%YXSV1MGLEIP6EMXL %YJPEKIZSQ7ITXIQFIV %HQMRMWXVEXMSR F],)6(8:IVPEKJÚV&MPHYRKWQIHMIR+QF,

Transkript

1 -7%% %YXSV1MGLEIP6EMXL %YJPEKIZSQ7ITXIQFIV F],)6(8:IVPEKJÚV&MPHYRKWQIHMIR+QF, &SHIRLIMQ -RXIVRIX[[[LIVHX]SYHIEXGL [[[LIVHXFYWMRIWWHIEXGL [[[LIVHXZLWHIEX %PPI 6IGLXI ZSVFILEPXIR /IMR 8IMP HIW ;IVOIW HEVJ MR MVKIRHIMRIV*SVQ(VYGO*SXSOSTMI1MGVSJMPQSHIVIMRIQ ERHIVIR :IVJELVIR SLRI WGLVMJXPMGLI +IRILQMKYRK HIW,IVEYWKIFIVW VITVSHY^MIVX SHIV YRXIV :IV[IRHYRK IPIOXVSRMWGLIV 7]WXIQI ZIVEVFIMXIX ZIVZMIPJÂPXMKX SHIV ZIVFVIMXIX[IVHIR (MIWI 9RXIVPEKI [YVHI QMX KVS½IV 7SVKJEPX IVWXIPPX YRH KITVÚJX8VSX^HIQ OÔRRIR *ILPIV RMGLX ZSPPOSQQIR EYW KIWGLPSWWIR [IVHIR :IVPEK,IVEYWKIFIV YRH %YXSVIR OÔRRIRJÚVJILPIVLEJXI%RKEFIRYRHHIVIR*SPKIR[IHIV IMRI NYVMWXMWGLI :IVERX[SVXYRK RSGL MVKIRHIMRI,EJXYRK ÚFIVRILQIR (MI &MPHYRKWQIHMIR HIW,)6(8:IVPEKW IRXLEPXIR 0MROW F^[ :IV[IMWI EYJ-RXIVRIXWIMXIR ERHIVIV%RFMIXIV %YJ -RLEPX YRH +IWXEPXYRK HMIWIV %RKIFSXI LEX HIV,)6(8 :IVPEK OIMRIVPIM )MRJPYWW,MIVJÚV WMRH EPPIMRI HMI NI[IM PMKIR%RFMIXIVZIVERX[SVXPMGL 1MGVSWSJX )3! 3ERVER %HQMRMWXVEXMSR Ã Ã Ã EU7" $7

2

3 Inhaltsverzeichnis ISA Server Administration I 1 Einführung Aufgabenbereiche des ISA Servers Versionen und Funktionsumfang Zu dieser Unterlage Zusammenfassung Grundlagen Kommunikation von Compu tersystemen TCP/IP Potenzielle Gefahren Konzeption von ISA Server Weitere wichtige Begriffe Zusammenfassung Installationen planen und vorbereiten Anforderungen ermitteln Platzierung im Netzwerk Beispiel-Szenarien Server-Ausstattung planen Netzanbindung auswählen Server für die Netzanbindung vorbereiten Zusammenfassung Installation durchführen Installation starten Installation prüfen ISA Server 2000 aktualisieren Zusammenfassung ISA Server 2004 verwalten Verwaltungswerkzeuge Das Snap-in ISA-V ERWALTUNG Dienste verwalten Remote-Verwaltung einrichten Remote-Computer einrichten Ausgehenden Datenverkehr einrichten Beschreibung der Vorgehensweise DFÜ-Verbindung einrichten Netzwerke konfigurieren Netzwerkregeln erstellen Datenverkehr kontrollieren Sicheren Internetzugang einrichten Die Systemrichtlinie Paketfilterung konfigurieren Firewallrichtlinien definieren ISA-Clients konfigurieren Überblick Firewallclient Webproxyclient SecureNAT-Client Zusammenfassung Eingehenden Datenverkehr einrichten Externe Zugriffe ermöglichen VPN-Clientzugriff VPN auf Client-Computern einrichten Standort-zu-Standort-VPN Zusammenfassung Server veröffentlichen Lokale Webserver veröffentlichen Lokale Webserver sicher veröffentlichen Lokalen Mailserver veröffentlichen Weitere lokale Server veröffentlichen Zusammenfassung Überwachung und Protokollierung Übersicht Alarme Protokollierung Berichte Weitere Überwachungen System-Monitor Zusammenfassung Zwischenspeicherung konfigurieren Übersicht Einschränkungen beim Caching Konzeption des Caches Cachelaufwerke