Windows Vista Configuration MCTS : Network Security

Spyware Generate annoying pop-ups Monitor keystrokes Scan files on the hard drive Snoop other applications such as chat programs or word processors Install other spyware programs Read cookies Change the default home page on the web browsers other links or default pages Open your computer to be accessed by others

Reduce your chance of being affected by Spyware: Use a good antivirus package Use spyware-detecting and -removal programs Be sure that your machine has all security patches and fixes loaded Install software only from sources and websites you trust Be careful about what software you install on your system Keep your web browser security settings to Medium or higher Install or enable a personal firewall Use pop-up blockers

Windows Defender Real-time protection Scanning options SpyNet community

Windows Defender Security Agents Microsoft Internet Explorer Configuration Internet Explorer Downloads Internet Explorer Add-Ons (Browser Helper Objects) Auto Start System Configuration Services and Drivers Windows Add-Ons Application Execution Application Registration (API Hooks)

Automatic Scanning Quick Scan Full Scan Custom Scan

Windows Defender Options Ignore Quarantine Remove Always Allow

Software Explorer in Windows Defender

Windows Firewall Windows Firewall is a packet filter and stateful host-based firewall. A packet filter protects the computer by using an access control list (ACL). A stateful firewall monitors the state of active connections and uses the information gained to determine which network packets are allowed through the firewall.

Windows Firewall Inbound rules Outbound rules Connection-specific rules

Windows Firewall Improvements IPv6 connection filtering Outbound packet filtering Rules can be configured for individual services chosen from a list without needing to specify the full path filename. Internet Protocol Security (IPSec) is fully integrated with Windows Firewall to make sure there is not a conflict between IPSec and firewall settings. Capability to have separate firewall profiles when computers communicating on a Windows domain are connected to the Internet (public) or private network.

Basic Configuration

Windows Firewall Settings Interface General Turn Windows Firewall on and off. Block all incoming connections. Exceptions Specify which programs and services are allowed through. Never create an exception when unsure about functionality. Advanced Select which network interfaces will be protected.

Advanced Configuration Inbound rules Outbound rules Connection security rules Monitoring

Inbound and Outbound Rules Inbound rules can prevent… Unwanted software being copied to your computer Unknown or unsolicited access to data on your computer Unwanted configuration of your computer Outbound rules can prevent… Programs including malware from accessing network resources Programs including malware from downloading software Users downloading software

Configuration Settings Tabs General Programs and Services Users and Computers Protocols and Ports Scope Advanced

Rule Types Isolation Authentication exemption Server to Server Tunnel Custom