Lab Thuc Hanh Isa 2006 Toan Tap Phan 3 1659

ATHENA INTERNATIONAL
NETWORK ADMINISTRATION & SECURITY TRAINING

-----------------------------------------------------------------------------
Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn
FTP Filter
i vi cc FTP Traffic, thng thng ta ch nn cho php chc nng Read Only m thi,
ngha l users ch c th dng lnh GET download t FTP Server m khng th dng lnh
PUT upload file ln FTP Server. Mc ch ny nhm trnh gy tht thot thng tin ra bn
ngoi cty.
Vo mt rule Allow c h tr FTP, chn Configuring FTP
chn Tab Protocol, chn Option Read Only, chn Ok ri nhn Apply.
Chng ta s bn lun thm v vn Application Filter tp 2. Cc bn c th tham kho

Video
demo
theo
link
sau
http://tailieu.athena.edu.vn/Microsoft/Video%2070-
351/LAB%207%20-%20APPLICATION%20AND%20WEB%20FILTER/
Hoc : http://www.mediafire.com/?jabjimjjk9sis
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 101

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Phn 4 : Server Publishing
Publising Rule cho php cc Clients t Internet c th kt ni vo Web Server, Mail

Server, Application Server, trong mng Internal, c th s dng DNS Name hoc s dng
a ch IP Public. Hay chng ta c th hiu l thng thng cc Clients t Internet truy
cp vo mng Internal thng qua NAT inbound, th by gi chng ta s lm iu qua
cc Publising Rule.
Vic u tin l chng ta cn cu hnh thm dch v DNS my ISA Server cho m hnh.
My ISA sau khi ci t ISA 2006 join vo domain dng sn trn my PC2
(athena.edu.vn).
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 102

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
My DC to send & receive connector, star services : POP3, to 2 mailbox u1 & u2.
Cho u1 quyn logon locally . Dch v DNS c cu hnh tng ng vi mng
172.16.1.0/24 .
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 103

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
- My ISA : logon athena/administrator ci thm dch v DNS ti y.

Ti Forward lookup zone, to New Zone, chn Primary Zone vi tn athena.edu.vn
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 104

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Ca s Dynamic update chn do not allow
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 105

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Xa host c to ra ng vi interface Local
Tng t ti mc Reverse lookup zone to New Zone, chn Primary Zone
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 106

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Net ID l 192.168.2
Chn do not allow
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 107

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Ti Reverse lookup zone, phi chut chn New Pointer
To pointer ng vi Interface Public
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 108

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Chnh DNS trn my ISA ch lng nghe v pha card Lan. Bng cch phi chut ln PC
ISA, chn properties
Chn only the following IP , v Remove ip 192.168.2.111
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 109

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Sau Restar li dch v DNS
Kim tra phn gii DNS trn my ISA
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 110

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Tip theo, trn my ISA to rule publish DNS
Chn non-web server , t tn rule l publish DNS
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 111

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
in Ip trn card Lan
Mc Select Protocol, chn DNS server
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 112

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Mc Network Listener Ip Address, chn External
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 113

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Kim tra trn my Internet
Chnh Preferer DNS v IP ca card ngoi my ISA

Vo Run g cmd kim tra bng nslookup
a. Publish Mail Exchange Server :
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 114

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Trn ISA to rule Allow send mail cho php Internal c php gi mail ra ngoi
External
Chn protocol : POP3, POP3S, IMAP, IMAPS, SMTP, SMTPS .
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 115

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Mc Access Rule Source chn Internal
Mc Access Rule Source chn External
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 116

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Mc Users set chn All users. Nhn Next, kim ta v chn Finish .
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 117

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Ti ISA Management, chut phi vo Firewall Policy chn mail server publishing rule.
Ti giao din Welcome, t tn publish Exchange
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 118

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Giao din Select Access Type, chn Client access .
Mc Select Services, chn standard & secure port nh hnh .
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 119

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
in IP ca my DC
Mc Network Listener Ip Address, chn external
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 120

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Nhn Next, kim tra li v nhn Finish
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 121

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Trn my DC , vo All Program chn OE , phi chut chn Run as
Logon vi tn u1, Display Name in vo tn u1
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 122

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Nhp vo Email Address : u1@athena.edu.vn
Incoming & outgoing : mail.athena.edu.vn
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 123

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Nhp User & pass to trn my DC. Ri nhn Next
Account mail ca u1 va to, chn properties
Tab server, check vo mc My Server Require .
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 124

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Tab advanced, check vo 2 mc Outgoing v Incoming, mc Leave a
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 125

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Nhn Send & Receive kim tra
Nhn Create Mail, to mail gi cho u2
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 126

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Ti khon mail : u2@athena.edu.vn
Incoming & outgoing : mail.athena.edu.vn
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 128

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Nhp vo Tn v Pass ca user u2 to trn my DC
Tab Server
Tab advanced
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 129

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Nhn Send & receive kim tra.
Thy c mail t u1 gi ra
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 130

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Reply mail li cho u1
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 131