festlegen Cacheregeln konfigurieren Erweiterte Konfiguration des Caches Inhaltsdownloadaufträge Cache-Arrays konfigurieren Zusammenfassung Sicherheit optimieren und überprüfen Sichere Ausgangsbasis Erkennung von Angriffen aktivieren Anwendungsfilter nutzen Zusatzprogramme nutzen Protokolldefinitionen konfigurieren Port Scanner einsetzen Konfiguration sichern Zusammenfassung Troubleshooting Allgemeine Hinweise Ereignisanzeige Netzwerkmonitor Netstat und Telnet verwenden Weitere Problemlösungen Zusammenfassung Anhang Zuordnung wichtiger Port-Nummern Private Adressbereiche Dienste Stichwortverzeichnis...158

4 3 ISA Server Administration 3 Installationen planen und vorbereiten,q GLHVHP.DSLWHO HUIDKUHQ 6LH Æ ZDV EHL GHU,QVWDOODWLRQVSODQXQJ YRQ 0LFURVRIW,6$ 6HUYHU ]X EHDFKWHQ LVW Æ ZHOFKH $QIRUGHUXQJHQ I U GLH,QVWDOODWLRQ HUI OOW VHLQ P VVHQ Æ QDFK ZHOFKHQ.ULWHULHQ 6LH HLQH 1HW]ZHUNDQELQGXQJ DXVZlKOHQ N QQHQ Æ ZLH 6LH LP ]XN QIWLJHQ,6$ 6HUYHU 0RGHP,6'1 RGHU 1HW]ZHUNNDUWH LQVWDOOLHUHQ 9RUDXVVHW]XQJHQ 9 *UXQGNHQQWQLVVH LQ 7&3,3 9.HQQWQLVVH LQ GHU 9HUZDOWXQJ YRQ :LQGRZV 6HUYHU 3.1 Anforderungen ermitteln Mehrere Aspekte )HKOLQYHVWLWLRQHQ LQ QLFKW RSWLPDO JHHLJQHWH +DUG XQG 6RIWZDUH RGHU ODQJZLHULJH.RUUHNWXUHQ IDOVFK NRQILJX ULHUWHU 6\VWHPLQVWDOODWLRQHQ ODVVHQ VLFK YHUPHLGHQ ZHQQ YRU GHU,QVWDOODWLRQ YRQ,6$ 6HUYHU HLQLJH ZLFKWLJH $VSHNWH VRUJIlOWLJ JHSODQW ZHUGHQ %H]LHKHQ 6LH LQ GLH 3ODQXQJ ]XPLQGHVW GLH IROJHQGHQ 6FKULWWH HLQ ; %HGDUI DQDO\VLHUHQ ; 6LFKHUKHLWVDQIRUGHUXQJHQ HUPLWWHOQ ; 6HUYHU$XVVWDWWXQJ SODQHQ ; 1HW]DQELQGXQJ DXVZlKOHQ 'LH $QDO\VH GHV.RPPXQLNDWLRQVEHGDUIV LVW GLH ZLFKWLJVWH 3ODQXQJVDXIJDEH YRU GHU,QVWDOODWLRQ YRQ,6$ 6HU YHU 'DV (UJHEQLV GHU $QDO\VH EHVWLPPW JHPHLQVDP PLW GHQ 6LFKHUKHLWVDQIRUGHUXQJHQ GLH $XVZDKO GHU 6HUYHU+DUGZDUH XQG GHV 1HW]]XJDQJV VRZLH DOOH.RQILJXUDWLRQVHQWVFKHLGXQJHQ ZlKUHQG GHV HLJHQWOLFKHQ,Q VWDOODWLRQVYRUJDQJV Bedarf analysieren (UPLWWHOQ 6LH GLH $Q]DKO GHU %HQXW]HU GLH EHU GHQ,6$ 6HUYHU PLW GHP,QWHUQHW NRP PXQL]LHUHQ ZHUGHQ 3ODQHQ 6LH DXFK HLQH 5HVHUYH I U ]XN QIWLJH /HLVWXQJVVWHLJHUXQJHQ RGHU (UZHLWHUXQJHQ HLQ $QDO\VLHUHQ 6LH GDV HUZDUWHWH GXUFKVFKQLWWOLFKH 'DWHQDXINRPPHQ MH %HQXW]HU XQG ]ZDU DXI JHJOLHGHUW QDFK GHQ EHDQVSUXFKWHQ 'LHQVWHQ EHVRQGHUV :HE=XJULIIH +773 )73 XQG (0DLO9HUNHKU ,0$3 6WHOOHQ 6LH IHVW RE 2QOLQH.RQIHUHQ]GLHQVWH EHQ WLJW ZHUGHQ hehuohjhq 6LH DXI ZHOFKH :HLVH GHU,6$ 6HUYHU YHUZDOWHW ZHUGHQ VROO 6LH N QQHQ VLFK I U HLQH ]HQWUDOLVLHUWH 9HUZDOWXQJ HQWVFKHLGHQ EHL GHU 5LFKWOLQLHQ XQWHUQHKPHQVZHLW DXI DOOH,6$ 6HUYHU RGHU HLQ]HOQH 6HUYHU$UUD\V DQJHZHQGHW ZHUGHQ RGHU MHGHQ 6HUYHU HLJHQVWlQGLJ YHUZDOWHQ $OOHUGLQJV LVW GLH ]HQWUDOH 9HUZDOWXQJ DXI 8QWHUQHKPHQV XQG $UUD\(EHQH QXU PLW GHU 9HUVLRQ,6$ 6HUYHU (QWHUSULVH (GLWLRQ LQ 9HUELQGXQJ PLW $FWLYH 'LUHFWRU\ P JOLFK 'LH,6$ 6HUYHU 6WDQGDUG (GLWLRQ ELHWHW DXVVFKOLH OLFK ORNDOH 9HUZDOWXQJ DXI 6HUYHU(EHQH

