Crazy IT Professionals

Configuring Machine as the Default Proxy Using GPO in Windows ® Server 2008 To configure the Proxy Settings on all client machines to use GFI WebMonitor as a proxy server through Windows ® Server 2008 GPO: 1. In command prompt, key in mmc.exe and press Enter . 2. In the Console Root window, navigate to File > Add/Remove Snap-in… to open the Add or Remove Snap-ins window. Screenshot 14: Add/Remove Snap-ins window 3. Select Group Policy Management from the Available snap-ins list, and click Add . 4. Click OK . Screenshot 15: Console Root domain window 5. Expand Group Policy Management > Forest > Domains and <domain>, then select the organizational unit where you wish to apply the group policy. NOTE To apply the group policy to all domain computers , select the domain node directly. 6. Right-click Default Domain Policy and click Edit to open the Group Policy Management Editor . Screenshot 16: GPO

Disabling Internet Connections Page Using GPO in Windows ® Server 2008 To disable Connections settings on clients’ machines through Windows ® Server 2008 GPO: 1. In the command prompt key in mmc.exe and press Enter . 2. In the Console Root window, navigate to File > Add/Remove Snap-in… to open the Add or Remove Snap-ins window. Screenshot 102: Add/Remove Snap-ins window 3. Select Group Policy Management from the Available snap-ins list, and click Add . 4. Click OK . Screenshot 103: Console Root domain window 5. Expand Group Policy Management > Forest > Domains and <domain> . 6. Right-click Default Domain Policy and click Edit to open the Group Policy Management Editor . Screenshot 104: Group Policy Management Editor window 7. Expand User Configuration > Policies > Admin

In the configuration mode on the router or MSFC, issue the following to start NetFlow Export. First enable Cisco Express Forwarding: router(config)# ip cef router(config)# ip cef distributed And turn on flow accounting for each input interface with the interface command: interface ip flow ingress or use old (depricated) command: interface ip route-cache flow For example: interface FastEthernet0 ip flow ingress interface Serial2/1 ip flow ingress It is necessary to enable NetFlow on all interfaces through which traffic (you are interested in) will flow. Now, verify that the router (or switch) is generating flow stats - try command 'show ip cache flow'. Note that for routers with distributed switching (GSR's, 75XX's) the RP cli will only show flows that made it up to the RP. To see flows on the individual linecards use the 'attach' or 'if-con' command and issue the 'sh ip ca fl' on each LC. Enable the exports of