Great Circle Associates Firewalls
(May 1997)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Microsoft Proxy Server
From: Daniel_Yamaguchi @ iscci . com
Date: Fri, 23 May 1997 17:21:38 -0700
To: Dick_Wall @ stratus . com, firewalls @ greatcircle . com
Cc: jmartin @ iscci . com




Dick -

Please find below information regarding Microsoft Proxy Server.  We, at ISC
Computers & Communications, Inc. feel that this solution will meet your
current needs regarding Internet Security.

Please call me if you have any questions.

Thank you,

Daniel T. Yamaguchi
Marketing Mgr.
ISC Computers & Communications, Inc.


                     All About Microsoft Proxy Server

Security

Microsoft Proxy Server was designed with firewall-class security.  Many
organizations will run their proxy servers in direct contact with the
Internet alongside such devices as packet-filtering routers and firewalls.
A proxy server needs to be just as secure as these devices.

Microsoft's Proxy Server was subjected to extensive security testing and
evaluation from independent testing agency, Coopers & Lybrand's Information
Technology Security Services and is resistant to common attacks such as "IP
Spoofing", 'SATAN", and "ISS."  This level of security is not typically
found other proxy servers on the market.

Manageability & Ease of Use

Microsoft Proxy Server is often used by small-medium sized business as the
primary gateway onto the Internet.  In these environments, leveraging the
familiarity and ease of use of the Windows NT platform is paramount.

Integrated with NT User Directory Services, Microsoft Proxy Server allows:

Integrated Dial-Up Networking Support- using the Auto-Dial tool, Microsoft
Proxy Server provides exceptional support for networks that use dial-up
links for access to the Internet.

Easy Installation through a full graphical set up program.

Easy Administration provided by a clean, easy to understand and easy to
administer interface.

Requires only One Internet IP address for a site by providing a single
point of management for all of an organization's Internet connectivity.
This reduces costs by making overall system not only easier to manage, but
also by requiring fewer "pipe" purchases by organizations.

Remote Administration via Internet Service Manager allows Microsoft Proxy
Server to be managed from any Windows NT system on the network.

Integrated with NT network system management services Microsoft Proxy
Server generates a suite of Windows NT Performance Counters for monitoring
the state of any Proxy Server on the network.

Integration with SNMP allows the administrator to examine the current
status of any Microsoft Proxy Server on the network using an SNMP console
such as HP Open View.

Web Proxy

The Web Proxy component of Microsoft Proxy Server supports the industry
standard CERN-Proxy protocol.  The CERN-Proxy protocol requires that client
programs be specifically configured to use the proxy server in order to
access the Internet via a modified version of the HTTP protocol and is
widely supported in popular browsers.

Multi-Vendor Support - The Web Proxy Serve supports all popular web
browsers including:
                 Microsoft Internet Explorer 3.0
                 Netscape Navigator 3.0
                 PointCast Network
Multi-Platform Support - The Web Proxy Server supports all platforms
including:
                 Windows NT Server
                 Windows NT Workstation
                 Windows '95
                 Windows for Workgroups/Win 3.1
                 UNIX
                 Macintosh
Browser Protocols - The Web Proxy Server supports:
                 HTTP
                 FTP
                 Gopher
                 SSL (HTTPS & SNEWS)
WinSock Proxy

Unlike the Web Proxy, the WinSock Proxy component provides extended,
transparent functionality past the HTTP, FTP, Gopher, & SSL protocol suite
into a wide range of non-Web protocols such as streaming audio & video.
Whereas the Web Proxy requires explicit client knowledge of the proxy, the
WinSock Proxy operates transparently without any modification to the client
program's protocol.

The WinSock Proxy remotes" calls made by the Internet clients to the
industry standard WinSock 1.1 API to the Proxy server providing seamless
connectivity for these clients.

Transparent Operation - WinSock Proxy requires no modifications to client
applications therefore working with existing clients.

Generic support for all protocols - Any client -server protocol implemented
using the industry -standard WinSock 1.1 API can be enabled/disabled from
the WinSock Proxy Server. The WinSock Proxy ships pre-configured with a
wide range of popular protocols (e.g. Real Audio, NetShow, IRC) and can be
easily configured with the new protocol suites via a graphical tool as they
are standardized (e.g. LDAP)

Support for connectionless/UDP protocols - Unlike other Proxies, the
WinSock Proxy supports connectionless protocols.  SOCKS v4-based proxies,
for example, are only functional with "connection-oriented" transports and
therefore exclude support for popular protocols such as streaming audio and
video.

Full authentication/logging - WinSock Proxy performs full access control,
encrypted authentication, and logging of all transactions.

Network Compatibility

One of the best features of Microsoft Proxy Server is the use of WinSock
Proxy to seamlessly provide a gateway between an administrator's existing
IPX network infrastructure and IP-based  network services.

Integrates with IPX Networks - Unlike other proxy servers, Microsoft Proxy
Server doesn't require administrators to "rip & replace" existing, legacy
IPX networks with IP networks.  This effectively preserves infrastructure
investments.

Integrates with NT network security domain model -  Microsoft Proxy Server
extensively leverages the network-based Windows NT domain security model to
manage access permission and logging.

Caching

Reduced Internet Bandwidth Requirement - By keeping local copies of popular
Internet objects and achieving cache hit rates up to 50%, the Web Proxy
averts the need to upgrade/ expand Internet connection bandwidth thereby
saving organizations money.

Improved Client Performance - Because cached objects are retrieved at LAN
speeds, clients achieve both increased throughput and reduced latency.

Active caching adds intelligence to on-demand replication - Through
sophisticated statistical analysis of usage trends, Microsoft Proxy Server
proactively fetches objects from the Internet before the user is expected
to request the object himself.

Active caching results in Time-Shifting -  Active caching takes into
account the load on the server as it makes its individual object pre-fetch
decision.  The result of this metric is that active caching activity is
shifted towards periods of low server utilization (e.g. overnight)
"preparing" the cache for high traffic periods later in the day.

Massive Scalability - Microsoft Proxy Server's cache is limited only by
Windows NY Server system resources.

Integration with Other Environs - Microsoft Proxy Server supports the
industry standard CERN-compatible proxy services, therefore can work with
almost all existing Internet browsers and other applications that use the
CERN proxy standard.

Extensibility

Microsoft Proxy Server fully supports the multi-vendor ISAPI Filter
specification enabling third parties to write value-enhancing add-ons to
the Proxy server.  Check out a list of current third party add-ons.  These
extensions provide functionality such as:

                       Virus Scanning

                       Advanced content/site filtering

Pricing

The price for Microsoft ProxyServer is $899.00.





Follow-Ups:
Indexed By Date Previous: RE: (Fwd) Ukiah Software
From: Don Lewis <Don . Lewis @ tsc . tdk . com>
Next: Re: Really stupid question from a total novice here
From: Todd Graham Lewis <lists @ reflections . eng . mindspring . net>
Indexed By Thread Previous: Re: Really stupid question from a total novice here
From: "Jonathan M. Bresler" <jmb @ FRB . GOV>
Next: Re: Microsoft Proxy Server
From: Todd Graham Lewis <lists @ reflections . eng . mindspring . net>

Google
 
Search Internet Search www.greatcircle.com