5 Installationen planen und vorbereiten 3 Sicherheitsanforderungen ermitteln 6WLPPHQ 6LH PLW GHU *HVFKl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latzierung im Netzwerk Domäne oder Stand-Alone 'HU,6$ 6HUYHU LVW JHQDX GHU 5HFKQHU GHU YRP,QWHU QHW DXV HUUHLFKEDU XQG GDPLW HLQHP K KHUHQ 5LVLNR DXV JHVHW]W LVW DOV GDV GDKLQWHU OLHJHQGH /$1 8PVR ZLFKWLJHU LVW GDPLW GLH )UDJH ZLH GLHVHU 6HUYHU LQ GDV /$1 LQWHJULHUW ZHUGHQ VROO $XV 6LFKHUKHLWVJU QGHQ VROOWH,6$ 6HUYHU QLFKW DXI HLQHP 'RPlQHQ&RQWUROOHU LQVWDOOLHUW ZHUGHQ $XFK GLH 0LWJOLHGVFKDIW LQ HLQHU 'RPlQH LVW QLFKW ]ZLQJHQG Q WLJ (V HPSILHKOW VLFK GLH,QVWDOODWLRQ DXI HLQHP DOOHLQ VWHKHQGHQ 6HUYHU Ausnahmen $OOHUGLQJV JLEW HV 6LWXDWLRQHQ LQ GHQHQ GLHVH /HLWOLQLH QLFKW YHUZHQGHW ZHUGHQ NDQQ,P)ROJHQGHQ ZHUGHQ GLH GUHL ZLFKWLJVWHQ $XVQDKPHQ NXU] HUZlKQW ;,P 3URGXNW 0LFURVRIW 6PDOO %XVLQHVV 6HUYHU LVW GHU,6$ 6HUYHU HEHQIDOOV HQWKDOWHQ %HL GHU,QVWDOODWLRQ GLHVHV 3URGXNWV DXI HLQHP HLQ]HOQHQ *HUlW PXVV GHU 6HUYHU DOV 'RPlQHQ&RQWUROOHU HLQJHULFKWHW ZHUGHQ ; ) U GHQ )DOO GDVV GHU,6$ 6HUYHU QXU DOV 3UR[\ 6HUYHU GLHQW XQG HLQ DQGHUHV 3URGXNW RGHU HLQH +DUG ZDUH/ VXQJ DOV )LUHZDOO ]XP (LQVDW] NRPPW NDQQ GHU 6HUYHU GXUFKDXV 0LWJOLHG HLQHU 'RPlQH VHLQ ; %HLP (LQVDW] GHU (QWHUSULVH (GLWLRQ YRQ,6$ 6HUYHU PXVV GHU 6HUYHU 'RPlQHQPLWJOLHG VHLQ XP GLH,6$ 6HUYHU.RQILJXUDWLRQ ]X VSHLFKHUQ 'LH 3UREOHPDWLN OlVVW VLFK DEHU DEVFKZlFKHQ ZHQQ GHU,6$ 6HUYHU QLFKW 0LWJOLHG GHU ILUPHQLQWHUQHQ 'RPlQH VRQGHUQ HLQHU DQGHUHQ ZLUG GLH ZLHGHUXP EHU HLQH HLQVHLWLJH 9HUWUDXHQVVWHOOXQJ PLW GHU LQWHUQHQ 'RPlQH YHUEXQGHQ LVW (LQ 9RUWHLO HLQHU 'RPlQHQPLWJOLHGVFKDIW ZlUH GDVV GLH EHVWHKHQGHQ %HQXW]HU XQG *UXSSHQ HLQIDFKHU I U GLH 5HJHOHUVWHOOXQJ KHUDQJH]RJHQ ZHUGHQ N QQWHQ

6 3 ISA Server Administration ISA-Server-Design-Konzepte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lKHU EHLP H[WHUQHQ 1HW]ZHUN %HLP (LQVDW] YRQ ]ZHL NDVNDGLHUHQGHQ )LUHZDOOV VWHKW GLHVHU 6HUYHU QlKHU EHLP LQWHUQHQ 1HW]ZHUN,Q GLHVHU.RQVWHOODWLRQ DUEHLWHW GHU,6$ 6HUYHU QXU DOV 3UR[\ =ZLVFKHQ VSHLFKHU XQG N QQWH ]XU :HEYHU IIHQWOLFKXQJ HLQJHVHW]W ZHUGHQ Netzwerkvorlagen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lFKH Beispiel Frontfirewall 3.3 Beispiel-Szenarien Edge Firewall ) U NOHLQH XQG PLWWOHUH 8QWHUQHKPHQ PLW ELV ]X HWZD %HQXW]HUQ UHLFKW HLQ HLQ]LJHU 6HUYHU I U GLH $EZLFNOXQJ GHU )LUHZDOO XQG 3UR[\)XQNWLRQHQ ISA-Server mit Firewall und Proxy 'HU 6HUYHU LVW PLW ]ZHL JHWUHQQWHQ 1HW]ZHUNYHUELQGXQJHQ DXVJHVWDWWHW MH HLQHU I U GDV /$1 XQG GDV,QWHUQHW -HGHU,QWHUQHW]XJULII ZLUG EHU GLH )LUHZDOO GHV,6$ 6HUYHUV DEJHZLFNHOW,Q NOHLQHQ 8QWHUQHKPHQ N QQHQ DXI GHP,6$ 6HUYHU DXFK ZHLWHUH 'LHQVWH ODXIHQ EHLVSLHOVZHLVH 0LFURVRIW ([ FKDQJH RGHU GLH,,6'LHQVWH,QWHUQHW,QIRUPDWLRQ 6HUYLFHV LAN Netzwerkkarte 1 Netzwerkkarte 2 oder Modem, ISDN-Karte etc. Beispiel: Edge Firewall zwischen LAN und Internet Internet

