LAB ASSIGNMENT 11 – Exploring Firewalls

Materials Needed:

• 2 Computers
• Installed Windows
• Internet access
• TinyWeb server - http://www.ritlabs.com/tinyweb/
• SuperScan - http://www.foundstone.com/resources/termsofuse.htm?file=superscan4.zip

PART I: Windows XP firewall

Step 1: Opening Windows Firewall

Select Windows Firewall in Control Panel

Step 2: configure the firewall

• Be sure that the firewall is On
• Check which programs and services are permitted (Exceptions tab)
• Check where the security log is saved (Advanced tab)
• Check the ICMP settings (Advanced tab)

Step 3: test the firewall

Pair up with another group and try connecting to the computer with the firewall using the different techniques used in Lab 9:

• Ping
• ftp
• telnet
• telnet to port 80
• If you have SuperScan installed, use it to “attack” the firewall from another computer

Step 4: analyze the firewall

Analyze the results of your tests

• Was the firewall easy to use?
• Was the firewall easy to configure?
• Did the firewall seem to work?
• Were there many false positives?
• Were there any false negatives?
• Inspect the logs

PART II: Third Party firewall

Activity

Step 1: dowload a firewall

• Download one of the recommended firewalls in class
• ZoneAlarm - http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp?lid=zaskulist_download
• Norton Personal Firewall - http://nct.symantecstore.com/0142/NPF_2005_trailware.html
• BlackICE PC Protection - http://www.iss.net/issEn/DLC/blackiceevaluation.jhtml
• eTrust™ EZ Firewall 2005 - http://home.ca.com/dr/v2/ec_main.entry25?page=FWTrialwareLandingPage&client=ComputerAssociates&sid=35715
• F-Secure Internet Security 2005 - http://shop.element5.com/demoreg.html?productid=544568&languageid=1

Step 2: install the firewall

• Install and configure the firewall that you downloaded in Step 1.

Step 3: test the firewall

Pair up with another group and try connecting to the computer with the firewall using the different techniques used in Lab 9:

• Ping
• ftp
• telnet
• telnet to port 80
• If you have SuperScan installed, use it to “attack” the firewall from another computer

Step 4: analyze the firewall

Analyze the results of your tests

• Was the firewall easy to use?
• Was the firewall easy to configure?
• Did the firewall seem to work?
• Were there many false positives?
• Were there any false negatives?
• Inspect the logs