Configuration initiale de Forefront TMG 2010

Configuration initiale de Forefront TMG 2010 :

 ________________________________________

Follow us on Facebook

Follow us on Google+

________________________________________

Cliquer sur Configure network settings 

Cliquer sur Next

Sélectionner le modèle de déploiement “Single network adapter”. 

Cliquer sur Next

Dans mon cas, la configuration IP était obtenue via DHCP. En production, vu que c’est un serveur, je recommande très fortement l’usage de paramètres IP fixes. Cliquer sur Next

Cliquer sur Finish

Cliquer sur Configure system settings

Ici il est possible de changer le nom du serveur ou son appartenance à un domaine ou groupe de travail. Dans mon cas, la machine est dans un workgroup. Cliquer sur Next

Cliquer sur Finish

Cliquer sur Define deployment options

Cliquer sur Next

Sélectionner Use the Microsoft Update Service to check for updates.

 Cliquer sur Next

Ici sélectionner les modes de licences de la protection NIS, de l’antivirus HTTP et du filtrage d’URL. Cliquer sur Next

Choisir ici le mode d’installation des mises à jour (signature antivirus HTTP, signatures NIS) ainsi que le comportement des réponses du NIS. Cliquer sur Next

Choisir ici si vous souhaitez participer au Customer Improvement Program. 

Cliquer sur Next

Choisir ici le niveau de remontée d’informations auprès de Microsoft. Cliquer sur Next.

Cliquer sur Finish

Cliquer sur Close

Maintenant on passe au paramétrage des règles d’accès Web

Configuration des règles d’accès Web

Cliquer sur Next

Sélectionner l’option proposée par défaut. Cliquer sur Next

Il est possible de modifier la liste des catégories à bloquer. Cliquer sur Next

Par défaut, il est proposé d’analyser (antivirus http) l’ensemble des contenus Web.

Cliquer sur Next.

Choisir ici si vous souhaitez faire de l’inspection sélectionner L’option proposée par défaut. Attention cependant : cette fonctionnalité nécessite d’utiliser un certificat “trusté” par les postes clients (ce qui peut nécessiter le déploiement sur les postes clients du certificat utilisé sur TMG).

Il est possible de notifier les utilisateurs de la présence de l’inspection SSL (c’est nécessaire légalement dans certains pays). Attention pour faire la notification, il faut déployer et utiliser le client pare-feu Forefront TMG sur les postes clients.

Cliquer sur Next

Dans mon cas, le certificat utilisé pour l’inspection HTTPS est un certificat auto-généré que je vais déployer sur mes postes clients. Exporter le certificat sous la forme d’un fichier.

Cliquer sur Next.

Définir ici la taille du fichier de cache du proxy. Cliquer sur Next.

Cliquer sur Finish pour terminer l’assistant de création des règles d’accès Web.

Le serveur est fonctionnel.

Privoxy

Privoxy

 ________________________________________

Follow us on Facebook

Follow us on Google+

________________________________________

Privoxy is a proxy software (proxy) to internet with an advanced filter to protect the privacy of users of your computer and make your Internet browsing more comfortable. Privoxy does this by modifying the contents unsafe web pages, managing Internet cookies (cookies), controlling access in and out of your computer to prevent inappropriate communications with non-secure content, and eliminating advertisements, banners embedded in the pages or in the form of pop-ups.

Privoxy is auto-configured after installation. This software is very flexible and can be configured to better meet your needs, if the initial configuration is insufficient. This software is useful in both a post personal computer in a network structure multi-systems.

Privoxy and anonymity on the Internet
Privoxy is a software that will make you anonymous on the Internet. It aims to make it more enjoyable than your Internet browsing and partially protect your privacy by blocking certain content unsafe or undesirable. Privoxy with only your Internet connection is identifiable.

Privoxy can be coupled to a software anonymous, so you will enjoy a pleasant navigation and anonymous in the Internet. If you are interested in coupling a anonymisateur with Privoxy, ask about the Tor software.

