windows small business server 2003 la sicurezza garantita e pre-configurata per i servizi exchange,...
TRANSCRIPT
![Page 1: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/1.jpg)
Windows Small Business Server 2003
la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto
e l'amministrazione della reteAlessandro Appiani
Microsoft Certified Partner
![Page 2: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/2.jpg)
Agenda
Componenti tecnologici per la sicurezza Sicurezza perimetrale Sicurezza nelle comunicazioni di rete Sicurezza interna Policy, Auditing & Control
Le aree pre-configurate in Windows Small Business Server 2003 Network design & Architecture Infrastruttura Exchange Remote Access Active Directory Tools
Live Demo...
![Page 3: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/3.jpg)
Componenti tecnologici per la sicurezza
Perimetrale Firewalling E-mail protection
Comunicazioni Encryption Secure Socket Layer Virtual Private Network Remote Access
Rete interna Active Directory / Security Realm Policy (User, Computer, ...) Auditing Content inspection (Antivirus)
![Page 4: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/4.jpg)
Sicurezza perimetrale
![Page 5: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/5.jpg)
Firewall
“Uno o più componenti/dispositivi che controllano l’accesso da una rete protetta verso/da Internet
e/o altre reti” *
*Zwicky, Cooper, Chapman – Building Internet Firewalls – O’Reilly 1995/2000
![Page 6: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/6.jpg)
Filters and Network Access
Streaming Media
SMTP
DNS Intrusion Firewall
Access Policy
Allow HTTP
All Destinations
Internal/Protected NetworkInternal/Protected NetworkExternal/Unsecured NetworkExternal/Unsecured Network
Rules A
pplied
Streaming Media
SMTP
![Page 7: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/7.jpg)
Firewall in Small Business Server
A Controlled Point of Access for All Traffic that Enters the Internal Network
A Controlled Point of Access for All Traffic that Leaves the Internal Network
Inside/Outside
Windows Server 2003ISA Server
![Page 8: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/8.jpg)
Sicurezza nelle comunicazioni
![Page 9: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/9.jpg)
Quali problemi abbiamo con una comunicazione di rete che usa connettività pubblica come Internet?
NetworkNetworkMonitoringMonitoringNetworkNetwork
MonitoringMonitoring
DataDataModificationModification
DataDataModificationModification
IdentityIdentitySpoofingSpoofingIdentityIdentity
SpoofingSpoofingMan-in-Man-in-
the-Middlethe-MiddleMan-in-Man-in-
the-Middlethe-Middle
Password-Password-basedbased
Password-Password-basedbased
![Page 10: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/10.jpg)
Encrypts Data at the Application Layer SSL TLS
Encrypts Data at the Network Layer Tunneling Protocol IPSec
La soluzione: la cifratura dei dati trasmessi
Encrypted IP Packet
![Page 11: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/11.jpg)
Cifratura del traffico
Application-Layer
Network-Layer: Virtual Private Network (VPN)
ApplicationApplicationApplicationApplication
SSL/TLSSSL/TLSSSL/TLSSSL/TLS
TCP/UDPTCP/UDPTCP/UDPTCP/UDP
IP/IPSecIP/IPSec
Link LayerLink LayerLink LayerLink Layer
Physical Physical LayerLayer
Physical Physical LayerLayer
ApplicationApplication
SSL/TLSSSL/TLS
![Page 12: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/12.jpg)
Sicurezza interna e controllo
Active Directory!
Active Directory!
Active Directory!
![Page 13: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/13.jpg)
Windows Small Business Server 2003
Componenti di sicurezza
setup & configuration
![Page 14: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/14.jpg)
Scenario di connessione router
Internet
InternetRouter(ISP) SBS
rete pubblica(es: 193.205.245.24/29)
rete privata10.0.1.0/24
.2
xDSLFibra ottica
ISDN...
