perimeter network web server computer are updated hourly"

Active Caching not available in ISA Server 2004 On page 16-14, Questions 1 and 2 should be ignored. Both these questions refer to the use of Active Caching which is not available in ISA Server 2004.

Use name of Web server, not ISA Server
On page 17-20, Answer B for question 2 reads:



"B. Obtain a new certificate that matches the name of the ISA Server 2004 computer."



It should read:



"B. Obtain a new certificate that matches the name of the web server computer."

Answer A, B and D are correct
On page 17-44, Answer 5 reads:



"5. Correct Answers: B and D"



It should read:



"5. Correct Answers: A, B and D"

Correct answers for question 6 should be A and B On page 17-28, the answers for question 6 read: "6. Correct Answers: A and C A. Correct: HTTP filtering can only be applied to allow rules; it cannot be applied to deny rules. B. Incorrect: If you set the Maximum Headers Length (done by selecting Configure HTTP for a rule from the Context menu) of a rule, it applies to all Web publishing rules C: Correct: High-bit characters are used in URLs that contain double-byte character sets, such as those used in Japanese, Russian, and other non-English languages. Blocking high-bit characters blocks the use of non-English character URLs. D. Incorrect: Unlike the Maximum Headers Length setting, actions configured for specific file extensions apply only to the specific rules rather than to all rules globally. E: Incorrect: unlike the Maximum Headers Length setting, signatures configured and applied to Web publishing rules influence only that rule and do not apply globally." It should read: "6. Correct Answers: A and B A. Correct: HTTP filtering can only be applied to allow rules; it cannot be applied to deny rules. B. Correct: If you set the Maximum Headers Length (done by selecting Configure HTTP for a rule from the Context menu) of a rule, it applies to all Web publishing rules C: Incorrect: High-bit characters are used in URLs that contain double-byte character sets, such as those used in Japanese, Russian, and other non-English languages. Blocking high-bit characters blocks the use of non-English character URLs. D. Incorrect: Unlike the Maximum Headers Length setting, actions configured for specific file extensions apply only to the specific rules rather than to all rules globally. E: Incorrect: unlike the Maximum Headers Length setting, signatures configured and applied to Web publishing rules influence only that rule and do not apply globally."

Choose all answers which apply On page 18-26, the last sentence for question 10 reads: " (Choose the best answer.)" It should read: " (Choose all answers which apply.)"

Clarification for possible answers
On page 19-6, Answer option E reads:



"E. VPN Quarantined Client Sessions."



It should read:



"E. Number of VPN Quarantined Client Sessions."



Microsoft Press is committed to providing informative and accurate

books. All comments and corrections listed above are ready for

inclusion in future printings of this book. If you have a later printing

of this book, it may already contain most or all of the above corrections.

Correction to private IP addresses
On page 2-21, in the Note box it reads:



"The private IP address ranges are 10.0.0.0, 172.16.0.0—172.32.0.0 and 192.168.0.0—192.168.255.0. These addresses cannot be routed on the Internet, so you can use any of these addresses internally."



It should read:



"The private IP address ranges are 10.0.0.0, 172.16.0.0—172.31.255.255 and 192.168.0.0—192.168.255.255. These addresses cannot be routed on the Internet, so you can use any of these addresses internally."

Incorrect word usage in second step 1
On page 4-21, the second step 1 reads:



"To do this, access the Auto Discovery tab in the Internet Network Properties dialog box,"



It should read:



"To do this, access the Auto Discovery tab in the Internal Network Properties dialog box,"

Correction in protocol name On page 12-24 the second sentence under the fourth bullet point reads: "ISA Server Management Console computers must be able to communicate with the Configuration Storage server using the MS Firewall Control protocol, and with the ISA Server computers using the RPC protocol." It should read: "ISA Server Management Console computers must be able to communicate with the Configuration Storage server using the MS Firewall Storage protocol, and with the ISA Server computers using the RPC protocol."

Correction on server type used for host file On page 8-25 the third sentence of the Exam Tip box reads: "If you do not want to configure ISA Server to use an internal DNS server, you can use a hosts file on the DNS server to provide name resolution." It should read: "If you do not want to configure ISA Server to use an internal DNS server, you can use a hosts file on the ISA server to provide name resolution."

Incorrect install filename given On page 4-29, step 2 reads: "Right-click MS_FPC.msi and click Install. Alternatively, you can double-click Setup.exe." It should read: "Right-click MS_FWC.msi and click Install. Alternatively, you can double-click Setup.exe."