c# qr code generator source Exercise 8: Testing a VPN Quarantine Connection in Visual C#.NET

Generator QR Code in Visual C#.NET Exercise 8: Testing a VPN Quarantine Connection

1. In the VPN To Coho Vineyard connection dialog box, type the following information:

User Name: Manager1 Password: Manager1 s password Logon Domain: cohovineyard Save Password: Enable Connect Automatically: Disable (Accept Default)

Click Connect. 2. The quarantine script displays a message box to indicate that the security configuration of the client computer does not meet the security policy (the C:\Access.txt file does not exist). 3. Click OK to close the Remote Access Quarantine message box. 4. The connection stays in quarantine mode and is dropped after 60 seconds. Wait for the connection to be dropped. In the Reconnect dialog box, click No. 5. Open Windows Explorer and create a file named Access.txt on the C drive.

10-68

10

6. In the Network Connections window, under Connection Manager, right-click VPN To Cohovineyard, and then click Connect. 7. In the VPN To Cohovineyard Connection dialog box, ensure that the User Name and Password information is still present, and then click Connect. This time the quarantine script displays a message box to indicate that the security configuration of the client computer meets the security policy. 8. The quarantine script successfully notifies the Rqs.exe service. ISA Server removed the quarantine restrictions by moving the VPN client computer from the Quarantined VPN Clients network to the VPN Clients network. 9. Click OK to close the Remote Access Quarantine message box. 10. At the command prompt, type ping 10.10.0.10, and then press ENTER. Four ping replies are returned from the DC1 (10.10.0.10) on the internal network. 11. Close the command prompt window. 12. In the Run dialog box, type \\10.10.0.10 and then press ENTER. A Windows Explorer window opens for \\10.10.0.10. These results show that the VPN client computer can now connect to resources on the internal network. 13. Close all open windows.

Use the following questions to help determine whether you have learned enough to move on to the next lesson. If you have difficulty answering these questions, review the material in this lesson before beginning the next lesson. You can find answers to these questions in the Questions and Answers section at the end of this chapter. 1. You are configuring ISA Server to support quarantined VPN client access. Your organization s security policy states that client computers should not be able to access the internal network if the antivirus software on the client computer is not up-to-date and if Windows Firewall is not enabled on all network connections. What quarantine control component can you use to enforce this configuration a. Configure a remote-access policy on IAS Server that sets limits to the IP ports that can be used by quarantined VPN clients. b. Configure ISA Server to limit the ports that can be used from the Quarantined VPN Clients network to access the internal network. c. Configure a client-side script that checks for the required settings. d. Configure the listener component on the ISA Server computer to listen for the required response from the client notification component.

10-69

2. Your organization s security policy states that all VPN clients that connect to your network must have the corporate antivirus application installed and updated with the latest definitions. You have set up a quarantine network and issued the CM profile to your clients with all the correct scripts. You have set up a private FTP site that the users can use to download and install the corporate antivirus program. How will you allow users to do this while they are in quarantine

3. Your company has several branch offices. You want to centralize quarantine control to a single RADIUS server. Where must you install the listener component a. On each branch-office ISA Server computer b. On the head-office ISA Server computer c. On the RADIUS server d. On the RRAS server