I’m delighted to let you know that the ISA Server documentation team has just published How to Configure ISA SSL Bridging for System Center Configuration Manager Internet-Based Client Management.
This has been a joint collaboration between the ISA Server product group and the Configuration Manager product group – and special thanks to Jim Harrison (ISA Server PM), Nathan Bigman (ISA Server Content Publishing Manager), and Adam Meltzer (Configuration Manager test engineer).
I would also like to add my thanks to our ISA friends and reviewers:
· Jason Jones (ISA expert from Silversands Limited, with his own blog at http://blog.msfirewall.org.uk)
· Tom Shinder (ISA MVP, consultant, trainer, author of many best-selling books and articles – check out http://blogs.isaserver.org/shinder)
This article has step-by-step instructions for publishing an Internet-based site system server behind ISA, and using SSL to SSL bridging (also known as symmetric bridging). It lists the requirements for the instructions to be successful, and then takes you through the processes of creating a security group for ISA to use, deploying a client certificate for the Internet-based clients, deploying the certificates for ISA, and configuring ISA for Web publishing on ISA Server 2006. The appendixes have additional information for how to create a certificate template, the equivalent configuration steps for ISA Server 2004, and how to configure server publishing (SSL tunneling) as an alternative solution to SSL bridging.
If you have questions or feedback about this documentation, you can send it to both ISADocs@Microsoft.com and SMSDocs@Microsoft.com. For technical issues, I encourage you to use the community resources that are included in the document.
Thank you for everybody who requested this documentation. I hope that the instructions will help you to be successful with Internet-based client management in ISA Server environments!
This posting is provided AS IS with no warranties and confers no rights.
In case you missed it (you do read our writers' blog don't you?! http://blogs.technet.com/wemd_ua_