Chapter 11. Maintaining Secure Network Communications

In this chapter:

Understanding IPSec Policy

Managing and Maintaining IPSec Policy

Deploying Public Key Policies

Understanding Windows Firewall Policy

Managing Windows Firewall Policy

Summary

Proper configuration of Network Communications security is essential for protecting your organization’s computers and your network as a whole. Without proper security precautions, your computer resources are vulnerable to attack and misuse. Through Group Policy, you can ensure secure network communications in three broad ways:

  • IP Security, also known as IPSec, which allows for secure, authenticated, and encrypted communications on TCP/IP networks

  • Public key encryption, which lets you control the use of public key certificates and enables related public key technologies

  • Windows Firewall, formerly Internet Connection Firewall, which provides stateful host-based TCP and UDP port filtering to protect computers against unauthorized access

Policy settings related to these features provide many options that allow for full customization and offer a great deal of flexibility. However, you need a strong understanding of the underlying technologies and a solid implementation plan before you modify any network communications security policies.

Related Information

  • For more information on Microsoft Windows authentication mechanisms and techniques, see "Design Considerations for Active Directory Authentications and Trusts," in Chapter 33 of Microsoft Windows Server 2003 Inside Out (Microsoft Press, 2004).

  • For more information about IPSec in the Windows Server 2003 operating system, see http://www.microsoft.com/ipsec/.

  • For more information about Public Key Infrastructure (PKI) and certificate security, see Microsoft Windows Server 2003 PKI and Certificate Security (Microsoft Press, 2004).

  • For more information about PKI technologies, see http://www.microsoft.com/pki/.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset