deploying virtual private networks with microsoft windows server 2003 phần 4

vì các vấn đề bảo mật vốn có với các phím được chia sẻ trước . Microsoft khuyến cáo mends việc sử dụng giấy chứng nhận cho tất cả các thông tin liên lạc IPSec cho phép bao gồm L2TP/IPSec. Để xác thực người dùng dựa trên giấy chứng nhận, nếu một công ty đã không triển khai dịch vụ thư mục , | Chapter 6 Deploying Remote Access VPNs 115 events. Windows Server 2003 IAS can log information to a local file and to a structured query language SQL Server database using the new SQL-Extended Markup Language SQL-XML logging features. This facility allows for centralized auditing and logging of the corporation s security services a very useful tool with multiple points of access to control logging and to generate reports. To enable and configure local file logging for Windows Server 2003 IAS 1. In the console tree of the Internet Authentication Service snap-in click Remote Access Logging. 2. In the details pane double-click Local File. 3. On the Settings tab select one or more check boxes for recording authentication and accounting requests in the IAS log files To capture accounting requests and responses select the Accounting Requests check box. To capture authentication requests access-accept packets and accessreject packets select the Authentication Requests check box. To capture periodic status updates such as interim accounting requests select the Periodic Status check box. 4. On the Log File tab type the log file directory as needed and select the log file format and new log time period. To enable and configure SQL Server database logging for Windows Server 2003 IAS 1. In the console tree of the Internet Authentication snap-in click Remote Access Logging. 2. In the details pane double-click SQL Server. 3. On the Settings tab select one or more check boxes for recording authentication and accounting requests in the IAS log files To capture accounting requests and responses select the Accounting Requests check box. To capture authentication requests access-accept packets and accessreject packets select the Authentication Requests check box. To capture periodic status updates such as interim accounting requests select the Periodic Status check box. 4. In Maximum Number Of Concurrent Sessions type the maximum number of simultaneous sessions that IAS can create .