You are on page 1of 50

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

LI M U
---ooOOoo--Ti liu c thc hin nhm mc ch gip cc bn hc vin cng c kin thc v cng
thng qua , h tr cc bn tt hn trong vic thc hnh Lab ti nh.
Xin chn thnh gi li cm n n GV-Trn Vn An, GV-L nh Nhn, MCT-L
Ngc Hin, MCT-o Duy Hiu, anh Trn Quc Ton chia s nhng thng tin,
nhng kinh nghim thc tin, qua gip cho vic thc hin ti liu c tt hn.
Xin chn thnh cm n trung tm o To & Qun Tr Mng Athena to iu kin
cho ti thc hin ti liu ny.
Ti liu c phn lm 2 tp :
+ Tp 1 : Khi qut v trin khai ISA Server 2006 trn m hnh Bastion Host. Trong
phn ny c s dng video demo do GV-Trn Vn An cung cp.
+ Tp 2 : Phn tch v trin khai h thng Firewall ng vi cc m hnh phc tp
thng qua hai dng sn phm ca Microsoft : ISA Server 2006 & Threat Management
Gateway 2010.
Trong qu trnh thc hin, chc chn s khng trnh khi nhng sai st. Mi s ng gp
kin ca cc bn s gip cho ti liu ngy cng hon thin hn. Cc bn c th lin h theo
a ch email sau : duyva@athenavn.com hoc wuyingwei@live.com

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 1

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

ISA Server 2006 l phin bn tip theo ca sn phm Microsoft ISA Server. C mt s
tnh nng mi so vi phin bn ISA 2004 nh :
+ Pht trin h tr OWA, OMA , ActiveSync v RPC/HTTP publishing.
+ H tr SharePoint Portal Server.
+ H tr cho vic kt ni nhiu certificates ti 1 Web listener.
+ H tr vic chng thc LDAP cho Web Publishing Rules.
Bn c th ti ISA Server 2006 theo link sau :
http://www.mediafire.com/?j5tfnfzimz7un4c
Trong ti liu ny bi Lab gm cc phn nh sau :
1.
2.
3.
4.
5.
6.
7.

Ci t ISA 2006
Access rule
Application & web filter
Server Publishing
VPN
Caching
Monitor

Trong sut ti liu ny, m hnh Bastion Host s c p dng.

Cc bi Lab s s dng chng trnh VMWare WorkStation phin bn 7.1.4 build385536. y l 1 ng dng cho php bn c th chy nhiu my tnh o s dng chung cc
thit b phn cng.
Bn c th ti chng trnh theo link sau :
http://www.mediafire.com/?9a0pf30g5jlpp
Password download : athena

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 2

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Chng ta s xy dng v s dng 3 my tnh o theo m hnh sau :


S mng 1
Mng

Card mng Card LAN


My ISA Server IP Address: 172.16.1.1

My DC

Card WAN
IP Address: 192.168.2.111

Subnet Mask: 255.255.255.0

Subnet Mask: 255.255.255.0

Gateway:

Gateway: 192.168.2.1 (a ch Router)

Preferred DNS: 172.16.1.2

Preferred DNS:

IP Address: 172.16.1.2

Khng thit lp

Subnet Mask: 255.255.255.0


Gateway: 172.16.1.1
Preferred DNS: 172.16.1.2

My internet Khng thit lp

IP Address: 192.168.2.112
Subnet Mask: 255.255.255.0
Gateway: 192.168.2.1 (a ch Router)
Preferred DNS: 8.8.8.8

s dng chng trnh VMWare, bn c th tham kho theo link sau :


http://www.mediafire.com/?9a0pf30g5jlpp
Hoc :
http://forum.athena.edu.vn/mang-co-ban-acbn/1436-huong-dan-su-dung-vm-ware.html
ng mng trong ( internal ) ni my DC vi my ISA Server ta s chn kiu ng mng
l VMNet2

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 3

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Athena Research Team

ng mng ni my internet v my ISA Server ta s chn ch Bridged.

