WIN2003 Create an IP Security policy to mask the port's graphics and text tutorial _win server

IP Security (Internet Protocol) is a security technology provided in Windows XP/2003, a point-to-point security model that enables higher levels of LAN data security.

When transmitting data on the network, it is possible to transfer the source computer to the target computer safely and efficiently by creating the IP Security policy and using the point-to-point security model.

To create an IP security policy

First, click Start-Control Panel-Administrative tools.

Second, on the Administrative Tools page, select Local Security Policy and double-click to open.

Third, in the pop-up Local Security Settings dialog box, select IP Security Policy, on the local computer.

Four, in the right pane blank position right mouse, pop-up shortcut menu, select "Create IP security Policy."

In the IP Security Policy Wizard dialog box that pops up, click the Next button.

In the IP Security Policy name interface that appears, enter the name of the new IP Security policy and click the Next button.

In the presence of the "Secure Communication Request" interface, "activate the default corresponding rules" to the left of the tick, click "Next".

Eight, in the "Completing the IP Security Policy Wizard" interface, remove the tick before edit properties, and click the Finish button.

Ix. in the Local Security Settings dialog box, select IP Security Policy "ITCSO", right-click, and select Properties.

In the Pop-up Itcso Properties dialog box, remove the tick to the left of the Use Add Wizard, and then click the Add button to add a new rule.

In the IP Filter List tab of the new Rule Properties dialog box that pops up, click the Add button.

12, in the Pop-up IP Filter List dialog box, click the Add button.

13. In the Addressing tab of the Filter Properties dialog box that appears, set the source address to "Any IP address" with the destination address set to "My IP address."

14. On the Protocol tab of the Filter Properties dialog box that appears, select TCP in the Select protocol type Drop-down list, then enter "135" in the text box under "To this port" and click on the "OK" button, which adds a masked TCP 135 (RPC ) The filter for the port .

To add the 139, 3389, 445, 137 port filters, follow the steps above, and click the OK button.

16, return to the New Rule Properties dialog box, on the IP Filter List tab, click the dot before the new IP filter list.

17. In the New Rule Properties dialog box, on the IP Filter Actions tab, click the dot before the new filter action, and then click the Add button before clicking the "Add Wizard" tab.

18. On the Security tab of the new filter action (1) Properties dialog box that appears, select Block and click OK.

19, enter the "New Rule Properties" dialog box, click on "New Filter Action (1)", the circle on the left will add a point, said has been activated, click the "Close" button, close the dialog box.

20, return to the Itcso Properties dialog box, click on the left of the new IP filter list, and press OK to close the dialog box.

21, return to the Local Security Policy window, right-click the newly added IP security Policy "ITCSO" and choose Assign.

22, Setup completes, after restarting the computer, the above network port on the computer is shut down, the virus and hacker can no longer connect these ports, thus protects your computer.