Configuring HTTP Access Restrictions

• 1). Access the Microsoft ISA Server computer using your Network Administrator credentials. Open the Microsoft ISA Server console on your screen. Select "Firewall Policy."
  
  
• 2). Select Rule No. 2--"Administrator Internet Access"--by clicking the right mouse button. Scroll down and select "Configure HTTP." Select "Signatures" tab found on the dialog box labeled "Configure HTTP policy for rule."
  
  
• 3). Type in the name of the domain for the sites you want to block. For example, if you want to block users from accessing Yahoo! you would type in "Yahoo URL" (without the quotation marks) in the text box next to "Name." This will block the entire domain and block all web sites linked to Yahoo.
  
  
• 4). Ensure "Request URL" is listed in the drop down list under "Signature Search Criteria" next to "Search in." Type in "yahoo" (without the quotation marks) into the text box next to "Signature" found under "Specify the Signature to block." Select "OK."
  
  
• 5). Apply these changes by selecting "Apply" then "OK" in the "Configure HTTP policy for rule." Repeat for each specific domain you want blocked on your network. Remember that you can block all web sites linked to the domain instead of listing each individual site. For example, when you listed Yahoo URL in step 3, you blocked all web sites within that domain. As such your users cannot access Yahoo! Mail, Yahoo! Messenger, Yahoo! Voice, etc.
  
  

Testing Access Restrictions

• 1). Access the network using one of your user's credentials. Being the NA, you have the legal right to access all user profiles at any time.
  
  
• 2). Select the web browser found in the Start Menu.
  
  
• 3). Type the URL for the domain you blocked on the network. If it is Yahoo!, type in "www.yahoo.com" (without the quotation marks) on the address bar. Select "Enter." Since you have set the HTTP policy to block the entire Yahoo! domain, you should see a proxy message informing you "This Page Cannot be Displayed." If you do not, repeat Steps 1-5 in Section 1.
  
  
• 4). Perform this test for all domains you have blocked on your network. Once complete, log off the Microsoft ISA Server computer.