You are on page 1of 50

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

M Command Prompt g lnh nslookup. Phn gii cc tn min External .

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 51

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Truy cp trang : http://athena.edu.vn

Tnh hung 2 : cty Athena a ra yu cu cho php cc nhn vin thuc cc phng
ban : Sale, Training c php truy cp Web khng gii hn.
tnh hung 1, yu cu t ra l cho php c Internet khng hn ch. Tuy nhin, tnh
hung th 2 ny, ta ch cho php truy cp dch v Web. Nh vy, ta ch cho php cc
Protocol : HTTP,HTTPS l .
Trong ca s ISA Server Management, chn Firewall Policy, chn New, chn Access
Rule

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 52

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Access Rule Names, t tn rule l: Allow user access Web

Hp thoi Rule Action, chn Allow

Hp thoi Protocols, chn Selected Protocols v nhn Add. Trong hp thoi Add
Protocols, bung mc Common Protocols, chn HTTP v HTTPS, nhn Add. Nhn
Next .

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 53

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Access Rule Sources, add Internal

Hp thoi Access Rule Destinaton, add External, chn Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 54

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi User Sets, remove group All Users, v add group Sale v Training vo, chn
Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 55

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Completing the New Access Rule Wizard, chn Finish

Kim tra kt qu
Logon user athena\s1

Truy cp trang : http://forum.athena.edu.vn

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 56

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Truy cp trang : https://ebanking.dongabank.com.vn

Tnh hung 3 : Khi cc nhn vin ca cng ty s dng my tnh c tn exchange th


s khng c truy cp internet. Ta thit lp rule ny nh sau :
Trong ca s ISA Server Management, chn Firewall Policy, chn New, chn Access
Rule. Hp thoi Access Rule Names, t tn rule l: Deny user use Exchange access
Internet.

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 57

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Protocols, chn All outbound traffic

Hp thoi Access Rule Sources, nhn add chn Computer Set, chn my exchange,
chn Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 58

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Access Rule Destinaton, add External, chn Next

Hp thoi User Sets, remove group All Users, v add cc group Sale, Training,
Maketing, Manager vo, chn Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 59

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Completing the New Access Rule Wizard, chn Finish

Ti my Exchange kim tra :

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 60

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Tnh hung 4 : tng tnh hiu qu trong gi lm vic, cty Athena yu cu cc


nhn vin trong gi lm vic ch c truy cp mt s trang Web nh
: http://athena.edu.vn, http://forum.athena.edu.vn , http://www.nhatrang-itt.vn. Gi lm vic
c quy nh : 8h-12h sng v 14h 18h chiu.
Ta s nh ngha cc trang Web c php truy cp nh sau :
Trong ca s ISA Server Management, chn Firewall Policy, qua ca s th 3, ti tab
Toolbox, bung mc Network Objects, nhn New, chn URL Set

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 61

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Trong hp thoi New URL Set. Name , nhp tn: Allow Web, nhp cc trang web m
bn cho php

Tng t nh vy, ta nh ngha lun cc trang Web khng cho php vi tn l Restrict
Web.

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 62

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Tip theo, ta s nh ngha khong gi lm vic ca cty nh sau :


Trong ca s ISA Server Management, chn Firewall Policy, qua ca s th 3, ti tab
Toolbox, bung mc Schedules, chn New

Trong Name, nhp tn Work Time. Bn di chn t (8h - 12h) v t (2h 6h)

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 63

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Tng t, bn to thm Rest time t 12h-2h

Cui cng, ta s nh ngha rule cho tnh hung ny.


Chut phi Firewall Policy, chn New, chn Access Rule. Hp thoi Access Rule
Names, t tn rule l: Users on Work Time

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 64

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Rule Action, chn Allow

Hp thoi Protocols, chn Selected Protocols v nhn Add. Trong hp thoi Add
Protocols, bung mc Common Protocols, chn HTTP v HTTPS, nhn Add. Nhn
Next .

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 65

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Access Rule Sources, add Internal

Hp thoi Access Rule Destinaton, nhn Add. Bung URL Sets, chn Allow Web. Nhn
Next .

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 66

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi User Sets, chn All Users, nhn Next

Hp thoi Completing the New Access Rule Wizard, nhn Finish. Chut phi ln rule
Users on Work Time, chn Properties

Qua Tab Schedule, trong khung schedule, chn l Work Time , Nhn OK

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 67

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Kim tra kt qu.


Log user athena\t1 kim tra

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 68

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Truy cp trang http://www.vnexpress.net

Truy cp trang : http://www.nhatrang-itt.vn

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 69

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Tnh hung 5 : trong gi gii lao, cc nhn vin c truy cp mi trang Web ngoi
tr trang : http://24h.com.vn . Ta thit lp nh sau :
Trong ca s ISA Server Management, chut phi Firewall Policy, chn New, chn
Access Rule. Hp thoi Access Rule Names, t tn rule l: Users on Rest Time

Hp thoi Rule Action, chn Allow.

