Reference no: EM133437991
1. Log into the Windows 7 virtual machine student account using the credentials listed in the Machines tab.
2. First, check and see what service pack is installed on your system.
3. Next, view a list of installed programs to gain an understanding of what is currently running on your system.
4. Notice that OpenOffice is installed on your system. Staying aware of your company security documentation, you recall that OpenOffice is not approved for use on organizational systems and will need to be removed. So take care of that now.
5. During the uninstall, a User Account Control window may appear asking you if you want to run a randomly named msi file. Click Yes.
1. Make the following changes to the machine: Configure Windows Update to install updates automatically Turn on the network firewall
2. Next, create a backup of the folders, C:labfiles and C:logfile, and back them up to a network share on the 192.168.0.10 box.
3. Verify User Account Control settings are at the default setting. If they are not, change and save the settings.
4. View all of the Security components being monitored in the Action Center by clicking on the button with a down arrow inside it. The button is located to the right of the Security heading and will open items below the Virus protection area.
5. Some changes will not be applied until the system is restarted. Restart the system to apply the changes.
1. Log back into the Windows 7 machine and see which programs are allowed access through the firewall. Programs that are allowed through will be marked as exceptions.
2. Rules can be set to allow or block inbound or outbound connections. Create a new rule that blocks all ICMP traffic trying to enter the system (inbound).
3. Next, create a rule to block all traffic from the IP address, 192.168.0.101.
4. Lastly, verify again the Firewall is on and is set to log any dropped packets
1. Let's now test the firewall rule. First, ping host 192.168.0.10 to verify a connection to it.
2. Then switch to the Windows Server 2012 and login using the credentials in the machine tab.
3. On the Windows Server 2012 box, ping the 192.168.0.30 host and make sure your ICMP rule is working properly. If it is not, make the appropriate changes.
4. Switch to the Windows 7 machine and find the firewall log entries that show the packets that were just dropped.
.Lastly, switch to the Kali machine and then login to it using the credentials in the machines tab. Then, run an nmap scan against the 192.168.0.30 box and make sure your second firewall rule is also working properly.