IS3220 Identify Services and Their Uses
Scan Analysis
After reviewing the port scan results for the indicated hosts, one can readily see that some of these services must be disabled. Authentication services are necessary, I recommend configuring the system to pass or allow this service. The three services I know to be unnecessary, based on our network topology are the Secure Shell (SSH), Microsoft Remote Procedure Call (MSRPC), File Transfer Protocol (FTP). Simple Mail Transfer Protocol (SMTP) is essential to email communications in a Windows network, this service allows users within the network to send and receive emails. We do not allow remote users at this time, due to this MSRPC should be disabled, this protocol was heavily used in Windows 2000 environments, but is now highly vulnerable, and most networks have it disabled.
Identify Services & Their Uses
Domain
This is the website, or web domain being utilized.
HTTP
The protocol being used during web browsing. The HTTP Service is a kernel mode driver. Upon service failure, the error is logged. Windows 8 startup proceeds, but a message box is displayed informing you that the HTTP service has failed to start.
SSH
Is an encryption protocol for remote users during shell sessions.
AUTH
This is the authentication service.
TCPwrapped
This indicates the service uses a TCPwrapper. This is a host based network in ACL system used to filter Internet Server Protocols provides firewall features.
MSRPC
This is used by Microsoft to seamlessly create a client/server model in Windows NT, with very little effort.
SMTP
Simple Mail Transfer Protocol. This is used to send and receive email messages between clients.
NETBIOS-SSN
This is a session service protocol used for file and printer sharing.
Microsoft-DS
MS-DS is a port used ever since Windows 2000 was introduced. It is used for file sharing.
Unknown
This occurs when a scanner scans itself, disregard.
FTP
File Transfer Protocol. This is the main protocol, or service that is utilized during file transferring between
After reviewing the port scan results for the indicated hosts, one can readily see that some of these services must be disabled. Authentication services are necessary, I recommend configuring the system to pass or allow this service. The three services I know to be unnecessary, based on our network topology are the Secure Shell (SSH), Microsoft Remote Procedure Call (MSRPC), File Transfer Protocol (FTP). Simple Mail Transfer Protocol (SMTP) is essential to email communications in a Windows network, this service allows users within the network to send and receive emails. We do not allow remote users at this time, due to this MSRPC should be disabled, this protocol was heavily used in Windows 2000 environments, but is now highly vulnerable, and most networks have it disabled.
Identify Services & Their Uses
Domain
This is the website, or web domain being utilized.
HTTP
The protocol being used during web browsing. The HTTP Service is a kernel mode driver. Upon service failure, the error is logged. Windows 8 startup proceeds, but a message box is displayed informing you that the HTTP service has failed to start.
SSH
Is an encryption protocol for remote users during shell sessions.
AUTH
This is the authentication service.
TCPwrapped
This indicates the service uses a TCPwrapper. This is a host based network in ACL system used to filter Internet Server Protocols provides firewall features.
MSRPC
This is used by Microsoft to seamlessly create a client/server model in Windows NT, with very little effort.
SMTP
Simple Mail Transfer Protocol. This is used to send and receive email messages between clients.
NETBIOS-SSN
This is a session service protocol used for file and printer sharing.
Microsoft-DS
MS-DS is a port used ever since Windows 2000 was introduced. It is used for file sharing.
Unknown
This occurs when a scanner scans itself, disregard.
FTP
File Transfer Protocol. This is the main protocol, or service that is utilized during file transferring between