Essay Web Server and Intranet Website

We have been engaged in business for some time, and have been very successful, however we need to re-examine our network configuration and infrastructure and identify that our network defenses are still reliable, before we make any changes. We need to take a hard look at our current configuration of host, services and our protocols within our organization. Data from a large number of penetration tests in recent years show most corporate networks share common vulnerabilities. Many of these

Web hosting services – this is where a user will buy a certain amount of storage space on a company’s network, which will then be visible to the public through a IP address, and store their website files so a third user can visit the website. This allows users to view the website by downloading packets of information.

Web servers use port number ___ by default and the default port number for an SSL connection is ___ .

! Permit http access to the web server at 192.168.1.201 access-list 111 permit tcp any host 192.168.1.201 eq 80

The firewall comes in hardware or software form and acts as a filter for all data

The security aspects we should watch for in this lab relate mostly to the righty way of configuring the services well, setting up a strong and complex Administrator password. Also we must set up firewall rules to make sure that all iptables rules give access to what’s needed only. In firewall rules, we should allow incoming and out coming DNS and DHCP traffic from and to known ip addresses and ports that we needed to connect to. Moreover, in this lab we used the Microsoft Baseline Security tool, which gives good security alerts about critical security issues and controls in the Windows system unlike Linux where SELinux was restricting access rather than giving alerts.

Windows Firewall with Advanced Security: Configure advanced firewall settings on both this computer and remote computers on your network.

From the Client VM, clear Internet Explorer’s cache (or completely close and reopen IE) and go to http://10.0.0.1 What do you notice? Record your observations. These observations will help you with your lab report. The web page does not load stating “Internet cannot display the web page.”

Alert tcp $EXTERNAL_NET any - $HTTP_SERVERS $HTTP_PORTS (msg: “cmd.exe access”; flow:to_server,established;content:”cmd.exe”; nocase; classtype:web-application-attack; sid 1002;

6) How does the use of border, internal, and host firewalls provide defense in depth?

“Security needs to be addressed as a continued lifecycle to be effective. Daily, there are new attack signatures being developed, viruses and worms being written, natural disasters occurring, changes in the organization workplace taking place and new technologies evolving, these all effect the security posture in the organization” (King, 2002). This being said, it is important to evaluate firewall and router rule sets more frequently. The possible threats against this policy include improperly configured network infrastructure which leads to a domino effect that could start with malicious programming which could end in data loss. Many of these threats may be unintentional as some users may not be aware of the risks and how their processes and procedures open the door for such attacks. For this reason alone, a more frequent evaluation is needed. This vulnerability could lead to data loss and the exposure of trade secrets, client lists and product design. The exposure of such information for most companies could mean a financial collapse as it no longer has the competitive edge that makes it the industry leader. While the likelihood of this threat is very high, “security risks to the network exist if users do not follow the security policy. Security weaknesses emerge when there is no clear cut or written security policy document. A security policy meets these goals:

The intranet helps protects your internal hosts, but it is not in the same place as the host. Internally, the company also has similar services to offer (Web, mail, file serving, internal DNS, and so on) that are meant solely for internal users which will allow tighter controls to be placed for router filtering. Next is the internal network, where everything else remaining is in this segment. The machines on the segment request information from the host including the labs and other departments that Jay’s company’s working with. For each internal network, the company should place a firewall in between each to filter the traffic to provide additional

The best network design to ensure the security of Corporation Techs internal access while retaining public Web site availability consists of several layers of defense in order to protect the corporation’s data and provide accessibility to employees and the public.

A rule set that I would add to a high level network would be an app-detect rule. With this rule the traffic that occurs in various applications that deal with the network would be controlled. This is especially important because if an application within the network is compromised, it could be utilized to gain access to the network.

The two modes are Proxy Mode or Classic mode. With Internet Explorer if you choose the Proxy Mode option it will automatically adjust Explorer proxy settings and the user can access the site by simply typing the name in the address bar. However if you use a different browser then you will need to manually change the proxy settings of the browser.