WEBVTT

00:01.140 --> 00:02.219
Hey, everyone, welcome back to the

00:02.220 --> 00:03.539
course. So in the last video, what

00:03.540 --> 00:05.159
we did is a quick acknowledgment and

00:05.160 --> 00:06.209
so again, we just ran that against

00:06.210 --> 00:07.320
our server IP address.

00:07.680 --> 00:08.519
Now, what we're going to do with

00:08.520 --> 00:09.659
this video is we're actually going

00:09.660 --> 00:11.489
to go change some Windows

00:11.490 --> 00:12.959
firewall settings and then we're

00:12.960 --> 00:14.339
going to run a scan against it.

00:14.370 --> 00:15.839
Now, one thing I want to mention in

00:15.840 --> 00:17.629
advance is once we make this

00:17.880 --> 00:19.289
the setting change and may kind of

00:19.290 --> 00:21.359
lock up the virtual machine.

00:21.360 --> 00:22.859
And so we'll want to reset it before

00:22.860 --> 00:24.960
we move on to the next lab video

00:25.170 --> 00:26.639
so we can complete the task in those

00:26.640 --> 00:28.199
labs. So just FYI on that is

00:28.200 --> 00:29.159
something I discovered during

00:29.160 --> 00:31.239
testing, not a huge issue where,

00:31.260 --> 00:32.429
you know, if you've ever worked with

00:32.729 --> 00:33.954
virtual labs environments

00:34.650 --> 00:36.749
in the past that you know or hosted

00:36.750 --> 00:38.609
or something, you may have little

00:38.610 --> 00:39.629
glitches like that and that's

00:39.630 --> 00:40.630
perfectly fine.

00:41.430 --> 00:42.239
Ah, so let's go ahead and get

00:42.240 --> 00:43.199
started. So the first thing we're

00:43.200 --> 00:44.519
going to do is actually connect to

00:44.520 --> 00:45.489
our server machine.

00:45.490 --> 00:46.519
So the pilot C0 wants

00:47.400 --> 00:48.419
to just go ahead and click on that,

00:48.420 --> 00:49.500
a setup machine there.

00:49.980 --> 00:51.869
You can minimize this control

00:51.870 --> 00:53.069
panel here for the example.

00:53.610 --> 00:54.809
We can minimize that down.

00:56.210 --> 00:57.319
And then what we're going to do is

00:57.320 --> 00:58.819
we're going to search in the start

00:58.820 --> 00:59.839
menu, so we're going to right click

00:59.840 --> 01:00.829
on the start menu. We're going to

01:00.830 --> 01:03.380
search for firewall dot kpl

01:03.590 --> 01:05.059
and then basically just click OK, or

01:05.060 --> 01:06.285
hit the keyboard and that

01:06.890 --> 01:07.879
will go ahead and pull up the

01:07.880 --> 01:09.799
windows firewall for us.

01:11.500 --> 01:12.940
So we've got to right click,

01:13.360 --> 01:14.536
go to search and then do

01:15.190 --> 01:17.069
firewall up

01:17.330 --> 01:19.000
excuse me, we're going to go to run

01:19.900 --> 01:21.219
click on the wrong one there and

01:21.220 --> 01:23.180
we're going to do firewall dot

01:23.200 --> 01:25.210
CBl all lower case.

01:25.540 --> 01:26.889
And then again, you can either click

01:26.890 --> 01:28.840
OK or just enter your keyboard

01:29.320 --> 01:30.699
and you'll see it'll pull it up for

01:30.700 --> 01:31.700
us here.

01:32.740 --> 01:33.979
Ah, so our next step here going to

01:33.980 --> 01:35.499
click here and step six, we're going

01:35.500 --> 01:36.849
to click where it says Turn Windows

01:36.850 --> 01:38.109
Firewall on or off.

01:38.120 --> 01:39.729
So it's right here on the left side

01:39.730 --> 01:40.730
of your screen.

01:41.170 --> 01:42.519
And then it gives us some setting

01:42.520 --> 01:43.909
options that we can change.

01:45.430 --> 01:46.870
So what we're going to do now, we're

01:46.960 --> 01:48.069
step seven, is you're telling us

01:48.070 --> 01:49.149
that we're looking at this particular

01:49.150 --> 01:50.349
screen in the background there.

01:50.620 --> 01:51.789
So now what we're going to do is

01:51.790 --> 01:53.829
we're going to under this top box

01:53.830 --> 01:54.969
here. We're going to check the box

01:54.970 --> 01:56.244
next to block all incoming

01:56.410 --> 01:58.359
connections, including those in

01:58.360 --> 01:59.590
the list of allowed apps.

02:00.550 --> 02:02.265
And then so we're going to put that

02:02.560 --> 02:03.999
checkbox right there and then we're

02:04.000 --> 02:05.169
we're we're going to do here at this

02:05.170 --> 02:06.849
bottom box is click the turn on

02:06.850 --> 02:08.349
Windows firewall and then check that

02:08.350 --> 02:09.624
same type of type of block

02:10.449 --> 02:11.449
right there.

