DispersedNet
SiteMap
Active Directory
DHCP - TCPIP
Disaster Recovery
Install Windows
Proxy Server
Terminal Services
Internet Proxy Server
«Prev
Internet Proxy Server
Network Address Translation
NAT Protocol
Non-NAT Protocols
Functional Design Decisions
Nat-with-services
Selecting NAT Server
NAT Conclusion
Securing NAT Solution
Restricting Internet Traffic
Access Address Pools
Enhancing NAT Security
NAT Design Performance
Securing NAT Designs
Microsoft Proxy Server
Proxy Server Features
Design Decisions Solution (L3)
Integrate Networking Services
Functional ProxyServer Solution(L5)
Placing within Network
Integrate Proxy Server(L7)
Determine Client Requirements
Proxy Server Conclusion
Securing Proxy Server
Restrict Internet Access
Screened Subnet
Packet Filtering Firewall
Restricting Outbound Traffic
Proxy Server Access
Secure Proxyserver Conclusion
Proxy Server Design
Enhancing Outbound Availability
Reserving Addresses from the Address Pool and defining Special Port Mappings
NAT solution 1) Includes Multiple public IP addresses 2) Includes only ONE public IP address
Course of Action:
You must place the addresses in an address pool to enable private network resource access.
Benefit:
Address pools enable NAT to examine Internet-based requests and forward the requests to resources on a server within the private network
Benefit:
Using address pools allows access to all of the IP ports on the resource server.
If the security specifications of the design requires restricted IP port access, you can use Routing and Remote Access filters to restrict port access.
Special requirements:
You must obtain and reserve a public IP address in the NAT address pool for each resource server on the private network.
Course of Action:
You must define special port mappings within Routing and Remote Access to enable private network resource access.
Benefit:
Special port mappings enable NAT to examine the IP address and port number of Internet based requests.
NAT is able to forward the requests to a specific IP address and port number of a resource server within the private network.
For each resource that you share with the Internet, you must define separate special port mappings in Routing and Remote Access.