7 Installationen planen und vorbereiten 3 Getrennte Firewalls und Proxies oder S erver-arrays verwenden (LQ,6$ 6HUYHU EHUQLPPW GLH 9HUELQGXQJ ]XP,QWHUQHW XQG I KUW DOOH )LUHZDOO)XQNWLRQHQ DXV ZlKUHQG GLH 3UR[\)XQNWLRQHQ DXI HLQHP ]ZHLWHQ 6HUYHU ODXIHQ GHU YROOVWlQGLJ DXI GHU ORNDOHQ 1HW]ZHUNVHLWH GHU )LUHZDOO LQVWDOOLHUW LVW (LQ,6$ 6HUYHU ZLUG LQ GHU %HWULHEVDUW 6LQJOH1,&6HUYHU GHU DQGHUH LP )LUHZDOOPRGXV HLQ JHULFKWHW $XI GLHVH :HLVH VLQG HLQH 2SWLPLHUXQJ I U GLH MHZHLOLJH )XQNWLRQ XQG HLQ (LQVDW] LQ JU HUHQ 8QWHU QHKPHQ P JOLFK 'LH /HLVWXQJVIlKLJNHLW OlVVW VLFK ZHLWHU HUK KHQ ZHQQ QLFKW MHZHLOV HLQ]HOQH 6HUYHU VRQGHUQ 6HUYHU$UUD\V HLQJHVHW]W ZHUGHQ Eine DMZ verwenden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l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etzwerkkarte 1,6$Ã6HUYHUÃ ISA-Server )LUHZDOOÃ Firewall Netzwerkkarte 3 Netzwerkkarte 2 Webserver DMZ mit einer Firewall und 3 Netzwerkkarten Internet DMZ Mailserver 3.4 Server-Ausstattung planen Betriebssystem Windows Server LFURVRIW,6$ 6HUYHU ZLUG LQ GHU (QWHUSULVH (GLWLRQ DXI HLQHP %HWULHEVV\VWHP GHU :LQGRZV6HUYHU )DPLOLH LQVWDOOLHUW 'LH 6WDQGDUG (GLWLRQ N QQWH DOWHUQDWLY DXFK DXI HLQHP 6HUYHU PLW :LQGRZV EHUHLWJHVWHOOW ZHUGHQ $OOHUGLQJV VROOWH GLH :LQGRZV9HUVLRQ XQEHGLQJW DXI GHP QHXHVWHQ 6WDQG VHLQ LQ %H]XJ DXI ; 6HUYLFH 3DFNV PLQGHVWHQV 63 ; +RWIL[HV PLQGHVWHQV.% ;,QWHUQHW ([SORUHU 9HUVLRQ $XIJUXQG GHU K KHUHQ 6WDELOLWlW GHV JU HUHQ )XQNWLRQVXPIDQJV XQG GHU YHUEHVVHUWHQ 6LFKHUKHLWVDUFKLWHNWXU LVW DEHU DXFK I U GLH 6WDQGDUG (GLWLRQ GHU (LQVDW] YRQ :LQGRZV 6HUYHU ]X HPSIHKOHQ ([HPSODULVFK VHL HLQ NRQNUHWHU *UXQG GDI U JHQDQQW 0LFURVRIW KDW XQWHU :LQGRZV 6HUYHU GDV.RQWR 1 (7=:(5.',(167 HLQJHI KUW GDV PLW ZHQLJHU 5HFKWHQ DOV GDV.RQWR /2.$/(6 6 <67(0 DXVJHVWDWWHW LVW ) U 'LHQVWH ZLH ] % GHQ )LUHZDOO'LHQVW VLQG GLHVH 5HFKWH DOOHU GLQJV YROONRPPHQ DXVUHLFKHQG XQG GDPLW GHXWOLFK VLFKHUHU

8 3 ISA Server Administration $XV 6LFKHUKHLWVJU QGHQ VROOWH GDV *DVWNRQWR DXI GHP I U GLH,QVWDOODWLRQ YRQ,6$ 6HUYHU YRUJHVHKHQHQ 5HFKQHU GHDNWLYLHUW XQG GDV $GPLQLVWUDWRUNRQWR XPEHQDQQW ZRUGHQ VHLQ 6HOEVWYHUVWlQGOLFK VROOWHQ GLH 5HJHOQ I U VLFKHUH.HQQZ UWHU HLQJHKDOWHQ ZHUGHQ 0LFURVRIW OLHIHUW DXI GHU 6HLWH ZZZPLFURVRIWFRP JHUPDQ\PVVHFXULW\JXLGDQFHGHIDXOWPVS[ SUDNWLVFKH +LQZHLVH ]X GLHVHQ 7KHPHQ Minimalausstattung,Q %H]XJ DXI GLH 0LQGHVWDQIRUGHUXQJHQ I U GLH +DUGZDUH JHOWHQ lkqolfkh 9RUDXVVHW]XQJHQ ZLH I U :LQGRZV 6HUYHU E]Z :LQGRZV $OOHUGLQJV NDQQ YRQ HLQHP 6\VWHP GDV JHUDGH GHQ 0LQLPDODQIRUGHUXQJHQ I U GLH,QVWDOODWLRQ HQWVSULFKW NHLQH EHIULHGLJHQGH 3HUIRUPDQFH HUZDUWHW ZHUGHQ )ROJHQGH 0LQGHVWDQIRUGHUXQJHQ JHOWHQ ODXW 0LFURVRIW I U GLH,QVWDOODWLRQ YRQ 0LFURVRIW,6$ 6HUYHU.RPSRQHQWH $QIRUGHUXQJ 3UR]HVVRU 3HQWLXP,, RGHU NRPSDWLEHO PLQGHVWHQV 0+] $UEHLWVVSHLFKHU 0% )HVWSODWWHQVSHLFKHU 1HW]ZHUNDGDSWHU 0LQGHVWHQV 0% EHL (LQVDW] DOV )LUHZDOO ]XVlW]OLFKHU 6SHLFKHUSODW] LQ EHOLHELJHU + KH EHLP (LQVDW] DOV =ZLVFKHQVSHLFKHU ]XVlW]OLFK PLQGHVWHQV *% EHLP (LQVDW] GHU 3URWRNROOLHUXQJ LQ 06'( 0LQGHVWHQV HLQHU EHLP (LQVDW] DOV 3UR[\ PLQGHVWHQV ]ZHL EHLP (LQVDW] DOV (GJH )LUHZDOO Empfohlene Ausstattung 'DPLW GHU (LQVDW] HLQHV 3UR[\ 6HUYHUV PLW )LUHZDOO)XQNWLRQHQ I U GLH %HQXW]HU WDWVlFKOLFK WUDQVSDUHQW LVW RGHU VLFK LQ VFKQHOOHUHU hehuwudjxqj YRQ ]ZLVFKHQJHVSHLFKHUWHQ :HE,QKDOWHQ lx HUW VROOWHQ HLQLJH.RPSRQHQWHQ GHV 6HUYHUV GHXWOLFK DXVJHEDXW ZHUGHQ :HOFKH.RPSRQHQWHQ RSWLPLHUW ZHUGHQ P VVHQ KlQJW YRQ GHU.RQ ILJXUDWLRQ GHV,6$ 6HUYHUV XQG GHU $Q]DKO GHU XQWHUVW W]WHQ %HQXW]HU DE )ROJHQGH 5LFKWZHUWH VROOWHQ I U HLQ EHIULHGLJHQGHV $UEHLWHQ PLW,6$ 6HUYHU EHDFKWHW ZHUGHQ.RPSRQHQWH 3UR]HVVRU $QIRUGHUXQJ 3HQWLXP RGHU NRPSDWLEHO PLQGHVWHQV *+] $UEHLWVVSHLFKHU *% )HVWSODWWHQVSHLFKHU *% (LQVDW] YRQ 5$,' I U GLH 6\VWHPSDUWLWLRQ (LQVDW] YRQ 5$,' RGHU 5$,' I U GLH =ZLVFKHQVSHLFKHUXQJ 1HW]ZHUNDGDSWHU I U GHQ $XIEDX HLQHV $EVFKQLWW8PNUHLVQHW]ZHUNV /$1 :$1 '0= (V LVW IDVW VFKRQ VHOEVWYHUVWlQGOLFK GDVV GLH ZLFKWLJVWHQ.RPSRQHQWHQ UHGXQGDQW DXVJHOHJW VHLQ VROOWHQ XQG HLQH XQWHUEUHFKXQJVIUHLH 6WURPYHUVRUJXQJ HLQJHULFKWHW VHLQ VROOWH ISA Server 2004 Edition auswählen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

9 Installationen planen und vorbereiten 3 0LW GHU,6$ 6HUYHU (QWHUSULVH (GLWLRQ N QQHQ 6LH DXFK HLQHQ HLQ]HOQHQ 6HUYHU DOV $UUD\ NRQILJXULHUHQ XQG VR GLH 9RUWHLOH GHU ]HQWUDOLVLHUWHQ 9HUZDOWXQJ QXW]HQ 3.5 Netzanbindung auswählen Vorüberlegungen =XVlW]OLFK ]X HLQHU 1HW]ZHUNNDUWH I U GLH.RPPXQLNDWLRQ PLW GHP LQWHUQHQ )LUPHQQHW] EHQ WLJW HLQ,6$ 6HU YHU HLQH ]ZHLWH 1HW]ZHUNNDUWH PLW 9HUELQGXQJ ]X HLQHP 5RXWHU RGHU HLQ 0RGHP RGHU HLQH,6'1.DUWH I U GLH.RPPXQLNDWLRQ PLW GHP H[WHUQHQ 1HW]ZHUN :lkohq 6LH GLH HUIRUGHUOLFKH 1HW]DQELQGXQJ DQKDQG GHU 'DWHQ DXV GHU %HGDUIVHUPLWWOXQJ DXV 9HUZHQGHQ 6LH GD]X GLH,QIRUPDWLRQHQ GHV IROJHQGHQ $EVFKQLWWV +LQVLFKWOLFK GHU.RVWHQ XQG GHU EHQ WLJWHQ %DQGEUHLWH hehuwudjxqjvjhvfkzlqgljnhlw PXVV LP 9RUIHOG JH SODQW ZHUGHQ ZHOFKH $UW GHV =XJDQJV ]XP,QWHUQHW I U HLQ 8QWHUQHKPHQ RSWLPDO LVW 'LHVH.RVWHQ ZHUGHQ YRU DOOHP GXUFK ]ZHL )DNWRUHQ JHVWHXHUW ; 9HUELQGXQJVWHFKQLN YHUI JEDUH %DQGEUHLWH ; 9HUELQGXQJVGDXHU Verbindungstechnik %HL GHU 9HUELQGXQJVWHFKQLN N QQHQ GHU]HLW YLHU 9HUIDKUHQ YHUZHQGHW ZHUGHQ ; 0RGHP ;,6'1 ; '6/ ; 5RXWHU Modem 0RGHPV VLQG J QVWLJ LQ GHU $QVFKDIIXQJ DUEHLWHQ DOOHUGLQJV DQDORJ XQG ELHWHQ GHVKDOE QXU %DQGEUHLWHQ ELV ]X.%LWVHF 'DV 9HUVHQGHQ XQG (PSIDQJHQ JU HUHU 'DWHQPHQJHQ EHQ WLJW DOVR HLQH JHZLVVH =HLW GLH VLFK ZLHGHUXP LQ GHQ DQIDOOHQGHQ 7HOHIRQJHE KUHQ QLHGHUVFKOlJW ISDN,6'1,QWHJUDWHG 6HUYLFHV 'LJLWDO 1HWZRUN LVW LQ GHU $QVFKDIIXQJ WHXUHU XQG NDQQ DXIZlQGLJHU VHLQ DOV HLQ 0RGHP 1HEHQ GHP (LQEDX YRQ,6'1.DUWHQ P VVHQ P JOLFKHUZHLVH QRFK (LQJULIIH LQ GLH 7HOHNRPPXQLNDWLRQV DQODJH GHV 8QWHUQHKPHQV YRUJHQRPPHQ ZHUGHQ 'LH ODXIHQGHQ.RVWHQ VLQG MHGRFK DXIJUXQG GHU K KHUHQ %DQG EUHLWH PHLVW DE HLQHP EHVWLPPWHQ hehuwudjxqjvyroxphq JHULQJHU DOV EHL HLQHP 0RGHP Notizen