02:12.190 --> 02:13.689
So that's all we're going to do

02:13.690 --> 02:14.949
here. So those are the two setting

02:14.950 --> 02:16.449
changes that we have in steps eight

02:16.450 --> 02:17.450
and nine.

02:17.500 --> 02:18.429
And then we're just going to click

02:18.430 --> 02:19.779
OK to see the changes and we're

02:19.780 --> 02:20.979
going to go back to our Windows time

02:20.980 --> 02:22.401
machine and then just run our

02:22.840 --> 02:24.369
same acknowledgment scan that we did

02:24.370 --> 02:25.599
earlier. We're going to run the same

02:25.600 --> 02:26.600
command again.

02:26.920 --> 02:27.699
So let's go and do that.

02:27.700 --> 02:28.809
And we're just going to say, OK, to

02:28.810 --> 02:30.639
that, go back to our

02:30.640 --> 02:31.640
Windows 10 machine.

02:32.380 --> 02:33.909
And if we stayed on this server

02:33.910 --> 02:34.929
machine, we would see probably an

02:34.930 --> 02:35.949
error message here in a moment.

02:36.070 --> 02:36.999
But we don't care about that.

02:37.000 --> 02:38.349
We just care about coming back here

02:38.530 --> 02:39.550
and running our command

02:40.630 --> 02:42.394
so we can type in this command again

02:43.120 --> 02:44.120
if you want to.

02:44.260 --> 02:45.759
The easiest way to do it is just

02:45.760 --> 02:47.279
press up arrow on your keyboard

02:47.650 --> 02:49.149
and you'll see it'll pre default.

02:49.150 --> 02:50.469
All the information we just typed

02:50.470 --> 02:52.029
for the last command we typed in

02:52.030 --> 02:53.030
there for us.

02:53.110 --> 02:54.459
And if we went, you know, if we did

02:54.460 --> 02:55.659
the up arrow some more, we could go

02:55.660 --> 02:56.769
back to the previous command, et

02:56.770 --> 02:57.770
cetera.

02:58.120 --> 02:59.443
So here's our command here.

02:59.650 --> 03:01.149
All we have to do now is hit the

03:01.150 --> 03:02.649
entertainer keyboard and it'll go

03:02.650 --> 03:03.699
ahead and run that command.

03:04.670 --> 03:05.869
Now, as I mentioned before, it takes

03:05.870 --> 03:06.870
a moment or so to run this.

03:06.890 --> 03:08.089
I'm going to pause the video briefly

03:08.090 --> 03:09.199
and once it comes back up with

03:09.200 --> 03:10.699
results, I'll go ahead and start the

03:10.700 --> 03:11.700
video again.

03:13.150 --> 03:14.439
All right, so we see that I have my

03:14.440 --> 03:15.969
results on the screen again, if you

03:15.970 --> 03:17.199
haven't gotten your results back

03:17.200 --> 03:19.119
from the scan behind the video,

03:19.120 --> 03:19.989
just wait until you get your

03:19.990 --> 03:20.990
results.

03:21.010 --> 03:22.329
But we have one question we want to

03:22.330 --> 03:23.770
answer here in our lab documents.

03:23.780 --> 03:25.495
So now if we're looking at Port 80,

03:25.870 --> 03:27.539
is it showing us filter on filters?

03:27.550 --> 03:29.049
If you remember before it showed us

03:29.050 --> 03:30.050
unfiltered.

03:30.790 --> 03:32.169
So let's take a look at our outputs.

03:32.170 --> 03:33.489
We see again, the second line from

03:33.490 --> 03:35.049
the bottom there we see that it's

03:35.050 --> 03:36.910
now showing as filtered.

03:38.410 --> 03:39.879
All right, so if you think back, we

03:39.880 --> 03:41.469
changed Windows firewall setting, we

03:41.470 --> 03:42.909
actually turned on Windows firewall,

03:42.910 --> 03:44.559
so now it's filtering stuff through

03:44.560 --> 03:46.324
that particular firewall in the host

03:46.330 --> 03:47.709
machine there. And that's why we're

03:47.710 --> 03:49.569
showing filtered as our output

03:49.750 --> 03:51.099
here inside of Calli Linux.

03:52.150 --> 03:53.229
So in this video, we just made a

03:53.230 --> 03:54.279
quick firewall setting.

03:54.280 --> 03:55.359
We basically turned on Windows

03:55.360 --> 03:56.649
firewall and then we went ahead to

03:56.650 --> 03:58.119
run another acknowledgment scan to

03:58.120 --> 03:59.679
see what kind of difference we had

03:59.680 --> 04:00.680
gotten in the results.

04:00.760 --> 04:02.019
And we noticed that now it's showing

04:02.020 --> 04:03.279
us filtered, which makes perfect

04:03.280 --> 04:04.989
sense because we just turned on the

04:04.990 --> 04:05.990
firewall.

04:06.540 --> 04:07.439
All right, so we're going to continue

04:07.440 --> 04:09.059
on in the next video with additional

04:09.060 --> 04:09.840
scanning lab.