4. Lex Arm is a luxury brand based in Dubai that imports precious gems and jewelry products from various parts of world, such as India and South Africa. The company manages all the information about trade through a Windows-based network environment. This information includes highly sensitive financial records, gems quality testing procedures, and quality monitoring data. The company has an information security system in place that safeguards the data. However, the company exchanges this information with one of the suppliers over the public network through data files kept in the Labfiles folder on the Client1 machine, which is located in the corporate network. The supplier uses the Client2 machine to access this data. The management is concerned about the safety of this data exchanged over the public network. To address the security concern of management, the network team of the IT department is assigned the task to secure data over the public network. Eric, the Desktop Administrator, is a member of this team. What should Eric do to safeguard the data of the quality-testing team? Experiment To accomplish the assigned task, Eric needs to perform the following tasks: Share and access a folder. Configure an IPsec rule (through the IP Security Policy snap-in) in the 20687B-LON-CL1 virtual machine. Configure an IPsec rule (through the IP Security Policy snap-in) in the 20687B-LON-CL2 virtual machine. Verify the rules.

1. Share and access a folder.
2. Configure an IPsec rule (through the IP Security Policy snap-in) in the 20687B-LON-CL1 virtual
   machine.
3. Configure an IPsec rule (through the IP Security Policy snap-in) in the 20687B-LON-CL2 virtual
   machine.
4. Verify the rules.

Task 1. Share and Access a Folder.
To  Share and access a folder, you need to perform the following steps:

1. Ensure that the Start screen is displayed.
2. Type E:\, and then press the Enter key. the Allfiles (E:) window is displayed.
3. Right-click the Labfile folder, and then select the properties option. the Labfile proerties
   dialog box is displayed
4. Click the Sharing tab.
5. Click the Share button. the File Sharing dialog box is displayed.
6. Select the Everyone option from the drop-down list beside the Add button.
7. Click the Add button.
8. The Everyone name in displayed in list box.
9. Click the Share button. the your folder is shared og File Sharing dialog box is displayed.
10. Click the Done button. the Babfiles Properties dialog box is displayed.
11. Click the Close button.
12. Close the Allfiles(E:) window.
13. Ensure that the Start screen is displayed.
14. Double-click the Labfile folder. the Labfile window is displayed.
15. Close the Labfile window.

Task 2. Configure an IPsec rule (through the IP Security Policy snap-in) in the 20687B-LON-CL1 virtual
        machine.
To configure an IPsec rule, you need to perform the following steps:
1. Enter that the 20687B-LON-CD1 virtual machine is running and active.
2. Press the Windows+C keys. the Charms bar is displayed.
3. Click Search. the Search charm is displayed.
4. Type mmc.exe in the Apps text box, and then press the Enter key. the Microsoft Management Console window is displayed.
5.  maxinize the Microsoft Management Console window.
6. Select the File  Add/Remove Snap-in option from the menu bar. the Add or Remove Snap-ins dialog box is displayed.
7. Select the IP security Monitor option under the Snap-in column in the Available snap-ins list box.
8. Click the Add button.
9. Select the IP security policy Management option under the snap-in colimn in the Available snap-ins list box.
10. Click the Add button. the select computer or domain dialog box is displayed.
11.Ensure that the Local computer option in selected.
12. Click the OK button. the IP Security Monitor and IP security policies on Local computer snap-ins are displayed in the selected snap-ins list box.
13.  Click the OK Button. the Microsoft Management Console windows is displayed.
14. Expand the IP Security Monitor-- LON-CL1-- Active policy nodes in the leftpane. the policynot Assigned description is displayed under the Description
    column of the policy Name Item.
15. Select the Ip security Policies on Local computer node in the left pane.
16. Right-click the IPsecurity olicies on local computer node, and then select the creta I Security policy option. the IP security Policy Wizard is displayed.
17. Click the Next button. the IP Security Policy Name page is displayed.
18. Type TCP Rule in the Name text box.
19. Click the Next button. the Requests for decure Communication page is displayed.
20. Select the Avtivate the default reaponse rule (earlier versions of Windows only) check box.
21. Click the Next button. the Default Response Rule Authentication Method page is displayed.
22. Select the Use this string to protect the key exchange (preshared key) option.
23. Type the Securework text in the text area below the selected option.
24. Click the Next button. The Completing the Ip Security Policy Wizard page is displayed.
25.Ensure that the Edit properties check box is selected.
26. Click the Finish button. the TCP Rule properties dialog box is displayed.
27. Click the Add button. The Welcome to the Create IP security rule wizard page of security rule wizard is displayed.
28. Click the Next button. the Tunnel Endpoint page is displayed.
29. Click the Next button. the Network Type page is displayed.
30. Click the Next button. the IP Filter List page is displayed.
31. Click the Add button. the IP Filter List dialog box is displayed.
32. Type the TCP filter text in the Name text box.
33. Click the Add button. the Welcome to the IP Filter Wizaerd page of IP Filter Wizard is displayed.
34. Click the Next button. the IP Filter Description and Mirrored property page is displayed.
35. Type Configuring TCP/IP Rle in the Description text area.
36. Click the Next button. the IP Treffic souce page is displayed.
37. Click the Next button. The IP Treffic Destination page is dislayed.
38. Click the Next button. the IP Protocol Type page is displayed.
39. Select the TCP option from the select a protocol type drop-down list.
40. Click the Next button. the IP Protocol Port page is displayed.
41. Click the Next button. the Completing the I Filter Wizard page is displayed.
42. Click the Finish button. the IP filter list dialog box is displayed.
43. Click the OK button. the IP Filter List page is displayed

