Eicon Networks S92 Manuale Utente Scaricare il pdf (Pagina 96)

YuChakTinMichael‘sGIACGCFWProjectAssignment

Page 96

Internal_Servers(192.168.18.0)configuredasTrusted.

ConfiguretheSecurityLevel:

Weneedthehighestpossiblelevelofsecurityhere. Tosetsuchsecurity,useCustom

Settings,andseteveryblockingoptiontoHigh.Allthealertoptionsshouldbe

enabledaswell.

ConfiguretheAdvancedOptions:

IntheAdvancedOptionssection,enablethefollowingoptions:

n BlockIGMPProtocol:IPmulticastisnottobeusedinournetworkanyway,so

thisoptionshouldbeblocked.

n StealthBlockedPorts:Thiscausestheblockedportstonotrespondtoenquiries

fromtheoutside.Suchoptioneliminatesthehacker’sopportunityoflearningany

unnecessary networkinformation.

n BlockFragmentedIPPackets:FragmentedIPpacketsareoftenusedasawayto

attacksystems.Thisoptiondisablessuchthreat.

ConfigureIntrusionDetection:

NortonFirewallcandetectportscanattemptsandautomaticallyblocktheattackers

frommakingfurtherconnectionattempts.

ConfigureLogging:

Weshouldalwaysoptforloggingasmuchinformationaspossible.SettheReporting

LeveltoHighandensurethatyourdriveislargeenoughtoholdthelargeamountof

loggeddata.

BasicTesting: 

n FromInternal_Dev,accessafileshareinInternal_Servers.Therequestshould

succeed.

n FromInternal_Dev,accessaninternetwebsiteviaISA_Cache’sport8080.The

1 2 ... 91 92 93 94 95 96 97 98 99 100 101 ... 208 209

Nessun commento

Eicon Networks S92 Manuale Utente Pagina 96