Athena Research Team

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 4

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

My tn internet l my i din cho cc traffic t External kt ni n my ISA server.


Cu hnh thng s Ip trn my Internet. y ta s gi lp mng 192.168.2.0/24 l mng t
External .

Athena Research Team

My tn ISA Server s ci t ISA Server 2006, my ny s c 2 interface. Ta t tn cho 2


interface ny nh sau :

LAN : kt ni ti cc traffict trong Internal.


WAN : kt ni ti cc traffict External.

Cu hnh thng s Ip trn 2 interface ny :

Athena Research Team

Thc hin : V Anh Duy

Athena Research Team

Lu hnh ni b

Trang : 5

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

My tn DC l my i din cho cc traffic t Internal n my ISA. Ti my ny ta s nng


cp thnh Domain Controller, Mail Server, Web Server . Cu hnh thng s Ip trn my ny.

Kim tra kt ni t my DC n my ISA

Kim tra kt ni t my ISA n my DC

Kim tra kt ni t my ISA ra Internet

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 6

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Tip theo, trn my DC ta s to cc i tng sau :


OU
Group
User

Maketing
Maketing
Ma1\ 123abc!!!
Ma2\ 123abc!!!

Thc hin : V Anh Duy

Sale
Sale
S1\ 123abc!!!
S2\ 123abc!!!

Training
Traning
T1\ 123abc!!!
T2\ 123abc!!!

Lu hnh ni b

Manager
Manager
Man1\123abc!!!
Man2\ 123abc!!!

Trang : 7

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

My DC kim tra dch v DNS ng vi mng 172.16.1.0/24

Nh vy, vic chun b cho m hnh hon tt. Tip theo chng ta s i tm hiu v trin
khai m hnh ng vi cc chc nng : Access rule, Application & web filter , Server
Publishing, VPN, Caching, Monitor.

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 8

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Phn 1 : Ci t ISA 2006


Phn ny gm cc phn sau :
1.
2.
3.
4.
5.
6.

Ci t ISA Server 2006.


Cu hnh Secure Nat.
Cu hnh Web Proxy Client.
Ci t v cu hnh Firewall Client.
Cu hnh Auto Discovery.
To Access Rule kim tra kt ni Internet.

Chun b :
My DC: Windows Server 2003 nng cp ln Domain Controller
My ISA Server: Windows Sever 2003 Join domain
Da vo m hnh ra, ta thit lp nh sau :
1. Ci t ISA Server 2006.
Ti my DC vo th mc cha b ci t ISA SERVER 2006, chy file isaautorun.exe

Chn Install ISA Server 2006

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 9

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Athena Research Team

Hp thoi Welcome to the Install Wizard, nhn Next

Athena Research Team

Chn I accept the terms in the license agreement, nhn Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 10

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Nhp Username, Organization, Product Serial Number, sau Bm Next

Chn Typical v bm Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 11

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Trong hp thoi Internal Network, nhn chn Add

Sau bn chn Add Adapter

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 12

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Bn chn Card Lan, khai bo ng mng ni b m bn cn qun l. Nhn Ok tip


tc .

Kim tra li v nhn Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 13

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Tip theo trong hp thoi Firewalll Client Connections, nhn Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 14

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Tip theo bn theo mc nh v nhn Next

Hp thoi Ready Install to Program. Bm Install bt u qu trnh ci t

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 15

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Installation Wizard Completed, nhn Finish

Mc nh sau khi ci ISA server xong, Default rule s cm cc traffict t bn ngoi kt ni


ti my ISA, t bn trong kt ni ti my ISA .

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 16

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

T my DC, bn Ping n my ISA ( 172.16.1.1 )

T my ISA bn ping n my DC ( 172.16.1.2 )

T my ISA bn ping n a ch ca my Internet ( 192.168.2.112 )

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 17

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

My ISA sau khi ci t ISA 2006 v kim tra cc rules chun. Sau tin hnh join vo
domain dng sn trn my PC2 ( athena.edu.vn ). Chng ta s bn lun vn ny thm
tp 2 ca ti liu ny.
2. Cu hnh Secure Nat cho Client :
Cc my trong mng Internal ch vic thit lp thng s Default Gateway l Ip ca my ISA.