Installing and running Privoxy

Privoxy is available in the main section Universe repositories of software. To install it:

•      One-click install for all versions of Ubuntu

     or

•      Using your favorite package manager, install the package privoxy. You must be an administrator to complete this operation.

Once installed Privoxy is started automatically. It acts as a service (daemon), that is to say, it runs continuously in the background on your computer, without any special configuration interface or indication of its activity. Privoxy to start the service, open a terminal (Applications → Accessories → Terminal) and run the following command:

sudo service privoxy start

Configuring the connection to my Internet server 

Once installed Privoxy, you want to configure your Internet connection so that all connections are made to other websites are analyzed by Privoxy. To do this, configure the properties of proxy Ubuntu so that all connections to the Internet through the service Privoxy:

Set your preferences to use Privoxy proxy

1. Open the tool management proxy servers to Ubuntu (System Settings / Network / Proxy);
2. In the Configuration tab of the proxy server, select Manually configure the proxy server. then:

                      * select the Use the same proxy server for all protocols;

                      *field in the HTTP proxy server, enter the localhost address and port 8118; 

      

      3.(Optional) Press the Apply button to set the system ... for this configuration is applied to all users on your Ubuntu system. If you do not press this button, the new configuration will be applied to your user account. Other user accounts on your computer does not benefit Privoxy, unless you manually configure their settings individually connect to the Internet or if you apply the new settings to the entire system.

Now your Internet connection is filtered by Privoxy.

Change the listening port of Privoxy

Privoxy configuration is stored in the file / etc / privoxy / config, you must be an administrator to change
 

Locate the following line: 

listen-address 127.0.0.1:8118

This line indicates which interface Privoxy to listen to incoming and outgoing connections. To change the listening port of Privoxy, change the number after the colon (by default, 8118) by the port number to use Privoxy.

You must restart Privoxy for the change to take into account:

sudo service privoxy restart 

Do not keep track of sites visited

By default, Privoxy keeps a list of Web sites that a connection is made and all the witnesses intercepted to protect your privacy. You can absolutely want to disable the storage of these data in order to avoid leaving traces of your passage in your computer. (This can be very relevant in places where a computer is shared by multiple users, such as a public computer.) These modifications are performed in the Privoxy configuration file, / etc / privoxy / config, you must be an administrator to change it.

•      Not to keep a list of requests made to and from a website:

         1-Locate the following line:

          

                   debug 1 # show each Stock GET / POST / CONNECT request

         2-Comment out the line (that is to say, precede it with a hash mark):

                 # debug 1 # show each Stock GET / POST / CONNECT request

•      To disable the conservation witnesses intercepted:

          1- Locate the following line:

                  jarfile jarfile

         2- Comment out the line (that is to say, precede it with a hash mark):

         # jarfile jarfile

You must restart Privoxy for the change to take into account:

sudo service privoxy restart

 Troubleshooting

The service does not start automatically when Ubuntu

There is a problem with the default configuration Privoxy 3.0.13 as provided by Ubuntu. Privoxy is configured to listen for connections from the localhost: 8118. The problem is that when the service starts Privoxy, the hostname localhost is not yet associated with any known IP address.

To solve the problem, you must modify the configuration file so that Privoxy listens for connections from the address 127.0.0.1:8118. In this way, Privoxy does not need to make a connection between a host name (localhost) and IP address (127.0.0.1) as directly recognizes a local IP address valid. It can start automatically when Ubuntu.

To change the default configuration Privoxy:

      

       1-This can be qu'effectué by an administrator account. Sign in to an account with administrative rights, or ask an administrator to correct the problem for you;
       2-In a terminal, open the configuration file of Privoxy / etc / privoxy / config:

sudo gedit / etc / privoxy / config

       3-Search in section 4.1 listen-address in the configuration file. Locate the line starting with listen-address without sharp (~ line 741): this is what this place set the listen address of Privoxy. Change listen-address localhost: 8118 listen-address 127.0.0.1:8118 by, then save the change;
        

       4-Restart the Privoxy:

     sudo service privoxy restart

Now, Privoxy will start automatically when Ubuntu.