10 3 ISA Server Administration,6'1 NDQQ LQ ]ZHL XQWHUVFKLHGOLFKHQ 9DULDQWHQ JHQXW]W ZHUGHQ ; %DVLF 5DWH,QWHUIDFH %5, %DVLVDQVFKOXVV ; 3ULPDU\ 5DWH,QWHUIDFH 35, 3ULPlUPXOWLSOH[DQVFKOXVV (LQ,6'1%DVLVDQVFKOXVV DUEHLWHW PLW ]ZHL XQDEKlQJLJHQ.DQlOHQ ]XU 'DWHQ EHUWUDJXQJ GHQ %.DQlOHQ -H.DQDO VWHKW HLQH hehuwudjxqjvjhvfkzlqgljnhlw YRQ.%LWV ]XU 9HUI JXQJ (LQ ZHLWHUHU.DQDO '.DQDO GLHQW ]XU 6WHXHUXQJ GHU hehuwudjxqj 'HU %DVLVDQVFKOXVV ELHWHW GLH 0 JOLFKNHLW ]ZHL %.DQlOH ]X NRSSHOQ XQG GDGXUFK %DQGEUHLWHQ ELV ]X.%LWV ]X HUUHLFKHQ %HL HLQHP 3ULPlUPXOWLSOH[DQVFKOXVV N QQHQ ELV ]X %.DQlOH YHUEXQGHQ ZHUGHQ 6R ODVVHQ VLFK %DQGEUHLWHQ ELV ]X HWZD 0ELWV HUUHLFKHQ DSL '6/ 'LJLWDO 6XEVFULEHU /LQH EH]HLFKQHW HLQH 7HFKQRORJLH I U %UHLWEDQG,6'1 PLW GHXWOLFK K KHUHQ hehuwud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lW 6SOLWWHU GDV ]ZLVFKHQ 7HOHIRQ,6'1 XQG $'6/ WUHQQW $Q GHQ 6SOLWWHU ZLUG EHU HLQH 0ESV(WKHUQHW6FKQLWWVWHOOH HLQ $'6/0RGHP DQJHVFKORVVHQ GDV VHLQHUVHLWV GLH 9HUELQGXQJ ]XP 3& RGHU /$1 KHUVWHOOW Router,P 1RUPDOIDOO LVW HLQ 5RXWHU HLQ *HUlW GDV GLH 9HUELQGXQJ YRQ HLQHP 1HW]ZHUN ]X HLQHP DQGHUHQ HUP JOLFKW,QQHUKDOE YRQ ORNDOHQ 1HW]HQ ZHUGHQ 5RXWHU EHLVSLHOVZHLVH HLQJHVHW]W XP GHQ 'DWHQYHUNHKU ]ZLVFKHQ 7HLO QHW]HQ HLQHU )LUPD ]X VWHXHUQ :HQQ HLQH 9HUELQGXQJ ]XP,63 JHZ QVFKW ZLUG N QQHQ GLHV GLH PHLVWHQ 5RXWHU LQ]ZLVFKHQ DXFK EHU,6'1 GXUFKI KUHQ $OWHUQDWLY GD]X NDQQ HLQ 5RXWHU DEHU DXFK DQ /HLWXQJHQ PLW K KHUHU %DQGEUHLWH DQJHVFKORVVHQ ZHUGHQ :HOFKH /HLWXQJHQ GDV VHLQ N QQHQ KlQJW YRU DOOHP YRP $QJHERW GHV,63V,QWHUQHW 6HUYLFH 3URYLGHU DE Verbindungsdauer +LQVLFKWOLFK GHU 9HUELQGXQJVGDXHU EHVWHKHQ JUXQGVlW]OLFK ]ZHL 0 JOLFKNHLWHQ ; :lkoyhuelqgxqj EHL %HGDUI 'R' 'LDO RQ 'HPDQG ; 6WDQGOHLWXQJ ) U NOHLQH 8QWHUQHKPHQ PLW ZHQLJHQ 0LWDUEHLWHUQ G UIWH VLFK DXIJUXQG GHU JHULQJHUHQ PRQDWOLFKHQ *UXQGJH E KUHQ HLQH :lkoyhuelqgxqj EHL %HGDUI DQELHWHQ )DOOV MHGRFK GLH 9HU IIHQWOLFKXQJ YRQ ORNDOHQ :HEVHLWHQ DXI 6HUYHUQ LP /$1 JHSODQW LVW GDQQ LVW HV QLFKW VLQQYROO HLQHQ =XJDQJ YRQ DX HQ EHU 0RGHP HLQ]XULFKWHQ :HEVHUYHU VROOWHQ SHUPDQHQW HUUHLFKEDU VHLQ,Q GLHVHP )DOO VROOWHQ 6LH VLFK I U HLQH 6WDQGOHLWXQJ HQWVFKHLGHQ (LQH DQGHUH P JOLFKH / VXQJ ZlUH GLH =XVDP PHQDUEHLW PLW HLQHP 3URYLGHU GHU HLQHQ,6'15RXWHU LQVWDOOLHUW KDW XQG GDPLW EHL %HGDUI DXWRPDWLVFK HLQH 9HUELQGXQJ ]X,KUHP ORNDOHQ,6$ 6HUYHU DXIEDXW 'LHV LVW DOOHUGLQJV LQ GHU 3UD[LV UHODWLY VHOWHQ 6WDQGOHLWXQJHQ N QQHQ DE HLQHP EHVWLPPWHQ 'DWHQGXUFKVDW] GHXWOLFK NRVWHQJ QVWLJHU ZHUGHQ DOV /HLWXQJHQ PLW HLQHU :lkoyhuelqgxqj =XU (UPLWWOXQJ GHU J QVWLJVWHQ 9HUELQGXQJ JLOW HV GLH $QJHERWH YHUVFKLHGHQHU 3UR YLGHU JU QGOLFK ]X YHUJOHLFKHQ XQG GDI U GLH,QIRUPDWLRQHQ DXV GHU %HGDUIVSODQXQJ ]X YHUZHQGHQ