By gi, ti my ISA, ta s thit lp 1 access rule cho vic truy cp ra ngoi External .
M ISA Server Management, chut phi Firewall Policy, chn New, chn Access Rule

Hp thoi Access Rule Names, t tn rule l: Allow to Internet

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 19

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Rule Action, bn chn Allow

Hp thoi Protocols, chn All outbound traffic

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 20

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Access Rule Sources, nhn Add, chn 2 mc: Internal v Localhost

Hp thoi Access Rule Destinations, nhn Add, chn External

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 21

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi User Sets, chn All User

Nhn Finish hon tt rule

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 22

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Nhn Apply

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 23

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Kim tra vic truy cp n www.google.com

Ta cng c th s dng DHCP Server vi Option 003 Router cu hnh Gateway cho cc
my Clients trong LAN.
3. Cu hnh Web Proxy Client.
Ti my DC, m Internet Explorer. Chn Tool \ chn Internet option \ chn Tab
Connection \ chn mc LAN Setting.
Mc Proxy Server in Ip ng vi Card Lan ca my ISA, port : 8080

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 24

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Kim tra li vic kt ni n trang http://athena.edu.vn

Tuy nhin vic thit lp Proxy trn tng Client nh vy s mt rt nhiu thi gian cho ngi
qun tr. Bn c th thit lp Policy trn Domain cho cc Client.
Ti my DC, m Active Directory Users and Computers. Chut phi vo athena.edu.vn
chn properties.

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 25

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Chn tab Group Policy, bn chn New v t tn proxy for client . Sau nhn Edit

Vo User Configuration \ Windows Settings \ Internet Explorer Maintenance


\ Connection

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 26

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Chn tip Proxy Settings v Double Click . in Ip card LAN ca my ISA, port 8080

Ta p tip 1 policy cm Client c th thay i thng s Proxy.


Vo User Configuration \ Administrative Templates \ Window Components\
Internet Explorer. Chn tip Disable Changing Proxy Settings

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 27

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Cui cng l gpupdate /force .


4. Ci t v cu hnh Firewall Client
Ti my DC, logon athena\Administrator
- Ci t ISA Firewall Client trong a CD ci t (th mc Client)

Hp thoi Welcome to the Install, nhn Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 28

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Tip theo bn nhn accept v ci t theo mc nh.

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 29

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi ISA Server Computer Selection, nhp vo a ch IP ca my ISA Server, nhn


Next

Chn Install

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 30

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

5. Cu hnh Auto Discovery


Ti my ISA. M ISA Server Management, phn Configuration, chn Network. khung
bn phi, right click Internal, chn Properties

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 32

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Chn tab Auto Discovery, nh du check vo Publish automatic discovery information


for this network

Ti my DC, m DNS manager


Click phi vo zone athena.edu.vn chn New Alias (CNAME)

Nhp WPAD vo Alias name

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 33

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

khung FQDN, bn Browse n my ISA Server

Sau bn Restart li DNS

M ISA Firewall Client, vo tab Setting, chn Automatically detected ISA Server, chn
Detect Now, kim tra my client detect uc tn my ISA Server.

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 34

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Bn c th tham kho Video demo theo link sau :


http://tailieu.athena.edu.vn/Microsoft/Video%2070-351/LAB%202%20%20ISA%20CLIENT/
Hoc : http://www.mediafire.com/?tvf8b60bh14t1
Nh vy, chng ta ci t ISA Server cho m hnh v kho st qua cc loi Firewall
Client. Tip theo ta s tm hiu v phn Access Rule.

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 35

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Phn 2 : Access Rule


Sau khi ci t ISA cho m hnh, chng ta thy ISA phn tch h thng thnh 3 vng
chnh : Internal, Local Host ( ni t ISA), External . Mc nh, h thng s b tc ng bi
Default Rule nh c trnh by phn trn.
Trong phn ny, chng ta cn nm nhng khi nim sau :
Network Definition : khong a ch Ip kt ni ti ISA Server, khong Ip ny c
nh ngha bng 1 Network Name. ISA s qun l khong Ip ny thng qua Network Name
ny.
nh ngha Network Name, trn ISA Server Management ta chn mc Confirugation,
chn tip mc Network.

Network Rule : quy nh cc mi lin h gia cc Network, cc mi lin h ny


c ISA Server kt ni vi nhau. Khi h thng ca bn c nhiu Network, ISA s quy nh
mi quan h ca cc Network thng qua 2 c ch : Route v NAT. Ta s cp tip vn
ny nhng phn sau.

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 36

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Access Rule : quy nh nhng traffict no s c i qua ISA Server. y l thnh


phn quan trng ca ISA Server. Chng ta s tm hiu v Access Rule thng qua nhng tnh
hung c nu ra cc mc bn di .

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 37

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Default Rule cm mi traffic ra vo thng qua ISA Server. Nh vy, cc my


trong Internal truy cp ra ngoi bng domain name, cn phi c DNS Server phn gii cc
domain name ny. y ta s s dng DNS Server ca ISP .
Ta s to rule truy vn DNS phn gii tn min bn ngoi.
Ti my ISA Server, m ISA Server Management, phi chut vo Firewall Policy,
chn New, chn Access Rule

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 38

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Access Rule Names, t tn rule l: DNS Query

Hp thoi Rule Action, chn Allow

Hp thoi Protocols, chn Selected Protocols v nhn Add


Trong hp thoi Add Protocols, bung mc Common Protocols, chn DNS, nhn Add,
nhn Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 39

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Access Rule Sources, Add : Internal v Local Host. Thc t th ta khng nn
chn Local Host.

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 40

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Access Rule Destinaton, Add : External, nhn Next

Hp thoi User Sets, chn All Users, nhn Next

Hp thoi Completing the New Access Rule Wizard, kim tra li thng tin v Rule ln
cui, sau nhn Finish. Nhn chn Apply, Ok .

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 41

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Kim ta li kt qu: trn my ISA

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 42

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

My DC :

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 43

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Tuy nhin, lc ny ta ch mi cho php cc traffic t Internal c truy vn DNS ra bn


ngoi thng qua port 53. Do , cc my Internal c php truy cp ra ngoi s dng
nhng dch v khc na, ta cn phi to thm rule thng qua cc tnh hung di y.
Tnh hung 1 : cty Athena cho php cc nhn vin thuc nhm Maketing c php
truy cp Internet khng hn ch.
Group Maketing c to trc trn my DC phn trc, tip theo ta ch vic nh
ngha cc i tng ny trn my ISA. qun l c cc domain user ta phi joint my
ISA vo domain athena.edu.vn.

Trong ca s ISA Server Management, ti ca s th 3, chn tab Toolbox, bung mc


Users, chn New, hp thoi User set name, t tn l Maketing ri nhn Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 44

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Users, nhn Add, chn Windows users and groups

Add 2 users Man1 v Man2 vo hp thoi Users

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 45

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Trong hp thoi Completing, chn Finish. Nhn Apply .

Thc hin tng t cho cc i tng cn li.

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 46

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Bc tip theo ta s to access rule theo yu cu trn. Chut phi Firewall Policy, chn
New, chn Access Rule
Hp thoi Access Rule Names, t tn rule l: Allow Maketing Full Access

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 47

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Rule Action, chn Allow

Hp thoi Protocols, chn All outbound traffic

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 48

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Access Rule Sources, add Internal, chn Next

Hp thoi Access Rule Destinaton, add External, chn Next

Hp thoi User Sets, remove group All Users, v add group Maketing vo, chn Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 49

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Completing the New Access Rule Wizard, chn Finish

Nhn chn Apply, chn OK


Kim tra kt qu
Logon user athena\Ma1

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 50

You might also like