Forefront Threat Management Gateway 2010 (TMG) – 正式安裝 (2/2)

Forefront Threat Management Gateway 2010 (TMG) – 正式安裝 (1/2)

安裝過程(Forefront Threat Management Gateway 2010 (TMG) – 正式安裝 (1/2))

  • 前置作業
  • 準備工具
  • 安裝精靈

ForeFront主控台設定(Forefront Threat Management Gateway 2010 (TMG) – 正式安裝 (2/2))

  • 設定網路設定
  • 設定系統設定
  • 定義部屬選項

設定網路設定

此時如果出現都無法選擇的畫面,如下

代表你的安裝還沒有完成,請檢查你是否有以下畫面
如有請等待數10分鐘

完成以後可以看到下圖,您已經可以選擇,但外圍三向為何還不能點選,這是因為您的網路架構不符合,如本例,您需加裝一網卡才可以點選該項,在這我們選邊緣防火牆(Edge firewall)

設定您對內(LAN)的網卡與對外的(WAN),設定先前規劃的LAN網段

設定先前規劃的WAN網段,這裡我們手動設定IP相關資訊,並要記得下面要選私用,一般的架構內部都是用私用IP,除非你是ISP或是有很多公用IP才有此需求

如果您是選擇DHCP發送的會出現下圖警告,因為您選自動取得的關係,會讓防火牆容易受到DHCP伺服器的牽制造成資安問題,因此系統會警告。順帶一提如果是一般運行的伺服器建議用靜態IP位址,並做好ARP綑綁來確保伺服器不會被中間人攻擊。

這樣就可以完成網路設定精靈

設定系統設定

設定您的工作群組,如果有網域的話請設定網域,本實驗環境為簡易使用環境,因此尚未架設AD,此部分也可在之後修改

定義部屬選項

在授權的部分,我們使用評估模式,企業可以先使用評估在之後買了授權在更換,並啟動惡意程式碼掃描與URL篩選

惡意程式碼防禦

惡意程式防禦多久檢查一次更新,我們這裡用預設即可

之後的相關設定請自行選擇,等到設定完成後,我們就可以準備進入網頁存取精靈的設定部份,這也是TMG2010的新功能

URL篩選

這裡我們選擇是,不然就無法使用新功能的效果

此時我們可以看到內建好的網頁清單,微軟自網頁掃描廠商取得網頁分類,它會透過雲端來更新網頁分類,讓使用者可以即時享受無所不在的安全過濾

當然管理者都希望封鎖一般使用者而自己當然不希望被封鎖的感覺,這時就可以把自己加入例外清單。選擇「系統及網路服務

新增一個不受控制的群組

看你的需求作選擇,如果是要允許Windows系統使用者請選擇「Windows使用者和群組

選擇不受限的用戶,自己當然要先加進來

此時你就自定好一個不受封鎖的群組

設定是否檢查「網頁的內容」網頁可能帶有惡意程式或木馬請選擇檢查,而一些病毒可能會透過加密的壓縮來躲防毒軟體的偵測,因此你可以設定是不是封鎖這類檔案,在這裡我們都封鎖

HTTPS封包檢查

TMG另一個特色就是可以檢查HTTPS封包的東西,它的原理是利用像中間人攻擊的手法,攘您在作HTTPS通訊時都經過TMG而它也可以藉機分析封包的安全性,但HTTPS檢查需要匯入憑證檔,您必續透過AD或是IIS來產生,因此在這裡您還沒有憑證先不用開使這個功能,可以留後再使用

透過AD或是手動的將憑證會出到各個電腦

網頁掃描會使用到較多系統資源,建議可以給它一個獨立的硬碟來當快取磁碟

到此我們以經完成安裝與基本設定,現在一般電腦如果在TMG的環境下要上網,必須安裝TMG客戶端,或是TMG有開啟網頁代理服務透過TMG的伺服器上網

24 comments

  1. I don’t know yours language but i need to share sth with you…

    All of us have to have a well-balanced diet program for living a wholesome existence. It is noticed that generally, people do not use a healthy diet plan because of numerous motives frequently. Every once in awhile, the chaotic and demanding selected way of life causes us to overlook the body’s requirements; while other times, the all-eating passion for fad foods shall make it challenging for us to take a well-balanced and nutritious diet. Individuals who do not have a nutritious diet frequently grow to be toned and drained of energy all the time… which particular fatigue helps to keep them back in undertaking numerous day-to-day responsibilities.

