70-410 Lab 19 Worksheet

MOAC 70-410 - Installing and Configuring Windows Server 2012 Lab Manual

LAB 19 CONFIGURING WINDOWS FIREWALL

THIS LAB CONTAINS THE FOLLOWING EXERCISES AND ACTIVITIES: Exercise 19.1

Installing Internet Information Services

Exercise 19.2

Testing IIS Connectivity

Exercise 19.3

Allowing Apps through the Windows Firewall Control Panel

Exercise 19.4

Creating Windows Firewall Rules

Lab Challenge

Creating an FTP Server Rule

Exercise 19.1

Installing Internet Information Services

Overview

In this exercise, you install IIS to configure SVR-MBR-B as a web server, which you will use later to demonstrate the functions of Windows Firewall.

Mindset

How can you use a firewall to limit access to a web server?

Completion time

15 minutes

MOAC 70-410 - Installing and Configuring Windows Server 2012 Lab Manual

What URLs can you use in your computer’s browser to test the functionality of the intranet website you just created?

Question 1

22. Take a screen shot of the Internet Information Services (IIS) Manager console, showing the new site you created, by pressing Alt+Prt Scr, and then paste the resulting image into the Lab 19 worksheet file in the page provided by pressing Ctrl+V.

[copy screen shot over this text]

Exercise 19.2

Testing IIS Connectivity

Overview

In this exercise, you test the default connectivity to the web server you just installed and configured.

Mindset

What is the default Windows Firewall configuration?

Completion time

15 minutes

What possible reason would explain why you are unable to connect to the Intranet site on your computer’s web server, using a browser on another computer.

Question 2

MOAC 70-410 - Installing and Configuring Windows Server 2012 Lab Manual

9.

Take a screen shot of the Customize settings for each type of network window, showing the setting you changed, by pressing Alt+Prt Scr, and then paste the resulting image into the Lab 19 worksheet file in the page provided by pressing Ctrl+V.

[copy screen shot over this text]

Why is it necessary to clear the cache before you retest the web server connections?

Question 3

Why can you not simply leave Windows Firewall turned off when you deploy an actual web server?

Question 4

Exercise 19.3

Allowing Apps through the Windows Firewall Control Panel

Overview

Windows Firewall is preventing some clients from connecting to the web server.

Mindset

What access to Windows Firewall does the Control Panel provide?

Completion time

15 minutes

MOAC 70-410 - Installing and Configuring Windows Server 2012 Lab Manual

Why are you now unable to connect to the website from the client?

Question 5

Why are you unable to connect to the intranet site from the client?

Question 6

Exercise 19.4

Creating Windows Firewall Rules

Overview

The port you worked with in Exercise 19.3 enables clients to access the default website hosted by your web server, but not the intranet website. In this exercise, you use the Windows Firewall with Advanced Security console to create rules that will enable clients to access both websi tes.

Mindset

How do you customize the protection provided by Windows Firewall?

Completion time

15 minutes

How would the opening of the port you performed in Exercise 19.3 affect the World Wide Web Services (HTTP Traffic-In) rules you just examined?

Question 7

MOAC 70-410 - Installing and Configuring Windows Server 2012 Lab Manual

How would the rule creation procedure you just performed differ if you wanted to restrict client access to the intranet site to computers on the local network only?

Question 8

14. Take a screen shot of the Properties sheet for the new rule by pressing Alt+Prt Scr, and then paste the resulting image into the Lab 19 worksheet file in the page provided by pressing Ctrl+V.

[copy screen shot over this text]

What are the results, and why are they different from the results you experienced with the program exception?

Question 9

Lab Challenge

Creating an FTP Server Rule

Overview

To complete this challenge, you must configure Windows Firewall to allow incoming traffic to reach an FTP server running on the computer.

Completion time

15 minutes

On SVR-MBR-B, using Windows Firewall with Advanced Security, create rules that will permit all possible traffic generated by FTP clients to reach an FTP server running on SCR-MBR-B. Take a screen shot of the New Inbound Rule Wizard page showing the operative properties of the rule by pressing Alt+Prt Scr, and then paste the resulting image into the Lab 19 worksheet file in the page provided by pressing Ctrl+V.

MOAC 70-410 - Installing and Configuring Windows Server 2012 Lab Manual

[copy screen shot over this text]