IBM BS029ML - WebSphere Portal Server Self Help Manual page 186

Figure A-1 ISA Download page
Security Considerations: As with any software application, ISA's security greatly
depends on the overall security architecture in place on the machine itself. ISA runs as a
Web application on a small application server. At startup, the default behavior for the
application server is to dynamically pick an open port. The port will usually be different
each time ISA starts, but it is possible for a user to configure the application server to use a
static port for increased security and control.
As for access, the default configuration for ISA V3 is to only allow access from localhost.
Therefore, if the machine itself is secure from the outside, then ISA does nothing to
undermine that security.
Before choosing the install code and beginning the download, there a couple thing to
consider.
First, you have two options on how to use ISA in your WebSphere Portal Server environment:
Local: Install ISA on the WebSphere Portal Server machine.
Remote: Install ISA on a designated ISA administration machine. Note that this is not
suggesting that this machine
machine that is remote from the WebSphere Portal Server environment.
Note: The remote option may be desired when the WebSphere Portal Server is running
in production and you do not want to place any further resource requirements on the
machine that may impact performance, or because of business rules, you are not
allowed to install any additional software onto the machine.
172
IBM WebSphere Portal V6 Self Help Guide
only
be used for ISA; rather, its simply an administration