32.4 Installing and Configuring Webgate for the ISA Server

After ISA Server installation, you perform the following tasks to install Webgate for use with ISA Server.

See Compatibility and Platform Support.

Task overview: Performing Webgate configuration for ISA Server includes the following topics:

1. Installing Webgate with ISA Server
2. Changing /access Directory Permissions
3. Registering Access Manager Plug-ins as ISA Server Web Filters

32.4.1 Installing Webgate with ISA Server

When you install Webgate with the ISA Server, the destination for the ISAPI Webgate installation (also known as the Webgate_install_dir) should be same as that of the Microsoft ISA Server.

For example, if ISA Server is installed on C:\Program Files\Microsoft ISA Server, the ISAPI Webgate should also be installed there.

Note:

During Webgate installation, do not automatically update the ISA Server configuration. Instead, choose "No" when asked about automatic updates to the ISA Server configuration.

Task overview: Installing the ISAPI Webgate for the ISA Server:

1. See Registering and Managing 10g WebGates with Access Manager 11g for details on the following topic, as these apply to your environment:

   • Registering a 10g WebGate with Access Manager 11g Remotely

   • Locating and Installing the Latest 10g WebGate for Access Manager 11g

   • Configuring Centralized Logout for 10g WebGate with 11g OAM Servers

2. Changing /access Directory Permissions

32.4.2 Changing /access Directory Permissions

After finishing ISAPI Webgate installation and configuration for the ISA Server, you need to change permissions to the \access subdirectory. This subdirectory was created in the ISA Server (also Webgate) installation directory. You need to add the user NETWORK SERVICE and grant full control to NETWORK ADMINISTRATOR.

This enables the ISA Server to establish a connection between the Webgate and Access Server. Certain configuration files should be readable by network Administrators, which is why you grant NETWORK ADMINISTRATOR full control.

To change permissions for the \access:

1. In the file system, right-click Webgate_install_dir\access, and select Properties.
2. In the Properties window, click the Security tab.
3. Add user "NETWORK SERVICE" and then select "Allow" to give "Full Control".
4. For the "NETWORK ADMINISTRATOR", select "Full Control".