Cài đặt Forefront Threat Management Gateway 2
Transcript of Cài đặt Forefront Threat Management Gateway 2
![Page 1: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/1.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
Cài đặt Forefront Threat Management
Gateway (TMG) 2010 - Phần II: Cài đặt
Forefront TMG Server
Nội dung trong phần II này là hướng dẫn các bước cài đặt Forefront TMG Server
I. Mô hình:
II. Chuẩn bị:
Trong mô hình lab sử dụng 2 máy Windows Server 2008 R2
- Server01 làm chức năng TMG Server (PC21.msopenlab.com)
- Server02 làm chức năng DC, DNS Server & Client (PC22.msopenlab.com)
Thiết lập TCP/IP cho 2 máy như trong bảng sau:
Interface\Server
Server01 (TMG Server) Server02 (DC/DNS)
![Page 2: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/2.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
INT IP: 172.16.21.1
GW:
DNS: 172.16.21.2
IP: 172.16.21.2
GW: 172.16.21.1
DNS: 172.16.21.2
EXT IP: 192.168.1.21
GW: 192.168.1.1 (DSL
Router)
DNS: 203.162.4.191
- Cấu hình Server02 làm Domain Controller & DNS Server của domain
MSOPENLAB.COM
- Join Server01 vào domain MSOPENLAB.COM
III. Thực hiện:
1. Thực hiện Windows Update
Chạy Windows Update để cài đặt các bản cập nhật & bản vá lỗi cần thiết trước khi cài đặt
Forefront TMG Server
- Trên TMG Server, logon MSOPENLAB\Administrator, chay file autorun.hta trong
source cài đặt Forefront TMG 2010
![Page 3: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/3.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong cửa sổ cài đặt Forefront TMG 2010, chọn Run Windows Update
![Page 4: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/4.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Sau khi update thành công, chọn Install updates
![Page 5: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/5.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Windows Update, chọn I accept the license terms, chọn Finish
![Page 6: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/6.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Sau khi cài đặt Windows Update thành công, chọn Restart now
![Page 7: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/7.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
2. Chạy Preparation Tool
Chạy Preparation Tool để cài đặt các Roles & Features cần thiết cho Forefront TMG
Server
-Trong cửa sổ cài đặt Forefront TMG 2010, chọn Run Preparation Tool
![Page 8: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/8.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
-Trong hộp thoại Welcome, chọn Next
![Page 9: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/9.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại License Agreement, đánh dấu chọn I accept the terms of the License
Agreements, chọn Next
![Page 10: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/10.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Installation Type, chọn Forefront TMG services and Management,
chọn Next
![Page 11: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/11.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Sau khi cài đặt thành công, chọn Finish
![Page 12: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/12.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
3.Cài đặt Forefront TMG Server
- Trong cửa sổ cài đặt Forefront TMG 2010, chọn Run Installation Wizard
![Page 13: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/13.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Welcome, chọn Next
![Page 14: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/14.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại License Agreement, chọn I accept the terms in the license agreement,
chọn Next
![Page 15: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/15.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Customer Information, khai báo Product Serial Number, chọn Next
![Page 16: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/16.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Setup Scenarios, chọn Forefront TMG services and Management
![Page 17: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/17.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Installation Path, khai báo đường dẫn cài đặt, chọn Next
![Page 18: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/18.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Define Internal Network, chọn Add để khai báo subnet sử dụng trong
hệ thống nội bộ
![Page 19: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/19.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
-
Trong hộp thoại Address, chọn Add Adapter...
![Page 20: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/20.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Select Network Adapters, đánh dấu chọn card INT (Card INT là card
mạng kết nối và nội bộ), chọn OK
![Page 21: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/21.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Define Internal Network, kiểm tra subnet nội bộ là 172.16.21.0-
172.16.21.255, chọn Next
![Page 22: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/22.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Services Warning, chọn Next
![Page 23: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/23.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Ready to Install the Program, chọn Install
![Page 24: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/24.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Sau khi cài đặt thành công,chọn Finish
![Page 25: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/25.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Vào Start\All Programs\Microsoft Forefront TMG Management, mở Forefront TMG
Management
![Page 26: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/26.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Getting Started Wizard, chọn Configure network settings
![Page 27: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/27.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
-Trong hộp thoại Welcome, chọn Next
![Page 28: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/28.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Network Template Selection, chọn Edge firewall, chọn Next
![Page 29: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/29.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Để chỉ định card mạng kết nối vào nội bộ, trong hộp thoại Local Area Network (LAN)
Setting, chọn card INT, chọn Next
![Page 30: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/30.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Để chỉ định card mạng kết nối ra Internet,trong hộp thoại Internet Settings, chọn card
EXT, chọn Next, chọn Finish
![Page 31: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/31.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Getting Started Wizard, chọn Configure system settings
![Page 32: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/32.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Welcome, chọn Next
![Page 33: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/33.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Host Identification, bảo đảm khai báo đúng thông tin của máy TMG
Server như trong hình bên dưới, chọn Nex, chọn Finish
![Page 34: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/34.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Getting Started Wizard, chọn Define deployment options
![Page 35: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/35.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Hộp thoại Welcome, chọn Next
![Page 36: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/36.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
-Trong hộp thoại Microsoft Update Setting, chọn use the Microsoft Update service to
check for updates, chọn Next
![Page 37: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/37.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
-Trong hộp thoại Forefront TMG Protection Features Setting, khai báo License cho NIS
& Web Protection như hình bên dưới, đánh dấu chọn Enable Mailware Inspection &
Enable URL Filtering, chọn Next
![Page 38: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/38.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Hộp thoại NIS Sgnature Update Settings, giữ nguyên cấu hình mặc định, chọn Next
![Page 39: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/39.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Hộp thoại Customer Feedback, chọn No, I don't want to participate, chọn Next
![Page 40: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/40.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Hộp thoại Microsoft Telemetry Reporting Service, chọn chế độ Basic, chọn Next &
Finish
![Page 41: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/41.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Trong hộp thoại Getting Started Wizard, bỏ dấu chọn Run the Web Access wizard, chọn
Close
![Page 42: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/42.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known
- Kiểm tra cài đặt Forefront TMG Server thành công
![Page 43: Cài đặt Forefront Threat Management Gateway 2](https://reader034.fdocument.pub/reader034/viewer/2022042613/552e2d254a7959c6598b4884/html5/thumbnails/43.jpg)
Tài liệu TMG 2010 - OpenLab
http://vinahost.vn/colocation.php - Sưu tầm nhutminhmedia – I Known You will Known