windows2000windowsxp網(wǎng)絡(luò)安全(存儲(chǔ)版)
【正文】 lk) ? IP security ? Outbound restrictions, too ? End system filtering with IPSec ? Perimeter filtering 防范 ? 經(jīng)過(guò)保護(hù)的通信 ? Digitally sign and encrypt ? App: SSL/TLS connections ? Admin: IPSec transport mode ? Admin/User: VPN Tunnels – PPTP, L2TP/IPSec ? May limit ability to inspect, but can you really? ? Anonymous access is fine for public information ? Consider what’s truly “public” ? If you have to log on to get info, then it’s not “public” Windows XP Inter Connection Firewall ? Addresses threat of unsolicited work access Inter Connection Firewall ? In Windows XP Home, Windows Professional, Windows Server ? Enabled on a perinterface basis ? Drops all IP unicast traffic inbound ? Exempts multicast, broadcast ? Unless a mapping exists ? No “danger” dialogs ? Users don’t understand ? Users unable to take action Inter Connection Firewall ? Stateful perconnection flow entry ? Uses source and destination ports on outbound connection to create flow entry ? Connections closed by ? TCP: ACKFIN and RST ? UDP: Timeout ICF 激活要點(diǎn) ? Out of box experience (OOBE) Wizard ? On firstboot on Home Edition ? Network setup wizard ? Sets up home and small office works ? Available on Home and Professional ? New connection wizard ? Enabled by default for DUN, PPPoE ? Option to enable on VPN ? Network connections folder ? Properties sheet of work connection ICF 使用場(chǎng)景 ? Home ? Enable on single PC directly connected to the Inter via broadband ? Enabled when Inter Connection Sharing used for home working ? Business and mobile ? Group policy flag can disable for enterprise ? Location awareness allows user to take laptop and protect it while outside the office ICF 服務(wù)選項(xiàng) ? Allows users who run services on local PC or home work to create port mappings ? Provide set of predefined services ? User can create new mappings ICF 日志選項(xiàng) ? No logging by default ? Option to log unsuccessful connections ? Option to log successful connections ? Option for log file name, location, and size ICF ICMP 選項(xiàng) ? Disabled ICMP options ? Type 3 ? Type 4 ? Type 5 ? Type 8 ? Type 10 ? Type 11 ? Type 12 ? Type 13 ? Type 17 ICF Protection Windows 2023 和 Windows XP Inter 協(xié)議安全 ? Addresses threats: ? Unsolicited work access ? Passive interception of sensitive work traffic ? Trusted users having too much work access IPSec 功能 ? IP Packet Filtering ? Permit, block, negotiate security ? Secure munication ? Mutual authentication ? Sender and receiver know each other, trust ? Packet confidentiality = Encryption ? Only sender and receiver know contents ? Packet integrity = Cryptographic Checksum ? Tampered packets are discarded ? Adminis
教學(xué)課件相關(guān)推薦
鄂ICP備17016276號(hào)-1