For ISA Server 2006 Enterprise Edition, for a specific
enterprise policy, expand Microsoft Internet Security and
Acceleration Server 2006, expand Enterprise, expand
Enterprise Policies, and then click
For ISA Server 2006 Enterprise Edition, for array-level
firewall policy, expand Microsoft Internet Security and
Acceleration Server 2006, expand Arrays, expand
Array_Name, and then click Firewall
For ISA Server 2006 Standard Edition, expand Microsoft
Internet Security and Acceleration Server 2006, expand
Server_Name, and then click Firewall
In the details pane, click the applicable access rule.
On the Tasks tab, click Edit Selected Rule.
On the Content Types tab, do one of the following:
To specify that the rule applies to all content, click All
To specify that the rule only applies to certain content, click
Selected content types, and then click one or more content
To open ISA Server Management, click Start, point to
All Programs, point to Microsoft ISA Server, and then
click ISA Server Management.
If you specify the Selected content types option, the
rule will be applied only to HTTP traffic.
When you select All content types, the rule applies to
all content, regardless of whether there is a defined content
The content type is not always present in the URL or response
header. For this reason, configuring an access rule using content
types may result in unforeseen behavior of your firewall
After you click Apply in the details pane, the policy is
updated. The new policy applies only to new connections.
Microsoft Internet Security and Acceleration (ISA)
Server 2006 takes the following actions to determine content
ISA Server receives the Web server response and checks whether
it includes the content-type header.
If the content-type header is in the response, ISA Server
compares the header value to the content type policy settings.
If the response does not contain the content-type header, ISA
Server compares the extension of the requested URL to the content
If the URL does not contain an extension, ISA Server concludes
that there is no match between the content type and the rule.