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 70

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Protocols, chn Selected Protocols v nhn Add. Trong hp thoi Add
Protocols, bung mc Common Protocols, chn HTTP v HTTPS, nhn Add. Nhn
Next

Hp thoi Access Rule Sources, add Internal, nhn Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 71

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Access Rule Destinaton, add External, nhn Next

Hp thoi User Sets, chn All Users, nhn Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 72

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Completing the New Access Rule Wizard, nhn Finish


Chut phi ln rule Users on Rest Time, chn Properties

Qua Tab Schedule, trong mc Schedule, chn Rest Time. Qua tab To, khung
Exceptions, nhn Add. Bung mc URL Sets, chn Restrict Web

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 73

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Nhn Apply, chn OK


Tng t qua tab Schedule chn Rest time

Kim tra kt qu .
Log on user athena\man1 kim tra

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 74

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Truy cp cc trang http://24h.com.vn/ v http://bongdaso.com; http://google.com

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 75

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Tnh hung 6 : cty cho php cc nhn vin c php gi mail trong gi lm vic.

Ta thit lp rule nh sau :


Trong ca s ISA Server Management, chut phi Firewall Policy, chn New, chn
Access Rule. Hp thoi Access Rule Names, t tn rule l: Allow Send Mail on Work
Time

Hp thoi Rule Action, chn Allow

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 76

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Protocols, chn Selected Protocol, nhn Add .


Trong hp thoi Add Protocols, bung mc Mail, chn SMTP, POP3, SMTPS, POP3S,
IMAP4, IMAPS nhn Add . Nhn Next

Hp thoi Access Rule Sources, Add Internal, nhn Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 77

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Access Rule Destinaton, add External, nhn Next

Hp thoi User Sets, bn chn All Users

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 78

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Completing the New Access Rule Wizard, Finish


Nhn chn Apply, nhn OK

Chut phi ln rule Allow send mail on Work Time, chn Properties. Qua Tab
Schedule, trong mc Schedule, chn Work Time

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 79

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Nhn Apply, chn OK


User dng Outlook Express gi mail kim tra kt qu.

Tnh hung 7 : Chnh sch cng ty Athena yu cu cc nhn vin khng c truy
cp trang Web: http://bongdaso.com trong thi gian lm vic v k c thi gian ngh. Nu
vn c truy cp s hin thng bo. Ta thit lp yu cu nh sau :
Trong ca s ISA Server Management, chut phi Firewall Policy, chn New, chn
Access Rule. Hp thoi Access Rule Names, t tn rule l: Deny Access Web

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 80

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Rule Action, chn Deny

Hp thoi Protocols, chn Selected Protocol, nhn Add. Trong hp thoi Add
Protocols, bung mc Common Protocols, chn HTTP v HTTPS, nhn Add. Nhn
Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 81

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi Access Rule Sources, Add Internal, nhn Next

Hp thoi Access Rule Destinaton, nhn Add. Bung mc URL Sets, add Deny Web.
Nhn Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 82

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Hp thoi User Sets, chn All Users

Hp thoi Completing the New Access Rule Wizard, nhn Finish


Chut phi vo rule Deny and Redirect Web, chn Properties
Trong hp thoi Deny and Redirect Web Properties, qua tab Action, nh du check
vo mc Redirect HTTP requests to this Web Page, khung bn di nhp vo trang
web : http://172.16.1.2 ( Host cha trang Web cnh bo )

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 83

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Kim tra kt qu
User logon v truy cp trang http://24h.com.vn kim tra kt qu

Export rule :

Trong ca s ISA Server Management, chut phi Firewall Policy, chn Export

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 84

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Giao din Welcome ta nhn Next

Giao din Export Preference, chn Export Confidential Information v g Password .

Giao din Export File Location, chn Browse v chn ni lu tr Access Rule.

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 85

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Kim tra li v nhn Next v nhn Finish .

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 86

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Import rule :
Trong ca s ISA Server Management, chut phi Firewall Policy, chn Import

Giao din Welcome ta nhn Next

Giao din Select the Import File, nhn nt Browse v file c Export .
Nhn Next tip tc, v nhp vo PassWord.

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 87

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Kim tra li v nhn Finish .

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 88

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Bn c th tham kho Video demo theo cc link sau :


http://www.mediafire.com/?3sa8b5wch99yb
Hoc :
http://tailieu.athena.edu.vn/Microsoft/Video%2070-351/LAB%203%20%20ACCESS%20TO%20INTERNET%20RESOURCE/
Nh vy, vi vic kt hp cc Access Rule ta c th qun l vic truy cp t mng ni ra bn
ngoi hay ngc li. Tuy nhin, hiu qu hn th ta phi kt hp vi Application Filter.
chnh l ni dung tm hiu phn tip theo.