rete pubblica (con NAT)(es: 192.168.0.0/24)
azienda.local
![Page 15: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/15.jpg)
To Do List
![Page 16: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/16.jpg)
The Configure E-mail and Internet Connection Wizard
This wizard provides on-screen instructions to configure the following server settings:This wizard provides on-screen instructions to configure the following server settings:
Networking
Firewall
Secure Web publishing
Networking
Firewall
Secure Web publishing
![Page 17: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/17.jpg)
Network Connections
Broadband connection types include:Broadband connection types include:
Direct broadband connection
Local router
Broadband connection that requires a user name and password
Direct broadband connection
Local router
Broadband connection that requires a user name and password
The Configure E-mail and Internet Connection Wizard supports multiple Internet connections that use a broadband device or a modem
![Page 18: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/18.jpg)
Firewall Settings
To configure the firewall, you must meet one of the following criteria:To configure the firewall, you must meet one of the following criteria:
Use a dial-up connection to the InternetUse a direct broadband connection that requires a user name and password (es: modem adsl)Use a broadband connection to the Internet (es: router) Use an existing firewall device on your network that supports Universal Plug and Play
Use a dial-up connection to the InternetUse a direct broadband connection that requires a user name and password (es: modem adsl)Use a broadband connection to the Internet (es: router) Use an existing firewall device on your network that supports Universal Plug and Play
![Page 19: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/19.jpg)
You can choose which Web site services that users can access, such as:You can choose which Web site services that users can access, such as:
Secure Web Site Settings
Outlook Web Access
Remote Web Workspace
Performance and Usage reports
Outlook Mobile Access
SharePoint site
Outlook Web Access
Remote Web Workspace
Performance and Usage reports
Outlook Mobile Access
SharePoint site
![Page 20: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/20.jpg)
To send and receive Internet e-mail messages by using Exchange: To send and receive Internet e-mail messages by using Exchange:
E-mail Settings
Choose the appropriate delivery method Choose the appropriate retrieval method Choose the signal type Enter the registered Internet domain name Determine whether to remove e-mail
attachments from incoming e-mail
![Page 21: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/21.jpg)
![Page 22: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/22.jpg)
![Page 23: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/23.jpg)
![Page 24: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/24.jpg)
![Page 25: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/25.jpg)
![Page 26: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/26.jpg)
![Page 27: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/27.jpg)
![Page 28: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/28.jpg)
![Page 29: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/29.jpg)
![Page 30: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/30.jpg)
![Page 31: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/31.jpg)
![Page 32: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/32.jpg)
![Page 33: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/33.jpg)
![Page 34: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/34.jpg)
![Page 35: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/35.jpg)
![Page 36: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/36.jpg)
![Page 37: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/37.jpg)
![Page 38: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/38.jpg)
![Page 39: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/39.jpg)
![Page 40: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/40.jpg)
Windows Small Business Server Remote Access Wizard
This wizard provides on-screen instructions for configuring your server for:This wizard provides on-screen instructions for configuring your server for:
VPN connections
Dial-up connections
Both VPN and dial-up connections
VPN connections
Dial-up connections
Both VPN and dial-up connections
After clicking Finish, the wizard:After clicking Finish, the wizard:
Configures the server according to your selected settings
Creates the Client Connection Manager configuration file
Configures the remote access policy to allow members of the Mobile Users group to use remote access
Configures the server according to your selected settings
Creates the Client Connection Manager configuration file
Configures the remote access policy to allow members of the Mobile Users group to use remote access
![Page 41: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/41.jpg)
![Page 42: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/42.jpg)
![Page 43: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/43.jpg)
![Page 44: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/44.jpg)
![Page 45: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/45.jpg)
![Page 46: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/46.jpg)
![Page 47: Windows Small Business Server 2003 la sicurezza garantita e pre-configurata per i servizi Exchange, l'accesso remoto e l'amministrazione della rete Alessandro](https://reader034.vdocuments.site/reader034/viewer/2022051613/5513ed3b5503463a298b5e39/html5/thumbnails/47.jpg)
Riferimenti e risorse
Risorse tecniche per Windows Small Business Server 2003http://www.microsoft.com/italy/windowsserver2003/sbs/techinfo/default.mspx
MOC Course 2395: Design, Deploy, and Manage a Network Solution for a Small and Medium Businesshttp://www.microsoft.com/traincert/syllabi/2395AFinal.asp
Exam 70-282: Design, Deploy, and Manage a Network Solution for a Small- and Medium-Sized Businesshttp://www.microsoft.com/learning/exams/70-282.asp