Lab 09

The principle issue in firewalls is to block everything and allow only what you need. Your job in this lab is to audit the firewall settings and remove access to any port or program not needed. For this you will need your documentation on services.

Documentation

Include the following information in a new page called "security" for each server:

  1. A list of ports that you allow inbound access to. Sort them by profile and then port number.
  2. Separately, if the rule does not apply to a port, list the application that the rule applies to.
  3. Separately, list those rules that are disabled.
  4. Edit your firewall to allow port forwarding to your website (see the scripts from the first lab and in person lab directions)

You might find the following commands useful: 

   1 Get-NetFirewallRule
   2 Get-NetFirewallPortFilter
   3 Get-NetFirewallApplicationFilter

Video Grade Guide

Topics

Points

Talk your way through the documentation.

60

Demo going to your website from the lab network (i.e. you should be going to a IP that looks something like: 10.10.4.x)

40

WindowsAdministration/Lab09Firewall (last edited 2021-11-04 19:35:13 by scot)