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 89

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Phn 3 : Application & web filter


Application Filter l phn m rng ca Microsoft cho php cc hng th 3 c th pht
trin cc ng dng tch hp vo ISA Server. Mt trong cc hng pht trin Addin cho ISA
Server l GFI. Tham kho GFI ti trang web : www.gfi.com. GFI h tr ISA Server phn
HTTP Filtering kh tt.
Web Filter cho php ISA Server qun l c Packet Data tng Application. Web
Application Filter c s dng nhiu nht trn cc Application Firewall v lin quan n
Web Traffic .

Microsoft cn cung cp cho ngi dng v cc Developers phn ISA Server SKD c
th t lp trnh hoc thay i ISA Server theo hng pht trin ca ring mnh. Cc Add In
ca ISA Server c th Enable/Disable bng cng c ISA Server Management Console trong
mc Addins .

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 90

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Download ISA Server SDK ti a ch :


http://www.microsoft.com/downloads/details.aspx?FamilyID=16682c4f7645
427997e49a0c73c5162e&DisplayLang=en
Trong phn Addin gm tt c cc Application Filter ca ISA Server 2006, gm 2 phn:
Application v Web Filter. Cc Application Filter:

Chn Tab Web Filters xem cc Filter s dng cho Web

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 91

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Chng ta c th Enable/ Disable cc Addins ny bng cch Click phi chut chn Enable/
Disable

HTTP Web Filter


Mc nh tt c cc Traffic no i qua ISA Server bng Protocol HTTP u b mt
Application mang tn Web Proxy Filter trong ISA Server tc dng. Filter ny c chc nng
chn tt c cc Web Traffic v thc hin chc nng SemiNAT n Web Server. a ch IP
ca Clients vn c hin th trong gi tin, nhng ISA Server c quyn kim sat ni dung
gi tin gi i.
Ta vo ISA Server Management Console, Chn Firewall Policy

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 92

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Chn tab Tool Box trong Task Pane v tm Protocol HTTP, chut phi chn Properties.

Ti mc Application Filter

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 93

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Ta khng th Disable Default rule ny, m ch c th check hoc khng check mc


Application Filter.
Yu cu ca cty Athena t ra cho cc nhn vin ca phng ban Maketing trong gi lm
vic khng c nghe nhc trc tuyn, khng c down load cc file c phn m rng l
*.mp3, *.exe, *.avi. Ngoi ra, cng khng c chat bng Yahoo Messenger.
Ta s thit lp yu cu ny nh sau :
Ti my ISA Server, trong ca s ISA Server Management, chut phi ln rule Maketing,
chn Configure HTTP.

Qua tab Extensions, trong khung Specify the action taken for HTTP methods, chn Block
specified methods (allow all others)

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 94

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Nhp vo nhng nh dng file m bn mun cm : *.mp3, *.exe, *.avi.

Chut phi ln rule Maketing, chn Properties, qua tab Content Types, khung This rule
applies to, chn Selected content types

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 95

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Trong khung Content Types b du chn Audio v Video ( user khng nghe nhc
trc tuyn). Nhn Apply, chn OK .

i vi Yahoo Messenger, ta s chn bng Signatures. Chut phi ln rule Maketing, chn
Configure HTTP Qua tab Signatures, nhn Add. khung Name, nhp tn: Deny Yahoo
Messenger

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 96

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Khung Search in, chn ty chn: Request headers


Khung HTTP Header, nhp: Host:
Khung Signature, nhp: msg.yahoo.com. chn OK

Nhn Apply, chn OK


Ngoi ra, ta cng cn nh ngha thm cc Protocol Definition trn ISA Server qun l
cc TCP port 5050, 5100 v 5000 cho ba dch v Chat,Voice v Webcam ca Yahoo
Messenger. Sau s gn thm vo rule trn. Ta nh ngha nh sau :
Vo Task Pane, chn Tab Tool Box :

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 97

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Chn Menu New chn Protocol

Phn Name g tn hin th l Yahoo Messenger


Giao din Welcome nhn Next

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 98

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Giao din Primary Connection Information, chn New

Trong ca s to mi Protocol, chn Protocol l TCP, Port Range t 5050 n 5050. Ri Ok

Tng t, to thm cc port 5000 v 5100. Ri nhn Next .

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 99

ATHENA INTERNATIONAL

NETWORK ADMINISTRATION & SECURITY TRAINING


-----------------------------------------------------------------------------

Add: 02 Bis Dinh Tien Hoang Street, Dakao Ward, District 1, HCM
Tel: (08) 3824 4041 - Hotline: 090 7879 477
E-mail: training@athenavn.com - Website: www.athena.edu.vn

Giao din Secondary Connection chn No ri nhn Next

Kim tra li cc thng s v nhn Finish .

Thc hin : V Anh Duy

Lu hnh ni b

Trang : 100

You might also like