Eicon Networks S92 Instrukcja Użytkownika Pobierz pdf (Strona 119)

YuChakTinMichael‘sGIACGCFWProjectAssignment

Page 119

ConfiguringtheVPNServer

RefertoAssignment1 forinformationonWindows2000hardening.

Shortforvirtualprivatenetwork, VPNisanetworkconstructedbyusingpublicwires

toconnectnodes. VPNsystemsuseencryptionandothersecuritymechanismsto

ensurethatonlyauthorizeduserscanaccessthenetworkandthatthedatacannotbe

intercepted

22

. W2K_VPNisaWindows2000ServercomputerrunningRRAS.It

allowsapredefinednumberof theremoteVPNclientstoconnecttothe

Critical_Resourcesdatabaseapplicationserver.

FirewallStrategyfortheVPNServer:

W2K_VPNsitsbetweenRouter_Econcardandthecoreswitch /Core_Net.Itserves

primarilyasa VPNServerforacceptingremoteaccessrequestsfromtheexternal

partnersandsuppliers.ItdoesnotactasaVPNgatewayfortheinternalclients.

TherearetwoapproachestodeployingafirewallwithaVPNserver.Wecaneither

placethefirewallbetweentheVPNserverandtheintranet,orplacetheVPNserver

betweenthefirewallandtheintranet. ForGIAC,wegowiththefirstapproach:thatis,

weplacethe VPNServerinfrontof theFirewall.

With thisstrategy,weneedtoaddpacketfilterstotheVPNserver’sInternetinterface

to onlyallowVPNtraffictoenterintoandgoingoutfromtheIPaddressofthat

interface.Forinboundtraffic,whenthetunneleddataisdecryptedbytheVPNserver,

itisforwardedtotheinternal firewall(s)forfurtherfilteringandinspection.Sincethe

onlytrafficcrossingtheVPNserverisgeneratedbyauthenticatedVPNclients,

firewallfilteringcanbeusedtopreventVPNusersfromaccessingspecificintranet

resources

23

.

22

http://www.webopedia.com/TERM/V/VPN.html

http://www.microsoft.com/windows2000/techinfo/reskit/enus/default.asp?url=/WINDOWS2000/techi

nfo/reskit/enus/intwork/inbe_vpn_HIDV.asp

1 2 ... 114 115 116 117 118 119 120 121 122 123 124 ... 208 209

Brak uwag

Eicon Networks S92 Instrukcja Użytkownika Strona 119