Task 3. Configure an IPsec rule (through the IP Security Policy snap-in) in the 20687B-LON-CL2 virtual machine.
To Configure an IPsec rule,you nedd perform the following steps:
1. switch to the 20687-LON-CL2 virtual machine.
2. Press the Windows+C keys. the charms bar is displayed.
3. Click Search. the Search cherm is displayed.
4. Type mmc.exe in the Apps text box, and then press the Enter key. the Microsoft Management Console window is displayed.
5. Maximize the Microsoft Management Console window.
6. Select the File Add/ Remove snap-in option from the menu bar. the Add or Remove snap-ins dialog box is displayed.
7. Select the IP security monitor option under the snap-in column in the Available snap list box.
8. Click the Add button.
9. Select the IP security policy Management option under the snap-in column in the Available snap-ins list box.
10. Click the Add button select Computer or Domain dialog box is displayed.
11. Ensure that the Local Computer option in selected.
12. Click the Finish button. the IP security monitor and IP security policies on Local Computer snap-ins are are displayed in the selected snap-ins list box.
13. Click the OK button. the Microsoft Management Console window is displayed.
14. Expand the IP security monitor LON-CL2 Active olicy nodes in the left pane. the policy not Assigned description  is displayed under the Description column of the policy
    Name item.
15. Select the IP security policies on local computer node in the left pane.


Task 4. Verify the rules.
To Verify the rules. you need to perform the following steps:

1. Switch to the 20687B-LON-CL1 machine.
2. Ensure that the IP security policies in local computer node in the left pane is selected.
3. Select the TCP Rule otion under the Name column in the middle pane.
4. Right-click the TCP Rule option, and then select the Assign option.
5. Switch to the 20687B-NON-CL2 machine.
6. Press the Windows key. the Start screen is displayed.
7. Type\\LON-CL1, and then press the Enter key. After a few minutes, the Nerwork Error message is displayed.
8. Click the Cancel button. the Microsoft Management Console window is displayed.
9. Select the TCP Rule option under the Name columu in the middle pane.
10. Right-click the TCPRule option, and then select the assign option.
11. Press the windows key. the Start screen is dislayed.
12. Type \\LON-CL1, and then press the Enter key. After a few moments, the LON-CL1 window is displayed.
13. Close the LON-CL1 window.
14. Close the Microsoft Management console window without seving any changes.
15. Sign out and revert the 20687B-LON-CL2 virtual machine.
16. Switch to the 20687B-LON-CL1 machine.
17. Close the Microsoft Management Console window without saving any changes.
18. Sign out and revert the 20687B-LON-CL1 virtual machines.