11 Installationen planen und vorbereiten Server für die Netzanbindung vorbereiten Voraussetzung für den Firewall-Dienst -H QDFK JHZ QVFKWHP 7\S GHU 1HW]DQELQGXQJ P VVHQ 6LH GHQ 6HUYHU I U GLH,QVWDOODWLRQ YRQ,6$ 6HUYHU YRUEHUHLWHQ 1HEHQ GHU 1HW]ZHUNNDUWH I U GDV /$1 PXVV HQWZHGHU HLQ 0RGHP HLQH,6'1.DUWH RGHU PLQGHVWHQV HLQH ZHLWHUH 1HW]ZHUNNDUWH LQVWDOOLHUW ZHUGHQ $QGHUQIDOOV NDQQ GHU )LUHZDOO'LHQVW YRQ,6$ 6HU YHU QLFKW NRUUHNW HLQJHULFKWHW ZHUGHQ 'LHVHU $EVFKQLWW JLEW +LQZHLVH ]XU,QVWDOODWLRQ XQG *UXQGNRQILJX UDWLRQ GLHVHU *HUlWH Ein Modem installieren 'LH,QVWDOODWLRQ HLQHV 0RGHPV ZLUG DXI GHU (EHQH GHV %HWULHEVV\VWHPV YRUJHQRPPHQ 8QWHU :LQGRZV 6HUYHU Ol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lW EHVLW]W RGHU QLFKW NRUUHNW HUNDQQW ZXUGH P VVHQ 6LH HV EHU GLH 6\VWHPVWHXHUXQJ PDQXHOO LQVWDOOLHUHQ Modem konfigurieren :lkohq 6LH Ã 6<67(067(8(581* 7(/()21 81' 02'(0237,21(1 )DOOV 6LH JHUDGH GDV HUVWH 0RGHP NRQILJXULH UHQ P VVHQ 6LH ]XQlFKVW HLQLJH,QIRUPDWLRQHQ ]X,KUHP 6WDQGRUW HLQWUDJHQ :lkohq 6LH LP /LVWHQIHOG / $1'5(*,21 GDV ULFKWLJH /DQG DXV 7UDJHQ 6LH DQVFKOLH HQG GLH ORNDOH 2UWV QHW]NHQQ]DKO 9RUZDKOQXPPHU HLQ )DOOV 6LH PLW HLQHU 7.$QODJH DUEHLWHQ P VVHQ 6LH HLQH $PWVNHQQ]LIIHU I U GLH 9HUZHQGXQJ HLQHU $PWVOHLWXQJ HLQJHEHQ *HEHQ 6LH GDV ]X YHUZHQGHQGH :lkoyhuidkuhq 0)9 RGHU,:9 DQ Standortinformationen angeben Notizen

12 3 ISA Server Administration 'DQDFK N QQHQ 6LH QRFK GLH 0RGHPHLJHQVFKDIWHQ EHDUEHLWHQ ] % LQ %H]XJ DXI GLH PD[LPDOH hehuwudjxqjv UDWH RGHU RE YRU GHP :lkohq DXI HLQ )UHL]HLFKHQ JHZDUWHW ZHUGHQ VROO ISDN-Karte installieren und konfigurieren (EHQVR ZLH HLQ 0RGHP ZLUG HLQH,6'1.DUWH QDFK GHP ( LQEDX PHLVW DXWRPDWLVFK EHU GLH 3OXJ 3OD\)XQN WLRQ YRQ :LQGRZV 6HUYHU LQVWDOOLHUW XQG NDQQ LP $QVFKOXVV GDUDQ VRIRUW NRQILJXULHUW ZHUGHQ )DOOV GLH,6'1.DUWH PDQXHOO LQVWDOOLHUW ZHUGHQ PXVV NDQQ GLHV EHU GLH 6\VWHPVWHXHUXQJ PLWKLOIH GHV +DUGZDUH$VVLVWHQWHQ JHVFKHKHQ 'DEHL PXVV EHL GHU $XVZDKO GHV +DUGZDUHW\SV GLH.DWHJRULH 1 (7=:(5. $'$37(5 JHZlKOW ZHUGHQ DFÜ-Verbindung 6RZRKO I U HLQHQ,QWHUQHW]XJDQJ EHU 0RGHP DOV DXFK EHU,6'1 P VVHQ 6LH HLQH ')h9huelqgxqj HLQULFK WHQ 'LHVHU 9RUJDQJ ZLUG QDFK GHU,QVWDOODWLRQ YRQ,6$ 6HUYHU LP =XVDPPHQKDQJ PLW GHU (LQULFKWXQJ HL QHV VLFKHUHQ,QWHUQHW]XJDQJV EHVFKULHEHQ Eine weitere Netzwerkk arte installieren :HQQ I U GHQ =XJDQJ ]XP,QWHUQHW HLQ 5RXWHU YHUZHQGHW ZHUGHQ VROO PXVV LP,6$ 6HUYHU ZHQLJVWHQV HLQH ]XVlW]OLFKH 1HW]ZHUNNDUWH HLQJHEDXW ZHUGHQ 'LH 9HUZHQGXQJ YRQ ]ZHL ORJLVFKHQ /$19HUELQGXQJHQ EHU HLQH JHPHLQVDPH.DUWH LVW ZHGHU P JOLFK QRFK DXV 6LFKHUKHLWVJU QGHQ VLQQYROO 'LH ]ZHLWH 9HUELQGXQJ VROOWH DXVVFKOLH OLFK ]XP 5RXWHU I KUHQ :LQGRZV 6HUYHU YHUI JW EHU 7UHLEHU I U GLH PHLVWHQ JlQJLJHQ 1HW]ZHUNNDUWHQ XQG LQVWDOOLHUW GLHVH DXWRPDWLVFK VREDOG 6LH QDFK GHP (LQEDX GHQ &RPSXWHU VWDUWHQ *OHLFK]HLWLJ ULFKWHW :LQGRZV 