Assessment Activity 2 Sample

Assessment Activity #2 – This serves as your Final Exam (75 pts)
• Make a detailed narrative research report with pictures, step by step procedure, salient
features,
firewall design principles, etc. on how to setup Network Firewall Security. Use the
following format:
Top, Left, Bottom, Right margins: 1”
Font Style and Size: Arial 12
Paper Size: A4
Minimum number of pages: 18
• Upload your document in the Google classroom and submit a hard copy of your
document.
• Due date 18, January 2023 for 1st batch and 19, January 2023 for 2nd batch.
Salient features of Network Firewall Security
Network firewalls can provide a variety of security services, including:
 Access control: Controls which systems can access the network and which
services they can use.
 Data filtering and packet inspection: Scans data packets that enter and leave the
network in order to prevent malicious content from entering or leaving the
network.
 Intrusion detection and prevention: Monitors network activity for suspicious
activity that could indicate a malicious attack.
 Vulnerability management: Identifies and resolves known security flaws in
systems, applications, and networks.
 Network address translation (NAT): Hides internal network information from
external users.
 Content filtering: Blocks web content that is deemed inappropriate or harmful.

Firewall design principles of Network Firewall Security
The design principles of a network firewall security system include:
1. Establish a Deny-by-Default Policy: By default, all traffic should be denied
access.
2. Utilize a Multi-Layered Security Approach: Multiple layers of security should be
utilized to protect the network.
3. Utilize Least Privilege: Only the least amount of privileges should be used for
network operations.
4. Implement a Defense-in-Depth Approach: Multiple layers of defense should be
established at different points in the network.
5. Utilize Proactive Monitoring and Detection: Monitor and detect suspicious
activities and potential threats.
6. Utilize a Whitelisting Strategy: Only allow known, safe applications and services.
7. Utilize Encryption: Encrypt sensitive data to protect it from interception and
unauthorized access.
How to setup Network Firewall Security
Windows’ built-in firewall hides the ability to create powerful firewall rules. Block
programs from accessing the Internet, use a whitelist to control network access, restrict
traffic to specific ports and IP addresses, and more – all without installing another
firewall.
The firewall includes three different profiles, so you can apply different rules to private
and public networks. These options are included in the Windows Firewall with Advanced
Security snap-in, which first appeared in Windows Vista.
Accessing the Interface
There are a variety of ways to pull up the Windows Firewall with Advanced Security
window. One of the most obvious is from the Windows Firewall control panel – click the
Advanced settings link in the sidebar.

You can also type “Windows Firewall” into the search box in the Start menu and select
the Windows Firewall with Advanced Security application.
Configuring Network Profiles
The Windows firewall uses three different profiles:
 Domain Profile: Used when your computer is connected to a domain.
 Private: Used when connected to a private network, such as a work or home
network.
 Public: Used when connected to a public network, such as a public Wi-Fi access
point or a direct connection to the Internet.
Windows asks whether a network is public or private when you first connect to it.
A computer may use multiple profiles, depending on the situation. For example, a
business laptop may use the domain profile when connected to a domain at work, the
private profile when connected to a home network, and the public profile when
connected to a public Wi-Fi network – all in the same day.
The firewall properties window contains a separate tab for each profile. Windows blocks
inbound connections and allows outbound connections for all profiles by default, but you
can block all outbound connections and create rules that allow specific types of
connections. This setting is profile-specific, so you can use a whitelist only on specific
networks.
If you block outbound connections, you won’t receive a notification when a program is
blocked – the network connection will fail silently.

Creating a Rule
To create a rule, select the Inbound Rules or Outbound Rules category at the left side of
the window and click the Create Rule link at the right side.
The Windows firewall offers four types of rules:
 Program – Block or allow a program.
 Port – Block or a allow a port, port range, or protocol.
 Predefined – Use a predefined firewall rule included with Windows.
 Custom – Specify a combination of program, port, and IP address to block or allow.

Example Rule: Blocking a Program
Let’s say we want to block a specific program from communicating with the Internet —
we don’t have to install a third-party firewall to do that.
First, select the Program rule type. On the next screen, use the Browse button and
select the program’s .exe file.