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
gi thnh cng
U1 nhn c mail t u2
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 132

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
b. Publish OWA
Ti my DC. M IIS v b check require secure channel SSL
Truy cp OWA bng port 80 ( http ) vi tn : http://exchange.athena.edu.vn/owa
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 133

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Truy cp OWA bng port 443 ( https) vi tn : https://exchange.athena.edu.vn/owa
Ti my ISA 1 to rule publish OWA, chut phi vo Firewall Policy chn Exchange
Web Client .
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 134

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
t tn rule l publish owa
Chn phin bn l exchange 2007, check vo mc OutLook Web Access.
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 135

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Mc Publishing Type, chn Publish a single web
Mc Server Publishing Security, chn use non secure
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 136

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Mc Internal Publishing Detail, in tn internal site v ip ca my DC nh hnh
in tn public name nh hnh. y chnh l tn m Client t bn ngoi s s dng truy

cp.
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 137

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Nhn Next to web listener vi tn web port 80 ng vi port 80
Mc select Web listener, chn do not require SSL
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 138

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Mc Web Listener Ip Address, chn external
Mc Authentication, chn no authentication
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 139

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Mc Authentication Delegate, chn no delegation
Mc User Sets chn All user. Nhn Next ri chn Finish. Apply ri Ok.
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 140

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Kim tra ti my Internet. M Browser, nhp http://mail.athena.edu.vn/owa
Logon u2
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 141

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Gi mail cho u1
Gi mail thnh cng
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 142

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Ti my DC truy cp bng OWA v logon u1
Thy nhn c mail ca u2
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 143

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
c. Publish Web server

Trn my PC2 to trang web index.htm vi ni dung ty . M IIS v to thm web site tn
Web .
Chut phi vo Web v chn Properties, ti tab Website chn port 8080
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 144

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Tab Home Directory tr v ni cha source web .
Chut phi vo mc Web chn Browse, kim tra
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 145

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Trn IE nhp a ch : http://athena.edu.vn:8080
Tng t trn my ISA to 1 rule publish website vi tn l Publish web
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 146

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
in tn site internal v ip my DC nh hnh .
To Web listener ng vi port 8080
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 147

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Tn publish site : www.athena.edu.vn
ng dn g vo : /*
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 148

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Ta cn phi Bridge port 8080
Kim tra trn my Internet. Nhp a ch : http://www.athena.edu.vn:8080
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 149

-----------------------------------------------------------------------------
Tel: (08) 3824 4041 - Hotline: 090 7879 477
Bn c th tham kho video Demo theo cc link sau :

http://www.mediafire.com/?iy8s94r05502h
http://www.mediafire.com/?n8277sk775grcpl
http://www.mediafire.com/?dt8xe1x8q7h7dan
Hoc :
http://tailieu.athena.edu.vn/Microsoft/Video%2070-351/LAB%205%20%20ACCESS%20TO%20INTERNAL%20RESOURCE/
http://tailieu.athena.edu.vn/Microsoft/Video%2070-351/LAB%206%20%20INTERGATED%20TO%20EXCHANGE%20SERVER/
Nh vy, chng ta publish cc dch v cn thit cc client t bn ngoi c th giao tip.

phn tip theo chng ta s tm hiu v chc nng VPN trn ISA.
Thc hin : V Anh Duy
Lu hnh ni b
Trang : 150

Lab Thuc Hanh Isa 2006 Toan Tap Phan 3 1659

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Lab Thuc Hanh Isa 2006 Toan Tap Phan 3 1659

Uploaded by

Copyright:

Available Formats

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING

Chng ta s bn lun thm v vn Application Filter tp 2. Cc bn c th tham kho

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

Phn 4 : Server Publishing

Publising Rule cho php cc Clients t Internet c th kt ni vo Web Server, Mail

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

- My ISA : logon athena/administrator ci thm dch v DNS ti y.

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

Ca s Dynamic update chn do not allow

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

Xa host c to ra ng vi interface Local

Tng t ti mc Reverse lookup zone to New Zone, chn Primary Zone

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

Chn do not allow

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

Ti Reverse lookup zone, phi chut chn New Pointer

To pointer ng vi Interface Public

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

Chn only the following IP , v Remove ip 192.168.2.111

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

Sau Restar li dch v DNS

Kim tra phn gii DNS trn my ISA

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

Tip theo, trn my ISA to rule publish DNS

Chn non-web server , t tn rule l publish DNS

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

in Ip trn card Lan

Mc Select Protocol, chn DNS server

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

Mc Network Listener Ip Address, chn External

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

Kim tra trn my Internet

Chnh Preferer DNS v IP ca card ngoi my ISA

a. Publish Mail Exchange Server :

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

Chn protocol : POP3, POP3S, IMAP, IMAPS, SMTP, SMTPS .

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

Mc Access Rule Source chn Internal

Mc Access Rule Source chn External

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

Ti giao din Welcome, t tn publish Exchange

Thc hin : V Anh Duy

NETWORK ADMINISTRATION & SECURITY TRAINING

Giao din Select Access Type, chn Client access .