Chapter 5: Securing Windows Server networking
Two questions in this chapter. Who is allowed to talk to my server? That's the firewall. And how do they talk to it, authenticated and encrypted? That's IPsec.
Labs
| Lab | Attack | Control |
|---|---|---|
| 5.1 Windows Defender Firewall | Worm scanning for open SMB / RDP | Windows Defender Firewall with scoped rules |
| 5.2 IPsec connection security rules | Man-in-the-middle / rogue laptop on the LAN | IPsec connection security rules (domain isolation) |
| 5.3 Firewall review with Windows Admin Center | "Allow all" inbound rule planted by the attacker | Firewall review with Windows Admin Center |