Sophos XG SMB Deployment P.2

Welcome back, let’s setup Active Directory add some OU’s, users, groups, a virtual printer and some GPO’s. We will also setup DHCP with a few scopes and scope options. We will pick up where we left off last after setting up the firewall and switch. I have split this video into 3 parts its longer then I wanted it to be.

More details below…

Who’s this guide for:

This Lab is perfect for an IT professional or a beginner who is looking at getting experience with Sophos XG firewall and Microsoft Systems

What’s included in the video:

In this Lab I will walk you through the following:

  • Setup Server 2022
    • ADDC
    • DHCP
    • Nic Team
  • Add required services(ports)
    • TCP 88 (Kerberos Key Distribution Center)
    • TCP 135 (Remote Procedure Call)
    • TCP 139 (NetBIOS Session Service)-SAMBA
    • TCP 389 (LDAP)
    • TCP 445 (SMB,Net Logon)
    • UDP 53 (DNS)
    • UDP 389 (LDAP, DC Locator, Net Logon)
    • TCP 49152-65535 (Randomly allocated high TCP ports) – Print Spooler as well

    Optional

    • UDP 123 (NTP)
    • TCP 53 (DNS)
    • TCP 464 ( Kerberos Password V5 – Used when user change their password from desktop)
    • UDP 137 (NetBIOS Name Resolution)
    • UDP 138 (NetBIOS Datagram Service)
    • TCP 636 (LDAP SSL)
    • UDP 636 (LDAP SSL)
    • TCP 3268 (Global Catalog)

  • Create Firewall rules
    • Inter VLAN rules for access to Server
    • Drop Rules

What’s required

 

To get started you’ll need:

Sophos XG 18 Image

Windows Server 2022 Eval

Aruba OS-CX Image

Windows 10 Eval

 

Hardware/Software used in this lab:

IBM X3550 M4

Eve-ng pro (running bare-metal)

Sophos XG 18 – KVM Image

Windows Server 2022 Eval ISO

Aruba OS-CX – KVM Image

Windows 10 Eval  ISO

Leave a Reply

Your email address will not be published. Required fields are marked *