MOAC 70-410 - Installing and Configuring Windows Server 2012 Lab Manual

LAB 19
CONFIGURING
WINDOWS FIREWALL

THIS LAB CONTAINS THE FOLLOWING EXERCISES AND ACTIVITIES:

Exercise 19.1

Installing Internet Information Services

Exercise 19.2

Testing IIS Connectivity

Exercise 19.3

Allowing Apps through the Windows Firewall Control Panel

Exercise 19.4

Creating Windows Firewall Rules

Lab Challenge

Creating an FTP Server Rule

Exercise
19.1

Installing Internet Information Services

Overview

In this exercise, you install IIS to configure SVR-MBR-B as a web

server, which you will use later to demonstrate the functions of
Windows Firewall.

Mindset

How can you use a firewall to limit access to a web server?

Completion time

15 minutes

MOAC 70-410 - Installing and Configuring Windows Server 2012 Lab Manual

What URLs can you use in your computers browser to test

the functionality of the intranet website you just created?

Question
1

22. Take a screen shot of the Internet Information Services (IIS) Manager console,
showing the new site you created, by pressing Alt+Prt Scr, and then paste the
resulting image into the Lab 19 worksheet file in the page provided by pressing
Ctrl+V.

[copy screen shot over this text]

Exercise
19.2

Testing IIS Connectivity

Overview

In this exercise, you test the default connectivity to the web server you
just installed and configured.

Mindset

What is the default Windows Firewall configuration?

Completion time

15 minutes

What possible reason would explain why you are unable to

connect to the Intranet site on your computers web server,
using a browser on another computer.

Question
2

MOAC 70-410 - Installing and Configuring Windows Server 2012 Lab Manual

9.

Take a screen shot of the Customize settings for each type of network window,
showing the setting you changed, by pressing Alt+Prt Scr, and then paste the
resulting image into the Lab 19 worksheet file in the page provided by pressing
Ctrl+V.

[copy screen shot over this text]

Why is it necessary to clear the cache before you retest the

web server connections?

Question
3

Why can you not simply leave Windows Firewall turned off
when you deploy an actual web server?

Question
4

Exercise
19.3

Allowing Apps through the Windows Firewall Control

Panel

Overview

Windows Firewall is preventing some clients from connecting to the

web server.

Mindset

What access to Windows Firewall does the Control Panel provide?

Completion time

15 minutes

MOAC 70-410 - Installing and Configuring Windows Server 2012 Lab Manual

Why are you now unable to connect to the website from the
client?

Question
5

Why are you unable to connect to the intranet site from the
client?

Question
6

Exercise
19.4

Creating Windows Firewall Rules

Overview

The port you worked with in Exercise 19.3 enables clients to access the
default website hosted by your web server, but not the intranet website.
In this exercise, you use the Windows Firewall with Advanced Security
console to create rules that will enable clients to access both websi tes.

Mindset

How do you customize the protection provided by Windows Firewall?

Completion time

15 minutes

How would the opening of the port you performed in Exercise

19.3 affect the World Wide Web Services (HTTP Traffic-In)
rules you just examined?

Question
7

MOAC 70-410 - Installing and Configuring Windows Server 2012 Lab Manual

How would the rule creation procedure you just performed

differ if you wanted to restrict client access to the intranet site
to computers on the local network only?

Question
8

14. Take a screen shot of the Properties sheet for the new rule by pressing Alt+Prt
Scr, and then paste the resulting image into the Lab 19 worksheet file in the page
provided by pressing Ctrl+V.

[copy screen shot over this text]

What are the results, and why are they different from the
results you experienced with the program exception?

Question
9

Lab
Challenge

Creating an FTP Server Rule

Overview

To complete this challenge, you must configure Windows Firewall to

allow incoming traffic to reach an FTP server running on the computer.

Completion time

15 minutes

On SVR-MBR-B, using Windows Firewall with Advanced Security, create rules that will permit
all possible traffic generated by FTP clients to reach an FTP server running on SCR-MBR-B.
Take a screen shot of the New Inbound Rule Wizard page showing the operative properties of the
rule by pressing Alt+Prt Scr, and then paste the resulting image into the Lab 19 worksheet file in
the page provided by pressing Ctrl+V.

MOAC 70-410 - Installing and Configuring Windows Server 2012 Lab Manual

[copy screen shot over this text]