HP ProLiant DL320 G4 Server - Manual (Page 17)

Setting up the server 17
The default gateway address and the DNS server address used by the computer on the LAN can be
changed from the Control Panel. Create an access rule on the ProLiant DL320 Security Server. The access
rule can be configured to allow a limited number of protocols outbound access to the Internet, allow a
selected group of users access to a selected group of websites, or create a firewall rule allowing all the
users on your LAN access to all sites at all times using virtually any protocol.
The following example demonstrates how to create a firewall rule that allows everyone access to all
protocols to all sites at all times. To create the firewall rule:
1. In the scope pane of the ISA Server management console, expand the computer name, right-click the
Firewall Policy node, and select New>Access Rule.
2. On the Welcome to the New Access Rule Wizard page, enter the name of the rule in the Access
rule name text box. In this example, enter
All IP Traffic Outbound from Internal, and
click Next.
3. On the Rule Action page, select the Allow option, and click Next.
4. On the Protocols page, select the All outbound protocols option, and click Next.
5. On the Access Rule Sources page, click Add.
6. In the Add Network Entities dialog box, select the Networks folder.
7. Double-click the internal network, and click Close. The internal network appears in the This rule
applies to traffic from these sources list.
8. Click Next.
9. On the Access Rule Destinations page, click Add.
10. In the Add Network Entities dialog box, select the Networks folder.
11. Double-click the external network, and click Close. The external network appears in the This rule
applies to traffic sent to these destinations list.
12. Click Next.
13. On the User Sets page, confirm that All Users appears in the This rule applies to requests from the
following user sets, and click Next.
14. On the Completing the New Access Rule Wizard page, click Finish.
15. Click Apply at the top of the scope pane to save the changes and update the firewall policy.
The Internet is now accessible from computers on the LAN. Consider strengthening security for outbound
connections after confirming that the ProLiant DL320 Security Server successfully allows access to the
Internet. An effective method for creating a secure access policy is to use the network templates included
with ISA Server 2004. For detailed information about the network templates, see the ISA Server 2004
Help file.
HP Virus Throttle
HP Virus Throttle, a network packet-filtering feature that helps slow the spread of viruses, is automatically
installed and enabled on your ProLiant DL320 Security Server. Virus Throttle monitors all outbound
connection requests and counts the number of unique connections. It detects abnormal (virus-like) behavior
in the requests and slows excessive connection requests to new hosts until you can determine if they are
viral in nature and take action.
Configuring Virus Throttle
After Virus Throttle is installed, the Virus Throttle icon appears in the Microsoft ® Windows ® toolbar at the
bottom of the screen. The parameters for the filter driver are set to the defaults. Any change made to the
Virus Throttle filter driver parameters is made to all active instances of the Virus Throttle filter driver.