Forefront Threat Management Gateway 2010 (TMG) – 安裝前置作業

Jim Harrision與Yuri Diogenes的Microsoft Forefront Threat Management Gateway (TMG) Administrator’s Companion一書中提到四種部屬TMG的架構:

  1. 邊緣防火牆(Edge firewall)
    TMG主要是用來分析OSI第二層資料連結層與第三層網路層的行為,雖然它也可以用再更高層次像是惡意程式檢查、URL過濾或是入侵偵測等等,但主要任務還是以分析封包為主,如果要部屬成邊緣防火牆就必須要有內部網路與外部網路的介面。
    這是一個最典型的網路保護模式,可以直接在閘道就過濾惡意網頁或程式甚至是攻擊行為,這比以往每個網頁都要經過使用者的防毒軟體過濾,大大的降低企業資源的成本。
  2. 外圍三向(3-leg perimeter firewall)
    或是trihomed perimeter network,其在單一設備有三張網卡,可以讓其對外連線,並分離使用者電腦與伺服器區即是(網路、DMZ、內部網路)。
  3. 後端防火牆(Back firewall)
    此種部屬方式前面的防火牆可以阻擋攻擊,後面的則可以進行身分驗證紀錄等工作。
  4. 單一網路卡介面(Single NIC Web proxy server)

但這四種架構大致上一樣的必須將TMG部屬在內網與外網的交接,因此如果你是自己要裝TMG起來就必須具備兩張網卡一張對內一張對外,而本篇就是介紹安裝TMG的前置步驟

首先Forefront Threat Management Gateway(TMG)安全前請檢查以下幾點

TMG安裝注意事項

項目 確認事項
內部位址 定義好內部位址的範圍
驗證方法與要求 決定好內部用戶的驗證方式與要求
網路範本 決定好目前要使用的網路範本
名稱解析 定義好DNS伺服器
安裝路徑 決定好要安裝在哪個實體硬碟
作業系統更新 系統安裝時會要求更新作業系統,確保防火牆是在最好狀態
驅動程式 請確認系統的驅動都安裝無誤碟

接下來我們就進入網卡的設定

網路卡相關設定

設定好內部與外部網路,並且更改名稱(可按F2來更名),這樣可以讓您比較好分便網路的形態

修改綁定順序(Binding Order)

在預設沒有開啟進階功能表的情況下您找不到Binding Order的選項,所以先開啟進階功能表

選擇組合管理>版面配置>功能表列

選擇進階>進階設定

把LAN的順序調前,WAN在後

並且把WAN的服務取消

設定好後我們便作好安裝TMG的前置作業,便可以準備安裝Forefront Threat Management Gateway 2010(TMG2010),本文主要是實作記錄書上沒有詳細寫的步驟,讓看書作的人可以更容易理解

參考資料

707 comments

  1. Complaining. I have seen this kind of design for the first time.This is unique indeed. It gives you the perfectly punk look. I’ll definitely give these a try.

  2. Hi there! I realize this is kind of off-topic but I had to ask. Does operating a well-established blog such as yours take a massive amount work? I’m completely new to operating a blog however I do write in my diary on a daily basis. I’d like to start a blog so I can share my own experience and feelings online. Please let me know if you have any suggestions or tips for brand new aspiring blog owners. Thankyou!

  3. Having read this I thought it was very informative. I appreciate you spending some time and effort to put this information together. I once again find myself personally spending a significant amount of time both reading and leaving comments. But so what, it was still worth it!

  4. It is appropriate time to make some plans for the future and it is time to be happy. I’ve read this post and if I could I wish to suggest you few interesting things or suggestions. Perhaps you can write next articles referring to this article. I want to read more things about it!

  5. We are a bunch of volunteers and starting a brand new scheme in our community. Your website offered us with helpful info to work on. You’ve done an impressive job and our entire group shall be thankful to you.

  6. Hey! This post could not be written any better! Reading through this post reminds me of my old room mate! He always kept talking about this. I will forward this post to him. Pretty sure he will have a good read. Thanks for sharing!

  7. This is the perfect webpage for anybody who hopes to find out about this topic. You understand so much its almost tough to argue with you (not that I really will need to…HaHa). You certainly put a new spin on a topic which has been discussed for decades. Great stuff, just great!

  8. Great post. I was checking continuously this blog and I am inspired! Extremely useful information particularly the ultimate phase 🙂 I handle such info much. I used to be looking for this certain info for a very long time. Thanks and best of luck.

  9. I’ll right away grasp your rss as I can’t in finding your e-mail subscription link or e-newsletter service. Do you have any? Please allow me understand so that I may just subscribe. Thanks.

  10. I’ve been surfing online more than 3 hours today, yet I never found any interesting article like yours. It is pretty worth enough for me. In my view, if all website owners and bloggers made good content as you did, the internet will be much more useful than ever before.

  11. I loved as much as you’ll receive carried out right here. The sketch is tasteful, your authored subject matter stylish. nonetheless, you command get bought an edginess over that you wish be delivering the following. unwell unquestionably come more formerly again since exactly the same nearly very often inside case you shield this hike.

  12. I got this site from my pal who informed me regarding this website and at the moment this time I am browsing this website and reading very informative content at this time.

  13. It is appropriate time to make a few plans for the longer term and it is time to be happy. I’ve read this submit and if I could I desire to recommend you some attention-grabbing issues or tips. Perhaps you can write next articles referring to this article. I desire to read more issues approximately it!

  14. Hello, Neat post. There’s an issue together with your site in web explorer, would check this? IE nonetheless is the marketplace leader and a big portion of folks will leave out your excellent writing due to this problem.

  15. Please let me know if you’re looking for a author for your blog. You have some really good posts and I believe I would be a good asset. If you ever want to take some of the load off, I’d love to write some content for your blog in exchange for a link back to mine. Please blast me an email if interested. Many thanks!

  16. Hey There. I found your blog using msn. This is a really well written article. I will be sure to bookmark it and return to read more of your useful info. Thanks for the post. I will definitely return.

  17. Hey, I think your site might be having browser compatibility issues. When I look at your website in Firefox, it looks fine but when opening in Internet Explorer, it has some overlapping. I just wanted to give you a quick heads up! Other then that, fantastic blog!

  18. You are so cool! I don’t think I’ve read anything like this before. So wonderful to find another person with a few unique thoughts on this issue. Really.. thanks for starting this up. This website is something that is required on the internet, someone with some originality!

  19. Great post. I was checking continuously this blog and I’m impressed! Very helpful information specially the last part 🙂 I care for such information much. I was seeking this certain information for a very long time. Thank you and good luck.

  20. Hello! I know this is kinda off topic nevertheless I’d figured I’d ask.
    Would you be interested in exchanging links or maybe
    guest writing a blog post or vice-versa? My
    site covers a lot of the same subjects as yours and I feel we could greatly benefit from each
    other. If you’re interested feel free to send me an email.
    I look forward to hearing from you! Great blog
    by the way!

  21. Hmm is anyone else experiencing problems with the images
    on this blog loading? I’m trying to determine if its
    a problem on my end or if it’s the blog. Any feed-back would be
    greatly appreciated.

  22. What i don’t understood is if truth be told how you are
    no longer actually a lot more neatly-favored than you may be right now.
    You are very intelligent. You know therefore considerably when it comes to this topic, produced me in my opinion believe
    it from numerous various angles. Its like men and women don’t
    seem to be involved until it’s one thing to accomplish with Girl gaga!
    Your personal stuffs nice. At all times take care of it up!

  23. I don’t know whether it’s just me or if everybody else experiencing issues with your
    website. It appears as if some of the written text in your content are running off
    the screen. Can someone else please provide feedback and let me know if this
    is happening to them too? This could be a problem with my browser because I’ve had this happen before.
    Many thanks

  24. Excellent post. Keep writing such kind of information on your
    blog. Im really impressed by your blog.
    Hi there, You’ve performed a fantastic job. I will definitely digg it and in my opinion recommend to my friends.
    I am confident they’ll be benefited from this site.

  25. obviously like your web site but you need to take a look
    at the spelling on several of your posts. Many of
    them are rife with spelling issues and I in finding it very
    bothersome to tell the reality nevertheless I will definitely come
    back again.

  26. Quest bars cheap fitnesstipsnew1 quest bars cheap 516999410492780544 quest bars cheap

    I visit day-to-day some web pages and websites to read content, but this
    web site presents feature based writing. Quest bars cheap fitnesstipsnew1 quest bars cheap 516999410492780544 quest bars cheap

  27. Hey just wanted to give you a brief heads up and let
    you know a few of the pictures aren’t loading correctly.

    I’m not sure why but I think its a linking issue.
    I’ve tried it in two different internet browsers and both show the
    same results.

  28. First of all I want to say wonderful blog! I had a quick question that I’d like to ask if you
    don’t mind. I was interested to find out how you center yourself and clear your head prior to writing.
    I have had trouble clearing my mind in getting my ideas out there.
    I do take pleasure in writing but it just seems like the
    first 10 to 15 minutes are usually lost just trying to figure out how to
    begin. Any suggestions or tips? Thanks!

  29. What’s Taking place i am new to this, I stumbled
    upon this I have found It absolutely helpful and it has aided
    me out loads. I’m hoping to give a contribution & aid different users
    like its helped me. Good job.

發表迴響

你的電子郵件位址並不會被公開。

*