Outcome 3: Implement secure network administration procedures

Table of Contents

1. Windows Server 2003 Security Features
2. NTFS File and Folder Permissions
3. Software Update Infrastructure
4. Network Protocol Security
   1. Using the IP Security MMC Snap-In
   2. Opening the IP Security Monitor snap-in
   3. Kerberos Support Tools
   4. Kerbtray
   5. Kerblist
   6. Network Monitor and Netcap
   7. Troubleshooting network protocol security
   8. IP Security Policies
5. Self Assessment Questions (SAQs)
6. Summary: Implementing secure network administration procedures
7. Summary: Software Update infrastructure

Network Protocol Security

You will not know if you have configured network security properly unless you monitor it. Start by using the IP Security Policies MMC snap-in or the Netsh command to create an IP Security policy. Once this has been done, you can use the IP Security Monitor MMC snap-in and the Netsh or Netdiag command to monitor security.

The IP Security Monitor MMC snap-in is accessed by typing MMC in the Run text box and adding the IP Security Monitor snap-in. By default, there is no link to this under administrative tools but you could always create one. Once you have started the MMC and added the snap-in, the tools look as shown below:

This server has an active policy that requests IP Security. Policies must already be activated with either IP Security or Netsh for you to be able to monitor them with IP

Security Monitor. With IP Security Monitor, you can retrieve details about the policy that is applied, the main and quick mode statistics, and the current security associations.

Next: Using the IP Security MMC Snap-In