On the Action screen, select “Block the connection.” If you were setting up a whitelist
after blocking all applications by default, you’d select “Allow the connection” to whitelist
the application instead.

On the Profile screen, you can apply the rule to a specific profile – for example, if you
only want a program blocked when you’re connected to public Wi-Fi and other insecure
networks, leave the “Public” box checked. By default, Windows applies the rule to all
profiles.
On the Name screen, you can name the rule and enter an optional description. This will
help you identify the rule later.

Firewall rules you create take effect immediately. Rules you create will appear in the list,
so you can easily disable or delete them.

Example Rule: Restricting Access
If you really want to lock down a program, you can restrict the ports and IP addresses it
connects to. For example, let’s say you have a server application that you only want
accessed from a specific IP address.
From the Inbound Rule list, click New Rule and select the Custom rule type.
On the Program pane, select the program you want to restrict. If the program is running
as a Windows service, use the Customize button to select the service from a list. To
restrict all network traffic on the computer to communicating with a specific IP address
or port range, select “All programs” instead of specifying a specific program.
On the Protocol and Ports pane, select a protocol type and specify ports. For example,
if you’re running a web server application, you can restrict the web server application to
TCP connections on ports 80 and 443 by entering these ports in the Local port box.
The Scope tab allows you to restrict IP addresses. For example, if you only want the
server communicating with a specific IP address, enter that IP address in the remote IP
addresses box.
Select the “Allow the connection” option to allow the connection from the IP address and
ports you specified. Be sure to check that no other firewall rules apply to the program –
for example, if you have a firewall rule that allows all inbound traffic to the server
application, this rule won’t do anything.

The rule takes effect after you specify the profiles it will apply to and name it.
The Windows firewall isn’t as easy-to-use as third-party firewalls, but it offers a
surprising amount of power. If you want more control and ease of use, you may be
better off with a third-party firewall.

Assessment Activity 2 Sample

Uploaded by

Copyright:

Available Formats

Assessment Activity 2 Sample

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Assessment Activity 2 Sample

Uploaded by

Copyright:

Available Formats

Assessment Activity #2 – This serves as your Final Exam (75 pts)

Network firewalls can provide a variety of security services, including:

services they can use.

network in order to prevent malicious content from entering or leaving the

 Intrusion detection and prevention: Monitors network activity for suspicious

activity that could indicate a malicious attack.

 Vulnerability management: Identifies and resolves known security flaws in

systems, applications, and networks.

 Network address translation (NAT): Hides internal network information from

 Content filtering: Blocks web content that is deemed inappropriate or harmful.

The design principles of a network firewall security system include:

1. Establish a Deny-by-Default Policy: By default, all traffic should be denied

2. Utilize a Multi-Layered Security Approach: Multiple layers of security should be

utilized to protect the network.

4. Implement a Defense-in-Depth Approach: Multiple layers of defense should be

established at different points in the network.

5. Utilize Proactive Monitoring and Detection: Monitor and detect suspicious

activities and potential threats.

7. Utilize Encryption: Encrypt sensitive data to protect it from interception and

Security snap-in, which first appeared in Windows Vista.

Accessing the Interface

Advanced settings link in the sidebar.

the Windows Firewall with Advanced Security application.

Configuring Network Profiles

The Windows firewall uses three different profiles:

 Domain Profile: Used when your computer is connected to a domain.

 Private: Used when connected to a private network, such as a work or home

point or a direct connection to the Internet.

connected to a public Wi-Fi network – all in the same day.

blocked – the network connection will fail silently.

The Windows firewall offers four types of rules:

 Program – Block or allow a program.

 Port – Block or a allow a port, port range, or protocol.

 Predefined – Use a predefined firewall rule included with Windows.

 Custom – Specify a combination of program, port, and IP address to block or allow.

we don’t have to install a third-party firewall to do that.

select the program’s .exe file.

the application instead.

help you identify the rule later.

so you can easily disable or delete them.

accessed from a specific IP address.

or port range, select “All programs” instead of specifying a specific program.

application, this rule won’t do anything.

The Windows firewall isn’t as easy-to-use as third-party firewalls, but it offers a

better off with a third-party firewall.

You might also like

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.