    The good news is an entire collection of dietary or natural supplements are accessible in the current market, supplements that really help all of us to keep a far healthier and simpler standard of living. A ongoing health or dietary supplement could be explained as a health food, which complements what we consume with assorted essential nourishment including supplements, minerals, fibers, fatty proteins and acids that might or is probably not contained in the diet plan of an individual. To describe it a lot more plainly, chances are you have already been told that many medical professionals recommend frequent consumption of calcium mineral products to developing youngsters, ladies and older individuals for sustaining wholesome bones and articulations. Furthermore, nowadays, numerous wellness specialists globally declare that everyone ought to take in correct amounts of supplements to look after the chaotic life-style.

    Numerous dietary or natural supplements providing for you to satisfy particular dietary requirements of the body can be purchased. Determined by your own want, you either can select a dietary health supplement for proteins, or natural supplements for joint disease or a dietary supplement for men and females health issues perhaps. Below are a few of the supplements that focus on precise nutritional necessity for a much healthier lifestyle.

    Dietary Supplement for Weight Reduction: These types of fat loss organic supplements or health supplements are getting to be very widespread in the field of weight reduction and among those people who are looking for a straightforward strategy to drop just how much they weigh.

    SUPPLEMENTS Omega 3,6 and 9: These kinds of Omega elements are very important fatty acids that happen to be necessary for our body to execute many functions. It really is utilized by folks for protecting from heart related illnesses frequently. This generally contains E-DHA and EPA, which both support the cardiovascular system features.

    Nutritional supplement for osteo-arthritis: These types of natural supplements take apart the source of the ache due to arthritis. A particular plant based element works well for reducing the swelling, tightness and inflammation that take accepted place with sufferers going through joint disease.

    Product for men of all ages: There are numerous types of natural nutritional supplements for guys, which are particularly created for men’s body. These types of health supplements unwind them from exhaustion and tension.

    Natural Supplements for Ladies: These types of supplements supply daily boost of minerals and vitamins, consistent ingredients, digestive enzymes and protection assistance supplements to ladies.

    Increasing numbers of individuals are day by day applying natural supplements to stay in shape. You may also decide on the nutritional supplement befitting your necessity and transformation to a much better and more joyful life.

    Website : Spartanol

  2. We stumbled over here coming from a different website and
    thought I should check things out. I like what I see so i am just following you.
    Look forward to looking over your web page for a second time.

  3. What i do not realize is in reality how you’re no longer actually much more well-liked than you might be now.

    You are very intelligent. You understand thus considerably in relation to this subject, produced me
    in my view imagine it from so many varied angles. Its like
    women and men don’t seem to be fascinated except it is something to do with Woman gaga!
    Your own stuffs great. All the time deal with it up!

  4. I love your blog.. very nice colors & theme. Did you make this website yourself or did you hire someone to do it
    for you? Plz reply as I’m looking to construct my own blog
    and would like to know where u got this from. thanks

  5. I have been browsing online greater than 3 hours lately, yet I by no means found any interesting article
    like yours. It’s beautiful value sufficient for me.

    In my opinion, if all webmasters and bloggers made excellent content
    as you did, the web will probably be much more useful than ever before.

  6. Hey there would you mind stating which blog platform you’re using?
    I’m going to start my own blog in the near future but I’m having a tough time
    choosing between BlogEngine/Wordpress/B2evolution and Drupal.
    The reason I ask is because your design and style seems different then most blogs and I’m looking for something unique.

    P.S Sorry for getting off-topic but I had to ask!

  7. This is very attention-grabbing, You’re a very professional blogger.
    I have joined your feed and look forward to in the hunt for extra of
    your excellent post. Additionally, I have shared your web site in my social
    networks

  8. I do not even know how I ended up here, but I thought this post was great.
    I don’t know who you are but definitely you’re going to a famous blogger if you are not already 😉 Cheers!

發表迴響

你的電子郵件位址並不會被公開。

*