Assignment 2: Secure Intranet Portal Login Background: You are the security professional for a medium-sized manufacturing company. The organization would like to deploy a secure portal for in-house use only. The portal will be available from the company's intranet. The company is utilizing a Microsoft Internet Information Services (IIS) server to run the local intranet website. The portal will be created by in-house programming staff utilizing ASP.NET technology and scripting. The management requires the login to be protected using Hypertext Transfer Protocol Secure (HTTPS). In addition, the management would like to use an integrated login so that users do not have to remember or create a separate username or password for this portal login. The company is using a Windows Server 2012 Active Directory infrastructure. All users logging on to the portal also have existing active directory user accounts. The company also has an in-house Windows Server that serves as a local certificate authority for other existing web applications and services. Tasks: Create a 4- to 5-page report that will be shared with the company's board of directors, providing guidance and recommendations on how to best secure the web portal. Your report should cover the following aspects: Describe what Windows-integrated authentication is and how it could potentially be used to provide secure access control to the portal. Describe the use of Windows security groups and explain how a connection to active directory could be performed using the existing technology (existing IIS server and Windows Server 2012 Active Directory). Describe how Windows certificate services work. Recommend a solution that would utilize the in-house Windows certificate authority server to provide a certificate to the new portal. Explain how users can connect and log on to the portal in a secure fashion using secured socket layer (SSL) or HTTPS to ensure that all login credentials and activities on the portal are secure and encrypted. Ensure that you write in a clear, concise, and organized manner; demonstrate ethical scholarship in accurate representation and attribution of sources; and display accurate spelling, grammar, and punctuation. Submission Details: Create your report in a Microsoft Word document. Save the document as M4_A2_Lastname_Firstname.doc. By  Wednesday, June 14, 2017 , submit your document to the  M4 Assignment 2 Dropbox . Assignment 2 Grading Criteria Maximum Points Described what Windows-integrated authentication is and explained how it could potentially be used to provide secure access control to the portal. 20 Described the use of Windows security groups and how a connection to active directory could be performed using the existing technology (existing IIS server and Windows Server 2012 Active Directory). 20 Described how Windows certificate services work. Recommended a solution that would utilize the in-house Windows certificate authority server to provide a certificate to the ne.

1. Assignment 2: Secure Intranet Portal Login
Background:
You are the security professional for a medium-sized
manufacturing company. The organization would like to deploy
a secure portal for in-house use only. The portal will be
available from the company's intranet. The company is utilizing
a Microsoft Internet Information Services (IIS) server to run the
local intranet website. The portal will be created by in-house
programming staff utilizing ASP.NET technology and scripting.
The management requires the login to be protected using
Hypertext Transfer Protocol Secure (HTTPS). In addition, the
management would like to use an integrated login so that users
do not have to remember or create a separate username or
password for this portal login. The company is using a Windows
Server 2012 Active Directory infrastructure. All users logging
on to the portal also have existing active directory user
accounts. The company also has an in-house Windows Server
that serves as a local certificate authority for other existing web
applications and services.
Tasks:
Create a 4- to 5-page report that will be shared with the
company's board of directors, providing guidance and
recommendations on how to best secure the web portal. Your
report should cover the following aspects:
Describe what Windows-integrated authentication is and how it
could potentially be used to provide secure access control to the
portal.
Describe the use of Windows security groups and explain how a
connection to active directory could be performed using the
existing technology (existing IIS server and Windows Server
2012 Active Directory).
Describe how Windows certificate services work. Recommend a
solution that would utilize the in-house Windows certificate
authority server to provide a certificate to the new portal.
Explain how users can connect and log on to the portal in a

2. secure fashion using secured socket layer (SSL) or HTTPS to
ensure that all login credentials and activities on the portal are
secure and encrypted.
Ensure that you write in a clear, concise, and organized manner;
demonstrate ethical scholarship in accurate representation and
attribution of sources; and display accurate spelling, grammar,
and punctuation.
Submission Details:
Create your report in a Microsoft Word document.
Save the document as M4_A2_Lastname_Firstname.doc.
By
Wednesday, June 14, 2017
, submit your document to the
M4 Assignment 2 Dropbox
.
Assignment 2 Grading Criteria
Maximum Points
Described what Windows-integrated authentication is and
explained how it could potentially be used to provide secure
access control to the portal.
20
Described the use of Windows security groups and how a
connection to active directory could be performed using the
existing technology (existing IIS server and Windows Server
2012 Active Directory).
20
Described how Windows certificate services work.
Recommended a solution that would utilize the in-house
Windows certificate authority server to provide a certificate to
the new portal.
20
Explained how users can connect and log on to the portal in a
secure fashion using SSL/HTTPS to ensure that all login
credentials and activities on the portal are secure and encrypted.
20
Wrote in a clear, concise, and organized manner; demonstrated

3. ethical scholarship in accurate representation and attribution of
sources (i.e., APA); and displayed accurate spelling, grammar,
and punctuation.
20
Total:
100