ipsec
cddf
IPSec policy configurations on Windows Server 2008 systems | Network Administrator | TechRepublic.com
@import url("http://i.techrepublic.com.com/css/tr2006.css");
@import url("http://i.techrepublic.com.com/css/tr_ws2006.css");
@import url("http://news.zdnet.com/css/z/ads/hs.css");
@import url("http://i.techrepublic.com.com/css/trBlog.css");
On CHOW:
Does drinking ice water burn calories?
BNET Business Network:
BNET |
TechRepublic |
ZDNet
My Workspace | My Newsletters
Log in | Get a free membership
Home
Blogs
Downloads
Forums
Photos
Videos
Webcasts
White Papers
Software
Jobs
Training
Store
in Blogs
all of TechRepublic
Network Administrator
Subscribe
Alerts
Mobile
Host: Selena Frye
Pick a blog category
anti-spam
antivirus
backups
battery fire
Biometric
Botnet
Contributors
cybercrime
data synchronization
Dial-in VPN
disaster recovery
DVD rot
E-mail
General
H.323
Infrastructure
Instant Messaging
Internet openness
Ipsec
Ipv6
Linux
mobile technology
NAT
network tools
News
Open Source
Patch Management
Pptp
Remote Access
router configuration
security
Servers
storage technology
System Administration
Telephony
Testing
Unified Communications
video conferencing
Virtualization
VoIP
VPN
Wireless
Contact
IPSec policy configurations on Windows Server 2008 systems
Date: April 21st, 2008
Author: Rick Vanover
Category: security, System Administration
Tags: Microsoft Windows Server, Configuration, Microsoft Windows Server 2008, Microsoft Windows Firewall, Microsoft Windows, IPSec, VPNs, Firewalls, Network Security, Operating Systems
0 comment(s)
Email
Save
Print
Digg This
Recomend
1
Windows XP, Server 2003, and 2000 use the same basic interface for implementing IPSec policies. Windows Server 2008 does these configurations in the Windows Firewall with Advanced Security snap-in (WF.msc), which is a big change from the simple port allow rules that were used in previous versions. Windows Firewall has mixed adoption levels, but now the port-level configuration is brought into the same configuration as Windows Firewall and more steps are required for simple port driven rules.
This sample configuration is to configure a port rule to allow a specific port, 7329 inbound, to a specific Web service running locally. From the Windows Firewall and Advanced Security console, select the Inbound rules section, then select New Rule in the right side bar as shown in Figure A:
Figure A
From this wizard, a port or ports (TCP and UDP) can be selected to have one of three behaviors applied. The configured ports can be either allowed without consideration, allowed if secured in another IPSec configuration, or denied without consideration. Figure B below shows this configuration part of the wizard:
Figure B
Once configured, there are three additional application levels that can be selected for this profile: this configuration can be applied to the network protocol stack when the system is connected to the Windows domain, to a private network, or to a public network. At that point, the rule is shown with the other inbound rules that are defaults from the Windows configuration, as in Figure C:
Figure C
From this you can see that the interface for the IPSec configuration is quite different than the 2003, 2000, and XP predecessors. However, some additional metrics such as public network, domain, or private network, as well as inbound and outbound are able to be configured in this new interface.
« Previous Post
Next Post »
What do you think?
Start a Discussion
Trackbacks
The URI to TrackBack this entry is: http://blogs.techrepublic.com.com/networking/wp-trackback.php?p=481
No trackbacks yet.
Recent Entries
Will the Internet hit full capacity by 2010?
Cisco’s co-founder wants to simplify fiber optic networks
Learn to configure Cisco IOS NAT on a stick
If you can’t stand the heat stay out of the electronics
Is your network ready for the mobile device explosion?
Top Rated
Fundamentals: Five ways to secure your Cisco routers and switches+20 votesImplement regular monitoring and improve Cisco router performance+14 votesRun Linux on your Cisco router with Cisco's new AXP module+12 votesDiscover the benefits of Cisco 2800 Series routers+7 votesEnable DNS server role on Windows Server 2008 core+6 votesKraken: The biggest, baddest botnet yet+6 votesLearn to configure Cisco IOS NAT on a stick+5 votesIronKey: Simple, safe, and secure surfing over Wi-Fi+4 votes
@import url("http://i.techrepublic.com.com/css/simplyHired.css");
TechRepublic Featured Jobs
Job Title/Location
Posted
Powered by:
.
Archives
April 2008
March 2008
February 2008
January 2008
December 2007
November 2007
October 2007
September 2007
August 2007
July 2007
June 2007
May 2007
April 2007
March 2007
February 2007
January 2007
December 2006
November 2006
October 2006
September 2006
August 2006
July 2006
June 2006
May 2006
April 2006
March 2006
February 2006
January 2006
December 2005
November 2005
October 2005
TechRepublic Blogs
10 Things
Career Management
Classics Rock
Decision Central
Geekend
IT by the Numbers
IT Consultant
IT Dojo
IT Leadership
IT Security
Linux and Open Source
Microsoft Office
Microsoft Windows
Network Administrator
Programming and Development
Servers and Storage
Tech of all Trades
Tech Sanity Check
TechRepublic Out Loud
User Support
Quick Reference: PC Troubleshooting Pack
Help desk and IT support professionals need the fastest and most complete answers to keep every PC in action. Get the PC troubleshooting solutions you ...
Buy Now
Microsoft PowerPoint Basics
This Microsoft PowerPoint Basics presentation provides a preformatted solution for teaching end users Microsoft PowerPoint fundamentals. The presentat ...
Buy Now
A ZDNet brand
Site Help & Feedback
About CNET Networks | Jobs | Advertise | Partnerships | Mobile
BNET |
CNET.com |
CNET Channel |
GameSpot |
International Media |
MP3.com |
mySimon |
Search.com |
TechRepublic |
TV.com |
ZDNet
Copyright © 2008 CNET Networks, Inc. All Rights Reserved. Privacy Policy | Terms of Use
I/O Virtualization
10 MORE things you should know about virtualization
Virtualization has probably affected every IT environment to one extent or the other. Here's a rundown of the things you need to know about the whole virtualization space.
Read the post on Tech Republic »
Input/Output Visualizes a Simplified IT Infrastructure
Download the white paper »
From our sponsors
HP StorageWork 4400 Enterprise Virtual Array
HP StorageWorks EVA4400 Product Demo
Now experience virtual storage with enterprise class functionality at an affordable price.
Watch Demo »
Storage virtualization and the HP StorageWorks 4400 Enterprise Virtual Array
Learn about how HP defines virtualization technology and how it applies to the HP 's newest Enterprise Virtual Array (EVA) storage system in this new white paper.
Download Now »
0
разделы
холодильник уценка
изготовление презентация
защитный краска
нард онлайн
услуга кострома
залог кострома
метрореклама нижнийновгород
виниловый дирижабль
виниловый дирижабль
виниловый дирижабль
виниловый дирижабль
kiev apartaments rent
автономный электроснабжение
корпоративный иностранный
договор суррогатный мать
огнезащитный состав
измеритель температры
венеролог
пленка пэ
калибровка цвет
прайс эфирный антенна
крутой компания
эдас-934 аденома предст.ж-зы
зеркало babyliss
сушильный машина frigidaire
рукавица
купить усилитель
детский мир
грунт стяжка
ipsec