6HUYHU DXWRPDWLVFK HLQH QHXH /$19HUELQGXQJ I U GLH ]ZHLWH 1HW]ZHUNNDUWH HLQ 'D]X ZHUGHQ 6WDQGDUGHLQVWHOOXQJHQ YHUZHQGHW $EZHLFKHQGH (LQVWHOOXQJHQ P VVHQ 6LH QXQ QRFK NRQILJXULHUHQ.OLFNHQ 6LH LP :LQGRZV'HVNWRS PLW GHU UHFKWHQ 0DXVWDVWH DXI GDV 6\PERO 1 (7=:(5.80*(%81*.OLFNHQ 6LH DQVFKOLH HQG LP.RQWH[WPHQ DXI (,*(16&+$)7(1.OLFNHQ 6LH GRSSHOW DXI GDV 6\PERO GHU EHWUHIIHQGHQ /$19HUELQGXQJ 'DV 'LDORJIHQVWHU 6 7$786Ã 921Ã /$19(5%,1'81*Ã ZLUG DQJH]HLJW.OLFNHQ 6LH DXI GLH 6FKDOWIOlFKH (,*(16&+$)7(1 XQG PDUNLHUHQ 6LH LP /LVWHQIHOG ',(6(Ã 9 (5%,1'81*Ã 9(5:(1'(7Ã )2/*(1'(Ã ( /(0(17( GHQ (LQWUDJ, 17(51( // 7&3,3.OLFNHQ 6LH DXI GLH 6FKDOWIOlFKH (,*(16&+$)7(1 'DV 'LDORJIHQVWHU (,*(16&+$)7(1Ã 921Ã, 17(51( //Ã 7&3,3 ZLUG DQJH]HLJW.RQILJXULHUHQ 6LH GLH,3$GUHVVHQ QDFK %HGDUI.OLFNHQ 6LH DEVFKOLH HQG DXI 2. Eigenschaften von TCP/IP Ende der Hardware-Vorbereitungen 0LW GHU,QVWDOODWLRQ HLQHV 0RGHPV HLQHU,6'1.DUWH RGHU HLQHU ]ZHLWHQ 1HW]ZHUNNDUWH VLQG GLH +DUGZDUH9RU EHUHLWXQJHQ GHV 6HUYHUV ]XU,QVWDOODWLRQ YRQ,6$ 6HUYHU DEJHVFKORVVHQ 'HU 6HUYHU NDQQ QXQ SULQ]LSLHOO 9HUPLWWOXQJVIXQNWLRQHQ ]ZLVFKHQ GHQ DQJHVFKORVVHQHQ 1HW]HQ ZDKUQHKPHQ ] % PLW )XQNWLRQHQ DOV 5RXWHU DXI,62/D\HU

13 Installationen planen und vorbereiten 3 Active Directory Application Mode 'LH,6$ 6HUYHU (QWHUSULVH (GLWLRQ YHUZHQGHW ]XP 6SHLFKHUQ GHQ VR JHQDQQWHQ $FWLYH 'LUHFWRU\ $SSOLFDWLRQ 0RGH $'$0 VRGDVV GLH.RQILJXUDWLRQ QLFKW ZLH LQ GHU 9RUJlQJHUYHUV LRQ YRUJHVFKULHEHQ LQ HLQHP $FWLYH 'LUHFWRU\ 6FKHPD JHVSHLFKHUW ZHUGHQ PXVV %HL,6$ 6HUYHU PXVVWH GDV $FWLYH 'LUHFWRU\ 6FKHPD HUZHLWHUW ZHUGHQ 'D]X VWDQG LP :LOONRPPHQV IHQVWHU GHU,QVWDOODWLRQ YRQ,6$ 6HUYHU GLH 5XEULN,6$Ã 6 (59(5Ã8 17(51(+0(16,1,7,$/,6,(581* ]XU 9HUI JXQJ 6LQQ YROOHUZHLVH ZXUGH GLH 6FKHPD(UZHLWHUXQJ DXI GHP :LQGRZV6HUYHU DXVJHI KUW GHU GLH )XQNWLRQ GHV 6FKHPD0DVWHUV LQQHKDWWH 'LH,QVWDOODWLRQ YRQ $'$0 XQWHU,6$ 6HUYHU ZLUG ]ZDU HEHQIDOOV YRQ GHU,QVWDOODWLRQV&' ]X,6$ 6HUYHU DXV JHVWDUWHW JHVFKLHKW DEHU DXWRPDWLVFK LP +LQWHUJUXQG ZHQQ GHU HQWVSUHFKHQGH 5HFKQHU DOV.RQILJXUD WLRQVVSHLFKHU I U HLQ,6$ 6HUYHU $UUD\ HLQJHULFKWHW ZLUG 3.7 Zusammenfassung Umfangreiche Vorbereitungen 1DFK $EVFKOXVV HLQHU VRUJIlOWLJHQ 3ODQXQJVSKDVH VLQG GLH =LHONRQILJXUDWLRQ XQG GLH 6LFKHUKHLWVDQIRUGHUXQJHQ GHILQLHUW 'HU QRWZHQGLJH +DUGZDUH8PIDQJ LVW EHNDQQW XQG HLQJHULFKWHW LQVEHVRQGHUH YHUI JW GHU I U GLH,QVWDOODWLRQ YRQ,6$ 6HUYHU DXVJHZlKOWH &RPSXWHU EHU HLQH 6FKQLWWVWHOOH ]XP,QWHUQHW 'LHVH 6FKQLWW VWHOOH NDQQ HLQ 0RGHP HYHQWXHOO DXFK '6/0RGHP HLQH,6'1.DUWH RGHU HLQH ]XVlW]OLFKH 1HW]ZHUNNDUWH PLW 9HUELQGXQJ ]X HLQHP 5RXWHU VHLQ 9RUEHUHLWHQGH 0D QDKPHQ GLHVHU $UW P JHQ DOV VHKU DXIZlQGLJ HUVFKHLQHQ DEHU LQ GHU 3UD[LV ]HLJW VLFK LPPHU ZLHGHU GDVV GLH =HLW GLH ] % LQ HLQH XPIDQJUHLFKH 3ODQXQJ LQYHVWLHUW ZLUG GLH HLJHQWOLFKH,QVWDOODWLRQ XQG YRU DOOHP GLH VSlWHUH :DUWXQJ GHV 6\VWHPV GHXWOLFK HUOHLFKWHUW Notizen