homework 3

profilesarahmazin
lesson_4-1.pdf

LAb #5 – ASSESSMENT SPREADSHEET A

Configure a Microsoft® Windows Workstation Internal IP Stateful Firewall

Course Name and Number:

Student Name:

Instructor Name:

Lab Due Date:

Overview Review the default settings for Windows Firewall on your student workstation and indicate your settings below:

GENERAL

_____ Recommended (Firewall On/Off) _____ Don’t Allow Exception Rules (On/Off) _____ Not Recommended (On/Off)

EXCEPTIONS

_____ File Print Sharing _____ Remote Assistance _____ Remote Desktop _____ uPnP Framework

ADVANCED

_____ Network Connection Settings: _____ 1394 Connections _____ Cisco AnyConnect VPN _____ Local Area Connection _____ Wireless Network Connection

_____ Security Logging: _____ Logging Options _____ Logging File Options

_____ ICMP: _____ Allow incoming request _____ Allow incoming time request _____ Allow incoming router request _____ Allow outgoing destination unreachable _____ Allow outgoing source quench _____ Allow outgoing parameter problem _____ Allow outgoing time exceeded _____ Allow redirect _____ Allow outgoing packet too big

70 Lab #5 | Configure a Microsoft® Windows Workstation Internal IP Stateful Firewall

38504_LB05_Pass1.indd 70 26/02/13 6:01 PM

C o

nfi g

ure a M icro

so ft

® W ind

o w

s W

o rkstatio

n Internal IP Stateful Firew all

LAb #5 – ASSESSMENT SPREADSHEET b

Configure a Microsoft® Windows Workstation Internal IP Stateful Firewall

Course Name and Number:

Student Name:

Instructor Name:

Lab Due Date:

Overview Configure your Windows workstation internal firewall according to the following policy definition. Test and validate your implementation after you configure it based on the policy definition. The following is your workstation internal firewall policy definition:

1. Implement the default Microsoft® Windows internal firewall

2. Add/Block the following additional programs:

a. Yahoo! Messenger IM Chat

3. Block the following applications:

a. Telnet

b. TFTP

c. SNMP

d. ICMP echo-request

e. ICMP echo-reply

4. Allow the following applications under Advanced settings:

a. FTP

b. SMTP

c. POP3

d. HTTPS

e. HTTP

5 Assessment Spreadsheet B 71

38504_LB05_Pass1.indd 71 26/02/13 6:01 PM

LAb #5 – ASSESSMENT WORKSHEET

Configure a Microsoft® Windows Workstation Internal IP Stateful Firewall

Course Name and Number:

Student Name:

Instructor Name:

Lab Due Date:

Overview In this lab, you determined the properties and behavior of the default Windows Firewall settings for your workstation, enabled Windows Firewall on the vWorkstation computer, set specific values for blocking or enabling certain transactions, and tested to ensure that Windows Firewall is working properly.

Lab Assessment Questions & Answers

1. Given that the Microsoft® Windows internal firewall is turned on by default, should you disable this firewall if your organization already has a firewall? Why or why not?

2. What kind of firewall is the Microsoft® Firewall? Explain your answer.

72 Lab #5 | Configure a Microsoft® Windows Workstation Internal IP Stateful Firewall

38504_LB05_Pass1.indd 72 26/02/13 6:01 PM

C o

nfi g

ure a M icro

so ft

® W ind

o w

s W

o rkstatio

n Internal IP Stateful Firew all

3. How do you block specific applications or programs from communicating via TCP/IP from your vWorkstation?

4. To configure your internal firewall, you must first identify the applications that you must enable and communicate with throughout your IP network infrastructure. Given the policy definition, identify the port numbers for both the allowed and disallowed applications:

• Telnet Port Number: 23 – TCP UDP or TCP • TFTP Port Number: 69 – UDP UDP or TCP • SNMP Port Number: 161 – UDP UDP or TCP • ICMP echo-request Port Number: None, IP UDP or TCP • ICMP echo-reply Port Number: None, IP UDP or TCP • FTP Port Number: 21 – TCP UDP or TCP • SMTP Port Number: 25 – TCP UDP or TCP • POP3 Port Number: 110 – TCP UDP or TCP • HTTPS Port Number: 443 – TCP UDP or TCP • HTTP Port Number: 80 – TCP UDP or TCP

5. Where and how do you open the ports and allow specific applications to communicate with your Microsoft® Windows systems?

6. What risks are you subjecting your Microsoft® Windows systems to by opening up ports on your internal firewall?

5 Assessment Worksheet 73

38504_LB05_Pass1.indd 73 26/02/13 6:01 PM

7. How should you test to determine if your internal firewall configuration is working properly?

8. Define a test plan to test and verify that your internal firewall’s open port configurations are working properly.

74 Lab #5 | Configure a Microsoft® Windows Workstation Internal IP Stateful Firewall

38504_LB05_Pass1.indd 74 26/02/13 6:01 PM

  1. Student Name:
  2. Instructor Name:
  3. Lab Due Date:
  4. undefined:
  5. Recommended Firewall OnOff:
  6. Dont Allow Exception Rules OnOff:
  7. Not Recommended OnOff:
  8. File Print Sharing:
  9. Remote Assistance:
  10. Remote Desktop:
  11. uPnP Framework:
  12. Network Connection Settings:
  13. 1394 Connections:
  14. Cisco AnyConnect VPN:
  15. Security Logging:
  16. Local Area Connection:
  17. Wireless Network Connection:
  18. ICMP:
  19. Logging Options:
  20. Logging File Options:
  21. Allow incoming request:
  22. Allow incoming time request:
  23. Allow incoming router request:
  24. Allow outgoing destination unreachable:
  25. Allow outgoing source quench:
  26. Allow outgoing parameter problem:
  27. Allow outgoing time exceeded:
  28. Allow redirect:
  29. Allow outgoing packet too big:
  30. Course Name and Number:
  31. Student Name_2:
  32. Instructor Name_2:
  33. Lab Due Date_2:
  34. Course Name and Number_2:
  35. Student Name_3:
  36. Instructor Name_3:
  37. Lab Due Date_3:
  38. firewall if your organization already has a firewall Why or why not 1:
  39. firewall if your organization already has a firewall Why or why not 2:
  40. firewall if your organization already has a firewall Why or why not 3:
  41. firewall if your organization already has a firewall Why or why not 4:
  42. 2 What kind of firewall is the Microsoft Firewall Explain your answer 1:
  43. 2 What kind of firewall is the Microsoft Firewall Explain your answer 2:
  44. 2 What kind of firewall is the Microsoft Firewall Explain your answer 3:
  45. 2 What kind of firewall is the Microsoft Firewall Explain your answer 4:
  46. vWorkstation 1:
  47. vWorkstation 2:
  48. vWorkstation 3:
  49. vWorkstation 4:
  50. HTTP 1:
  51. HTTP 2:
  52. HTTP 3:
  53. HTTP 4:
  54. Microsoft Windows systems 1:
  55. Microsoft Windows systems 2:
  56. Microsoft Windows systems 3:
  57. Microsoft Windows systems 4:
  58. firewall 1:
  59. firewall 2:
  60. firewall 3:
  61. firewall 4:
  62. 7 How should you test to determine if your internal firewall configuration is working properly 1:
  63. 7 How should you test to determine if your internal firewall configuration is working properly 2:
  64. 7 How should you test to determine if your internal firewall configuration is working properly 3:
  65. 7 How should you test to determine if your internal firewall configuration is working properly 4:
  66. properly 1:
  67. properly 2:
  68. properly 3:
  69. properly 4: