
YuChakTinMichael‘sGIACGCFWProjectAssignment
Page 42
n RPCConfiguration
n Server
FW1canfunctionperfectlyevenwithouttheseservices.Oneissuetoconsideris
whethertoinstallanduseRIPforIP.For FW1tofunctioncorrectlyasafirewall
gateway,routingmustbeproperlyconfiguredonNT.Staticroutesarealwayssafeand
efficient,butcanbecomplextoconfigure(italldependsonhowcomplicatedthe
networkenvironmentis).UsingRIPonthefirewallsystemcanmakelifeeasieratthe
expenseofverylittleperformanceoverheadandaverylimited(ifnotexist)security
exposure.Thesecurityexposureisnexttononeifweremembertoconfigurethe
borderroutertoscreenandblockallRIPtraffics.
Step2Disableunusedservices
Inoursystem,thefollowingsystemservices(whichhavebeeninstalledbydefault)
aredisabled:
n DHCPClient
n LicenseLoggingService
n NetworkDDEDSDM
n RemoteProcedureCall(RPC)Service
n Schedule
n Spooler
n TCP/IPNetBIOSHelper
n TelephonyService
Step3–DisableNetBIOS.
ThegoalistogetridofalllistenersontheNetBIOSports.Thiscanbedoneby
disabletheWINSclientbindingsofallNICs.
Comentarios a estos manuales